Aggregator

大英博物馆（British Museum）网络基础设施遭被解雇的 IT 雇员破坏而于周五部分关闭。博物馆本周末继续开放，但付费展如丝绸之路展只有少数持票者能参观，因为管理预订的 IT 系统无法使用。博物馆发言人称，上周被解雇的 IT 合同工周四晚上闯入博物馆关闭了多个系统，警察到场逮捕了他。

Author/Presenter: Tim Clevenger

Our sincere appreciation to DEF CON, and the Authors/Presenters for publishing their erudite DEF CON 32 content. Originating from the conference’s events located at the Las Vegas Convention Center; and via the organizations YouTube channel.

Permalink

The post DEF CON 32 – Access Control Done Right The First Time appeared first on Security Boulevard.

The Pwn2Own Automotive 2025 hacking contest has ended, and participants earned $886,250 after demonstrating 49 zero-day flaws. The Pwn2Own Automotive 2025 hacking contest has ended, and participants earned $886,250 after demonstrating 49 zero-day flaws. Sina Kheirkhah (@SinSinology) of Summoning Team (@SummoningTeam) obtained 30.5 Master of Pwn points and won the Master of Pwn earning $222.250. […]

今日暂未更新资讯~
更多最新文章，请访问SecWiki

巴基斯坦议会下院周四通过了一项受争议法案，赋予政府对社交媒体的全面控制，包括逮捕传播虚假信息的网民。批评者称政府正试图进一步遏制言论自由。根据《Prevention of Electronic Crimes Act》，巴基斯坦政府将成为一个新机构，该机构有权下令立即屏蔽社交媒体上被认为“非法和冒犯性”的内容，如批评法官、军方、议会或省议会的内容。发布此类内容的个人和组织也可能被社媒屏蔽。

New York State has announced a $2,000,000 settlement with PayPal over charges it failed to comply with the state's cybersecurity regulations, leading to a 2022 data breach. [...]

在微积分上犯错的人类通常会对微积分相关的其它问题说“我不会”。但 AI 或者大模型犯的错误和人类不同。AI 的错误看起来是随机发生的，不是围绕特定主题，大模型在微积分上犯错的可能性与说出卷心菜吃山羊的可能性差不多。大模型和人类一样会非常自信的说完全错误的话，它这种随机的错误让人难以信任其在复杂多步骤问题中的推理。如果你想要将 AI 应用于解决业务问题，仅仅让它了解产品盈利的因素是不够的，它可能会忘记钱是什么东西。

ИИ понимает контекст и действует соответственно.

Власти обещают защитить туристов и граждан.

370 名富豪向全球各国政府和国家领导人递交了一封公开信，呼吁向自己这样的超级富豪多征税。这封公开信写道：“经验告诉我们，超级富豪相比其他任何人拥有更多发言权。这令人不适，但确是现实。”信中指出，由此可见，极端财富对民主产生威胁。而解决方案简单快捷：“必须对我们这些超级富豪征税。”数据显示，富人越来愈富，穷人越来越穷。过去一年全球新增 204 位亿万富翁。此外，超级富豪的财富总值也在快速增加：从 13 万亿美元增长至 2024 年的 15 万亿美元。然而，与此同时，全球有 7.3 3亿人食不果腹，比 2019 年多出约 1.52 亿人。全球目前共有 2,769 位亿万富翁。2024 年这些亿万富翁的财富增长速度是 2023 年的三倍。最富有的 10 位亿万富翁的财富值平均每天增长 1 亿美元。

A vulnerability has been found in IBM Control Center 6.2.1/6.3.1 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to exposure of information through directory listing. This vulnerability is known as CVE-2024-35113. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in IBM Control Center 6.2.1/6.3.1. Affected is an unknown function. The manipulation leads to observable response discrepancy. This vulnerability is traded as CVE-2024-35114. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in IBM Control Center 6.2.1/6.3.1. This issue affects some unknown processing. The manipulation leads to basic cross site scripting. The identification of this vulnerability is CVE-2024-35112. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in IBM Control Center 6.2.1/6.3.1. This vulnerability affects unknown code. The manipulation leads to information exposure through error message. This vulnerability was named CVE-2024-35111. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

微软去年宣布为 PC 键盘引入了一个专门的 Copilot 按键，类似 Windows 按键，Copilot 键按下之后会在 Windows 中打开 Copilot AI 助手。然而 PC 并不只运行 Windows，那么 Copilot 按键在 Linux 下会对应什么功能？Linux 6.14 合并了联想工程师 Mark Pearson 递交的补丁，加入了对 Copilot 按键的支持，但 Copilot 键在 Linux 下的具体功能由桌面环境决定。

Технологии снова подводят.

#Docker #.C多平台交叉编译工具 #Chameleon reverse shell #C #Windows #Linux #Mac

A vulnerability was found in Vignette Content Suite 4.0/5.0/6.0/7.0. It has been declared as problematic. This vulnerability affects unknown code of the component Default Login Template. The manipulation of the argument errInfo leads to basic cross site scripting. This vulnerability was named CVE-2003-0404. The attack can be initiated remotely. Furthermore, there is an exploit available.

A vulnerability was found in LBL tcpdump up to 3.9.1. It has been declared as problematic. Affected by this vulnerability is the function decode_prefix4. The manipulation leads to infinite loop. This vulnerability is known as CVE-2005-1267. The attack can be launched remotely. Furthermore, there is an exploit available.