Aggregator

三名台积电工程师因窃取 2 纳米工艺机密被起诉

Solidot
1 month 1 week ago
台检方以国家安全法国家核心关键技术营业秘密之域外使用等罪嫌，起诉工程师陈力铭、吴秉骏、戈一平 3 人，最重求刑 14 年。台积电表示，对任何违反保护营业秘密及损害公司利益的行为，始终秉持零容忍态度，绝对从严处理，并追究到底。三人中陈力铭已转职到日本 Tokyo Electron 的子公司。这名前台积电员工为了提升 Tokyo Electron 作为台积电开发的电路线宽 2 纳米的新一代半导体设备供应商的地位，拜托台积电的技术人员提供营业秘密。

FBI Issues Updated Warning on Salt Typhoon’s Global Cyber-Espionage Operations

Security Boulevard
1 month 1 week ago

The FBI has released new findings on a long-running cyber campaign that quietly infiltrated major U.S. telecommunications providers and critical infrastructure around the world. The campaign, carried out by a group of hackers linked to the Chinese government, is known as Salt Typhoon. According to federal officials, the operation has been active since at least […]

The post FBI Issues Updated Warning on Salt Typhoon’s Global Cyber-Espionage Operations appeared first on Centraleyes.

The post FBI Issues Updated Warning on Salt Typhoon’s Global Cyber-Espionage Operations appeared first on Security Boulevard.

Rebecca Kappel

CVE-2024-11122 | 上海灵当信息科技有限公司 Lingdang CRM up to 8.6.4.3 index.php?msgid=1&operation=upload File unrestricted upload

Vuldb Updates
1 month 1 week ago
A vulnerability was found in 上海灵当信息科技有限公司 Lingdang CRM up to 8.6.4.3. It has been rated as critical. This issue affects some unknown processing of the file /crm/wechatSession/index.php?msgid=1&operation=upload. This manipulation of the argument File causes unrestricted upload. The identification of this vulnerability is CVE-2024-11122. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.
vuldb.com

CVE-2024-11123 | 上海灵当信息科技有限公司 Lingdang CRM up to 8.6.4.3 /crm/data/pdf.php url path traversal

Vuldb Updates
1 month 1 week ago
A vulnerability categorized as critical has been discovered in 上海灵当信息科技有限公司 Lingdang CRM up to 8.6.4.3. Impacted is an unknown function of the file /crm/data/pdf.php. Such manipulation of the argument url with the input ../config.inc.php leads to path traversal. This vulnerability is referenced as CVE-2024-11123. It is possible to launch the attack remotely. Furthermore, an exploit is available. The vendor was contacted early about this disclosure but did not respond in any way.
vuldb.com

CVE-2024-41968 | WAGO CC100 0751-9x01 Docker Settings Setup missing authentication (VDE-2024-047)

Vuldb Updates
1 month 1 week ago
A vulnerability marked as critical has been reported in WAGO CC100 0751-9x01, PFC100 G2 0750-811x-xxxx-xxxx, PFC200 G2 750-821x-xxx-xxx, TP600 0762-420x, 8000-000x, TP600 0762-430x, TP600 0762-520x, TP600 0762-530x, TP600 0762-620x, TP600 0762-630x, Edge Controller 0752-8303, 8000-0002, PFC100 G1 0750-810x, xxxx-xxxx and PFC200 G1 750-820x-xxx-xxx. This impacts an unknown function of the component Docker Settings Setup. This manipulation causes missing authentication. This vulnerability appears as CVE-2024-41968. The attack may be initiated remotely. There is no available exploit.
vuldb.com

CVE-2024-41967 | WAGO CC100 0751-9x01 Firmware Upgrade missing authentication (VDE-2024-047)

Vuldb Updates
1 month 1 week ago
A vulnerability described as critical has been identified in WAGO CC100 0751-9x01, PFC100 G2 0750-811x-xxxx-xxxx, PFC200 G2 750-821x-xxx-xxx, TP600 0762-420x, 8000-000x, TP600 0762-430x, TP600 0762-520x, TP600 0762-530x, TP600 0762-620x, TP600 0762-630x, Edge Controller 0752-8303, 8000-0002, PFC100 G1 0750-810x, xxxx-xxxx and PFC200 G1 750-820x-xxx-xxx. Affected is an unknown function of the component Firmware Upgrade Handler. Such manipulation leads to missing authentication. This vulnerability is traded as CVE-2024-41967. The attack may be launched remotely. There is no exploit available.
vuldb.com

Managed ad