Aggregator

雷神众测拥有该文章的修改和解释权。如欲转载或传播此文章，必须保证此文章的副本，包括版权声明等全部内容。声明雷神众测允许，不得任意修改或增减此文章内容，不得以任何方式将其用于商业目的。

Arthur Petrov is accused of exporting US chips for manufacturers supplying weaponry and equipment to the Russian military

日本文部科学省科学技术与学术政策研究所发布的《科学技术指标2024》显示，引用次数进入前 10% 的受关注论文数前三名是中国、美国和英国，印度从第 6 位升至第 4 位，韩国从第 10 位升至第 9 位，日本第 13。中国连续 4 年排名第一共有 64138 篇，美国为 34995 篇，英国为 8850 篇。许多受关注论文是多国研究者合作成果，国别统计时根据贡献度进行分配。受关注论文中被引用数量极多的“TOP1% 论文”方面，前三名依次是中国、美国和英国。 关于国际共同署名论文的比例，中国为 20.8%，较上次下降了 3.4 个百分点，受到中美政治分裂和新冠疫情的影响。美国为 46.7%，同比略有增加。

A campaign tracked as EastWind is targeting Russian government and IT organizations with PlugY and GrewApacha Backdoors. In late July 2024, Kaspersky researchers detected a series of targeted cyberattacks against the Russian government and IT organizations. Kaspersky named this campaign has EastWind. Threat actors sent phishing emails with RAR archive attachments containing a Windows shortcut […]

Группа расширяет арсенал для атак на правительственные и технологические компании.

A vulnerability, which was classified as problematic, was found in TECNO com.transsion.carlcare 5.9.5. Affected is an unknown function. The manipulation leads to information disclosure. This vulnerability is traded as CVE-2024-7697. It is possible to launch the attack remotely. There is no exploit available.

Профильные ассоциации обратились к Минцифры с просьбой разъяснить причины ухудшения работы сервисов.

A vulnerability, which was classified as critical, has been found in Zoho ManageEngine ADAudit Plus up to 8110. This issue affects some unknown processing of the component Attack Surface Analyzer Dashboard. The manipulation leads to sql injection. The identification of this vulnerability is CVE-2024-36518. The attack may be initiated remotely. There is no exploit available.

A vulnerability classified as critical was found in Zoho ManageEngine ADAudit Plus up to 8003. This vulnerability affects unknown code of the component User Session Recording. The manipulation leads to sql injection. This vulnerability was named CVE-2024-36035. The attack can be initiated remotely. There is no exploit available.

A vulnerability classified as critical has been found in Zoho ManageEngine ADAudit Plus up to 8003. This affects an unknown part of the component Aggregate Report Search Option. The manipulation leads to sql injection. This vulnerability is uniquely identified as CVE-2024-36034. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in Zoho ManageEngine ADAudit Plus up to 8110. It has been rated as critical. Affected by this issue is some unknown functionality of the component Attack Surface Analyzer Export Option. The manipulation leads to sql injection. This vulnerability is handled as CVE-2024-5487. The attack may be launched remotely. There is no exploit available.

Новый ИИ - прорыв или угроза человеческим отношениям?

思科（Cisco）披露，其两款已终止服务的小型商务SPA 300和SPA 500系列IP电话中，基于Web的管理界面存在多个关键的远程代码执行零日漏洞。

外媒8月11日报道，网络安全研究人员发现，一种名为GPS“欺骗”的数字攻击手段出现了新动向，这种攻击能够使商用飞机偏离航线，并且现在还能够操纵时间。航空咨询机构OPSGROUP报告称，近几个月影响商用飞机的GPS欺骗事件激增了400%。

本期关键基础设施安全资讯周报共收录安全资讯28篇。点击文章，快速阅读最新资讯。

未来购物真的来了。

I recently wrote about reliable software. I also usually write about cybersecurity and major incidents. Today’s story intertwines both, in a situation so far reaching that, if you tried to write it as the script of the next Bond movie with a villain scheming to cause worldwide chaos, it would fit perfectly. Let’s look at […]

The post Crowdstrike, or “How to Own the Planet” appeared first on TuxCare.

The post Crowdstrike, or “How to Own the Planet” appeared first on Security Boulevard.

俄罗斯占领的乌克兰扎波罗热核电站周日发生了火灾。乌克兰总统泽连斯基表示，核电站的辐射水平在正常范围内，他指责俄罗斯利用对核电站的控制去勒索乌克兰、欧洲和世界。发生火灾的是一座冷却塔，核电站的所有六座反应堆都处于关闭状态。非官方消息称，火灾是冷却塔内的汽车轮胎着火引起的。视频和图像显示了冷却塔冒出了浓烟。俄罗斯方面表示火势已被控制，没有蔓延的威胁，火灾没有影响核电站的运作。

Исследователь случайно стал владельцем виртуальной электростанции.

LAS VEGAS – Here’s what I discovered last week here at Black Hat USA 2024: GenAI is  very much in the mix as a potent X-factor in cybersecurity.

Related: Prioritizing digital resiliency

I spoke with over three dozen cybersecurity … (more…)

The post MY TAKE: Black Hat USA 2024’s big takeaway – GenAI factors into the quest for digital resiliency first appeared on The Last Watchdog.

The post MY TAKE: Black Hat USA 2024’s big takeaway – GenAI factors into the quest for digital resiliency appeared first on Security Boulevard.