Aggregator

一年又一年，年年相似又不同

一年又一年，年年相似又不同

再次感谢各位读者的厚爱，“威胁棱镜”度过了属于自己的第四个年头。依旧遵循惯例，为过去的一年做个简短的“年终总结”。关注情况概览关注者总数超过了 4100，女性占比相比去年略有上升。关注者相当年轻，近四

In our last post, we discussed the powerful, yet potentially risky nature of web pixels. Now, le

In our last post, we discussed the powerful, yet potentially risky nature of web pixels. Now, let’s dive into how you can assess your organization’s use of these digital trackers and uncover potential privacy vulnerabilities. Conducting a Thorough Audit Think of this audit as a detective investigation, where you need to gather all the clues […]

The post Unmasking the Risks: Auditing Your Web Pixel Usage appeared first on Feroot Security.

The post Unmasking the Risks: Auditing Your Web Pixel Usage appeared first on Security Boulevard.

A vulnerability classified as critical was found in SCO UnixWare 7.0/7.0.1/7.1/7.1.1. Affected by this vulnerability is an unknown functionality of the component uidadmin. The manipulation leads to race condition. This vulnerability is known as CVE-1999-0836. The attack can be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

01阅读须知此文所提供的信息只为网络安全人员对自己所负责的网站、服务器等（包括但不限于）进行检测或维护参考，未经授权请勿利用文章中的技术资料对任何计算机系统进行入侵操作。利用此文所提供的信息而造成的直

01伏魔挑战赛从 2020 年开始,得益于广大白帽对技术的热情,在恶意文件检测领域，阿里云已经连续四年，举办了超过七届挑战赛。随着 AI的兴起，大模型技术的出现与成熟，网络空间的安全对抗日益激烈，无论

01阅读须知此文所提供的信息只为网络安全人员对自己所负责的网站、服务器等（包括但不限于）进行检测或维护参考，未经授权请勿利用文章中的技术资料对任何计算机系统进行入侵操作。利用此文所提供的信息而造成的直

A vulnerability has been found in Hummingbird Enterprise Collaboration up to 5.21 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to an unknown weakness. This vulnerability was named CVE-2006-0173. The attack can be initiated remotely. Furthermore, there is an exploit available.

A vulnerability classified as critical was found in MihanTools 1.33. This vulnerability affects unknown code of the file product.php. The manipulation of the argument id leads to sql injection. This vulnerability was named CVE-2011-1048. The attack can be initiated remotely. Furthermore, there is an exploit available.

OpenAI 已讨论开发一款人形机器人12 月 25 日，据 The Information 报道，在过去的一年里，OpenAI 对机器人重新产生了兴趣：投资于开发机器人硬件和软件的初创公司，如 Fi

AMD AI 芯片被指软件有缺陷，难以挑战 NVIDIA； 谷歌就反垄断案提出新方案：苹果 iPhone 与 iPad 可采用不同默认搜索引擎； 周鸿祎：人类命运已被改变 AI 某些方面已超越 99% 人类

JPCERT/CCは、「近年の水飲み場攻撃事例 Part1」を公開しました。本記事では、攻撃者の攻撃手法の中で、近年あまり注目されることがない水飲み場攻撃の事例を国内で発生した事例をもとに2回に分けて紹介します。

2025年1月1日，网络数据安全管理强合规时代来临！

✦✦前  言✦“点击查看您家孩子的成绩单”“您需要办理贷款吗？”……这些看似稀松平常的诈骗或骚扰短信，实则是数据滥用和泄露引发的连锁反应。作为个体我们似乎对此毫无办法，实际上国家早已启动了数据立法工程

Washington and Nevada were among states enacting new data privacy laws in 2024, and that trend among states will likely continue into 2025 as the next presidential administration comes into office promising to reduce federal regulations, said attorney Melissa Crespo of law firm Morrison Foerster.