Aggregator

为进一步深化互联网信息服务算法综合治理，中央网信办等四部门自即日起至2025年2月14日开展“清朗·网络平台算法典型问题治理”专项行动。

近年来，全球人工智能浪潮持续升温，大模型作为AI领域中的重要一环，其能力随着平台算力的提升、训练数据量的积累、深度学习算法的突破，得到了进一步提升。然而以大模型为核心涌现的大量技术应用背后，也带来诸多新的风险和挑战。

点击文章，了解最前沿的国际网安资讯！

Cybersecurity researchers have disclosed two new attack techniques against infrastructure-as-code (IaC) and policy-as-code (PaC) tools like HashiCorp's Terraform and Styra's Open Policy Agent (OPA) that leverage dedicated, domain-specific languages (DSLs) to breach cloud platforms and exfiltrate data. "Since these are hardened languages with limited capabilities, they're supposed to be more

A vulnerability, which was classified as problematic, has been found in Linux Kernel up to 6.11.7. Affected by this issue is the function dvb_register_device. The manipulation leads to out-of-bounds read. This vulnerability is handled as CVE-2024-53063. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 5.15.171/6.1.116/6.6.60/6.11.7. It has been classified as critical. Affected is the function dwc3_core_exit. The manipulation leads to denial of service. This vulnerability is traded as CVE-2024-53070. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 5.15.170/6.1.115/6.6.59/6.11.6. It has been rated as problematic. Affected by this issue is the function stmmac_tx_clean. The manipulation leads to improper validation of array index. This vulnerability is handled as CVE-2024-53058. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 5.15.170/6.1.115/6.6.59/6.11.6. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to memory corruption. This vulnerability is known as CVE-2024-53055. The attack can only be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.11.7 and classified as problematic. This issue affects the function search_nested_keyrings. The manipulation leads to out-of-bounds read. The identification of this vulnerability is CVE-2024-50301. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Vivo Framework. It has been classified as problematic. Affected is an unknown function of the component WiFi Handler. The manipulation leads to missing authentication. This vulnerability is traded as CVE-2020-12492. Attacking locally is a requirement. There is no exploit available.

A vulnerability was found in Vivo Framework and classified as problematic. This issue affects some unknown processing. The manipulation leads to missing authentication. The identification of this vulnerability is CVE-2020-12491. Local access is required to approach this attack. There is no exploit available.

Cybercriminals are sharpening their phishing tactics with tools like Blov HTML Crypter — a utility that modifies HTML files to evade detection by security scanners. By employing techniques such as minification, encryption, and encoding, this tool transforms malicious HTML content into a form that’s harder for security systems to recognize. Contact a SlashNext security expert […]

The post Blov HTML Crypter: Phishing Evasion Through Encryption and Obfuscation first appeared on SlashNext.

The post Blov HTML Crypter: Phishing Evasion Through Encryption and Obfuscation appeared first on Security Boulevard.

UK Minister Pat McFadden will say in a speech at a NATO conference that adversaries are looking at using AI on the physical and cyber battlefield

Китайцы уверены: умение сомневаться пойдет нейросети на пользу.