Aggregator
亚马逊高管告诉员工如果不喜欢强制重返办公室政策他们可以辞职
1 year 5 months ago
亚马逊 CEO Andy Jassy 上个月在一份备忘录中通知员工,他们每周需要去办公室工作五天,改变了此前每周需要去办公室工作至少三天的政策。新政策将于 2025 年开始实施。对于想要继
CVE-2014-7788 | Best Free Giveaways 0.1 X.509 Certificate cryptographic issues (VU#582497)
1 year 5 months ago
A vulnerability was found in Best Free Giveaways 0.1. It has been declared as critical. This vulnerability affects unknown code of the component X.509 Certificate Handler. The manipulation leads to cryptographic issues.
This vulnerability was named CVE-2014-7788. The attack needs to be approached within the local network. There is no exploit available.
vuldb.com
CVE-2002-1533 | Jetty 4.1.0 Rc4 JSP Servlet cross site scripting (EDB-21875 / ID 86406)
1 year 5 months ago
A vulnerability classified as problematic was found in Jetty 4.1.0 Rc4. Affected by this vulnerability is an unknown functionality of the component JSP Servlet. The manipulation with the input %0A leads to basic cross site scripting.
This vulnerability is known as CVE-2002-1533. The attack can be launched remotely. Furthermore, there is an exploit available.
vuldb.com
Managing Foreign Government Information (FGI) on a Network
1 year 5 months ago
If you’re a firm that works with foreign governments, in addition to certifications like ISO 27001 that you will generally need to achieve, you will also have to have processes in place for handling foreign government information or FGI. It’s not enough that your internal network is classified and access controlled; you need specific handling […]
The post Managing Foreign Government Information (FGI) on a Network appeared first on Security Boulevard.
Max Aulakh
G.O.S.S.I.P 阅读推荐 2024-10-18 大模型安全新利器:ToxicDetector 高效检测有害提示词
1 year 5 months ago
更新一下 GlobalWebInspect 插件
1 year 5 months ago
工具更新
更新一下 GlobalWebInspect 插件
1 year 5 months ago
工具更新
更新一下 GlobalWebInspect 插件
1 year 5 months ago
工具更新
更新一下 GlobalWebInspect 插件
1 year 5 months ago
工具更新
更新一下 GlobalWebInspect 插件
1 year 5 months ago
工具更新
Cisco takes DevHub portal offline after hacker publishes stolen data
1 year 5 months ago
Cisco confirmed today that it took its public DevHub portal offline after a threat actor leaked "non-public" data, but it continues to state that there is no evidence that its systems were breached. [...]
Lawrence Abrams
【资料】乌克兰特种作战部队建设
1 year 5 months ago
文章的核心观点在于强调特种作战部队机构建设(SOFIB)方法在国家和机构层面上对乌克兰特种作战部队能力的提升和可持续性建设的重要性。
CVE-2014-7787 | synapse iShuttle 1 X.509 Certificate cryptographic issues (VU#582497)
1 year 5 months ago
A vulnerability was found in synapse iShuttle 1. It has been classified as critical. This affects an unknown part of the component X.509 Certificate Handler. The manipulation leads to cryptographic issues.
This vulnerability is uniquely identified as CVE-2014-7787. Access to the local network is required for this attack to succeed. There is no exploit available.
vuldb.com
Play
1 year 5 months ago
cohenido
Play
1 year 5 months ago
cohenido
Play
1 year 5 months ago
cohenido
Play
1 year 5 months ago
cohenido
Enhancing Vulnerability Detection with AI in AppSec | Live Webinar
1 year 5 months ago
Live Webinar | Old-School Awareness Training Does Not Hack It Anymore
1 year 5 months ago