Aggregator

在公布了低于分析师预期的财报之后，英特尔股价周五暴跌 30%，创 1982 年以来最大单日跌幅。曾经的芯片巨人如今市值不到其主要竞争对手 AMD 的一半。英特尔公布的二季度营收为 128.3 亿美元，比去年同期下降 1%，低于分析师预期的 129.4 亿美元；英特尔将三季度的营收预期下调至 125-135 亿美元，低于分析师预期的 143.5 亿美元。CEO Pat Gelsinger 称下半年的情况比预期的更富有挑战性，公司采取了果断行动提高运营和资本效率。英特尔的行动包括了裁员 15%，它目前有大约 13 万名员工，15% 意味着裁员总数将超过 1.5 万。因对美国经济衰退的担忧加剧，周五全球股市都暴跌。

A novel Linux Kernel cross-cache attack named SLUBStick has a 99% success in converting a limited heap vulnerability into an arbitrary memory read-and-write capability, letting the researchers elevate privileges or escape containers. [...]

A vulnerability classified as problematic has been found in IBM Business Automation Workflow 22.0.2/23.0.1/23.0.2/24.0.0. Affected is an unknown function. The manipulation leads to sensitive information in log files. This vulnerability is traded as CVE-2024-38321. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

Authors/Presenters:Deevashwer Rathee, Anwesh Bhattacharya, Divya Gupta, Rahul Sharma, Dawn Song

Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating from the conference’s events situated at the Anaheim Marriott; and via the organizations YouTube channel.

Permalink

The post USENIX Security ’23 – Secure Floating-Point Training appeared first on Security Boulevard.

Authors/Presenters:Deevashwer Rathee, Anwesh Bhattacharya, Divya Gupta, Rahul Sharma, D

Аналоговые технологии прошлого могут предложить неожиданные решения для энергетических проблем современных ИИ-систем.

Глубина бассейна и её влияние на достижения спортсменов.

Russia-linked APT used a car for sale as a phishing lure to target diplomats with HeadLace malware

A Russia-linked APT used a car for sale as a phishing lure to deliver a modular Windows backdoor called HeadLace. Palo Alto researchers reported that a Russia-linked threat actor known as Fighting Ursa (also identified as APT28, Fancy Bear, or Sofacy) used a fake car advertisement to distribute HeadLace backdoor malware, targeting diplomats. The campaign began […]

A Chinese hacking group tracked as StormBamboo has compromised an undisclosed internet service provider (ISP) to poison automatic software updates with malware. [...]

Meta 推出的与 Twitter 竞争的微博客服务 Threads 其活跃用户突破了 2 亿。负责 Instagram 的 Meta 高管 Adam Mosseri 表示，@threads 突破了 2 亿的里程碑，他希望 Threads 能激发拉近人们距离的想法，让社区能继续发展壮大。Threads 是在 Twitter/X 在马斯克管理下面临不确定的时代推出的，2023 年 7 月推出时在短时间内吸引了上亿用户下载，2024 年 4 月活跃用户达到 1.5 亿，一周年的 2024 年 7 月活跃用户达到 1.75 亿，一个月后突破了 2 亿。扎克伯格（Mark Zuckerberg）希望 Threads 的用户数能达到 10 亿，他对其发展状况表示了满意。

从 Google Chrome v127 起，浏览器开始警告用户 uBlock Origin（uBO）可能在不久后被禁用。uBlock Origin 是 Manifest v2 扩展，而 Chrome 准备淘汰 Manifest v2 扩展系统，全面采用 Manifest V3 扩展系统，uBO 没有相应的 Manifest V3 扩展，因为后者限制了原 Manifest v2 提供的功能。uBO 主开发和维护者 Raymond Hill 开发了一个使用 Manifest V3 的精简版本 uBO Lite(uBOL) 。但两者在功能上并不等价。Raymond Hill 承诺会继续开发 uBO，因为其它浏览器如 Firefox 仍然支持 Manifest v2。

Vaartuigen in alle kleuren van de regenboog trokken vandaag over de Amsterdamse grachten tijdens de Canal Parade. Ook de defensieboot was weer van de partij. Aan boord salueerden bijna 100 militairen en hun burgercollega’s naar een juichend en applaudisserend publiek. Met hun deelname lieten ze zien dat Defensie een organisatie is waar iedereen zichzelf kan zijn.

Mike DeKock, Founder and CEO at MJD AdvisorsAs data security increases with the demand to seal syst

This project is definitely one of the most advanced of mine. I started programming a web BMD viewer

By Byron V. AcohidoWhen Tennisha Martin, a veteran software quality assurance analyst

When Tennisha Martin, a veteran software quality assurance analyst, sought to move over to a security team a few years ago, the doors should have been wide open, given the much-ballyhooed cybersecurity skills shortage.

Related: Modernizing security training

Instead, … (more…)

The post Black Hat Fireside Chat: ‘Black Girls Hack’ emphasizes diversity as effective force multiplier first appeared on The Last Watchdog.

The post Black Hat Fireside Chat: ‘Black Girls Hack’ emphasizes diversity as effective force multiplier appeared first on Security Boulevard.

A vulnerability was found in templatespare Build Your Dream Website Fast up to 2.4.2 on WordPress. It has been rated as problematic. This issue affects the function templatespare_activate_required_theme/templatespare_get_theme_status. The manipulation leads to missing authorization. The identification of this vulnerability is CVE-2024-6872. The attack may be initiated remotely. There is no exploit available.

Drltrace是适用于Windows和Linux应用程序的动态 API调用跟踪器。