Aggregator

截至目前，全国公安机关网安部门已办理网络谣言类案件2.7万余起，依法查处造谣传谣网民3.1万余人，依法关停违法违规账号19.9万余个，清理网络谣言信息156.2万余条。今日，公安部公布5起打击整治“移花接木”拼接网络谣言违法犯罪典型案例。

随着人工智能研发不断深入，深伪技术也愈发成熟，深伪技术在一些行业的应用前景正越来越广泛。但是，作为一把锋利的“双刃剑”，在享受深伪技术红利的同时，也不能忽视其可能令不法分子犯罪效率更高、隐蔽性更强、社会危害性更大的巨大潜在风险。

自《全球人工智能治理倡议》发布以来，以大模型为代表的通用人工智能技术快速发展，人工智能安全治理受到国际社会广泛关注。为进一步深化落实《倡议》，促进人工智能产业健康、可持续发展，全国网安标委适时地颁布了《人工智能安全治理框架》。

软件技术是数字政府和企业数字化发展的基石，是关键信息基础设施中的重要组成部分，软件安全则是保障政府和企业数字化健康发展的前提和安全发展的底座。近年来，由于软件安全缺陷而引发的安全事件层出不穷。

欢迎订阅《中国信息安全》杂志！

一场横扫ATM机、游戏机和企业服务器的安全风暴。

财富500强排名第十

A vulnerability classified as very critical was found in Hikvision DS-2CD7153-E -/4.1.0 B130111. Affected by this vulnerability is an unknown functionality of the component Packet Handler. The manipulation leads to memory corruption. This vulnerability is known as CVE-2013-4977. The attack can be launched remotely. Furthermore, there is an exploit available.

Полиция Германии закрыла 47 теневых криптообменников и начинает поиск преступников.

强势围观

🌟 长文预警，内容有料 🌟

An Iranian advanced persistent threat (APT) threat actor likely affiliated with the Ministry of Intelligence and Security (MOIS) is now acting as an initial access facilitator that provides remote access to target networks. Google-owned Mandiant is tracking the activity cluster under the moniker UNC1860, which it said shares similarities with intrusion sets tracked by Microsoft, Cisco Talos, and

2024-09-18 SAMBASPY Java RAT Samples2024-09-19 Kaspersky: Exotic SambaSpy is now dancing with

The US DoJ arrested two people and charged them with stealing and laundering more than $230 million worth of cryptocurrency. The U.S. DoJ arrested two people, Malone Lam (20) (aka “Greavys,” “Anne Hathaway,” and “$$$”) and Jeandiel Serrano (21) (aka “Box,” “VersaceGod,” and “@SkidStar”) in Miami and charged them with stealing more than $230 million […]

A vulnerability was found in HP HP-UX and classified as critical. This issue affects some unknown processing of the component rs.F300. The manipulation of the argument PATH as part of Environment Variable leads to improper access controls. The identification of this vulnerability is CVE-2003-1358. An attack has to be approached locally. Furthermore, there is an exploit available.

快来报名一起学习

文末投递简历

此次事件中，寻呼机和对讲机作为关键的通信设备，被植入了小型炸弹，并被用于施展恐怖袭击，引发了人们对科技供应链安全的担忧。人们开始思考，日常生活中使用的其他电子设备，是否也同样可能被用来实施恐怖袭击。

看雪论坛作者ID：New对象处