Aggregator

Preface*: I spent 3 days with MBA students from 2 of the top 10 universities in the world. Our inter

Financial Services Experts Call for Stronger Focus on Third-Party Risk Management
Financial services leaders and cybersecurity experts said at Information Security Media Group’s 2024 Financial Services Summit that third-party vendor security risks required the need for proactive, multi-layered security frameworks to combat the growing threat landscape.

New AWS-Hosted Solution to Integrate Claude With Palantir AI Platform
Palantir, Anthropic and AWS are developing an AI platform for U.S. defense, using Claude models to enhance decision-making, detect trends and speed document processing. The Biden administration has promoted the adoption of AI for national security.

ML, NLP Tools Collect More Personal Information Than Required, U.K. Regulator Says
Artificial intelligence tools currently used by organizations in the United Kingdom to screen job applicants pose privacy risks and are susceptible to bias and accuracy issues, the U.K. Information Commissioner's Office found. The ICO focused on machine learning and natural language processing.

Also: Potential Government Policy Changes; AI-Driven Zero-Day Discoveries
In the latest weekly update, ISMG editors discussed how the recent election results may reshape U.S. cybersecurity policy and healthcare privacy under HIPAA and the groundbreaking role of artificial intelligence in Google’s recent discovery of a critical zero-day vulnerability.

“ 在安卓APP逆向分析领域，相信很多小伙伴都曾经遇到过这样的问题：面对加壳的APP，如何才能有效地突破其保护机制，深入分析其内部逻辑？尤其是当遇到一些顶级的加固壳时，传统的逆向分析方法往往难以奏效。

前段时间看到复现分析GL-iNet路由器CVE-2024-39226漏洞的两篇文章，看完也跟着了分析下，固件仿真过程踩了一些坑，开始我直接用Ubuntu24的qemu-system-arm跟着操作都会

Veeam Backup & Replication exploit reused in new Frag ransomware attack

Molte tipologie di test di sicurezza, sia in contesti offensivi che in attività di controllo pe

A vulnerability, which was classified as critical, has been found in Adobe Flash Player up to 11.2.202.548/18.0.0.261/19.0.0.245. Affected by this issue is some unknown functionality. The manipulation leads to use after free. This vulnerability is handled as CVE-2015-8421. The attack may be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Adobe Flash Player up to 11.2.202.548/18.0.0.261/19.0.0.245. Affected by this vulnerability is an unknown functionality. The manipulation leads to use after free. This vulnerability is known as CVE-2015-8420. The attack can be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

Authors/Presenters: Aaron “d