Aggregator

导语一年一度的“大考”持续火热进行中，攻防演练期间本公众号会每日更新当天鲜活情报和热点漏洞，欢迎大家对我们进行收藏和关注！【免责声明】本文档提供的信息旨在帮助网络安全专业人员更好地理解和维护业务系统的

引言昨天下午，各大群、各大公众号，都在传“搜狗输入法绕过windows锁屏漏洞”，烽火台实验室也在第一时间验证并通报了这个漏洞。就在今天我们收到了搜狗输入法官方人员的回复，经过后续的分析，我们发现对于

In today's digital battlefield, small and medium businesses (SMBs) face the same cyber threats as l

In today's digital battlefield, small and medium businesses (SMBs) face the same cyber threats as large corporations, but with fewer resources. Managed service providers (MSPs) are struggling to keep up with the demand for protection. If your current cybersecurity strategy feels like a house of cards – a complex, costly mess of different vendors and tools – it's time for a change. Introducing

Легендарный криптограф вернется в стены особняка спустя десятилетия.

By Deb Radcliff, DevSecOps analyst and editor of CodeSecure’s TalkSecure educational content (syndicated at Security Boulevard & YouTube) In this show, Deb interviews two innovative technologists driving the DevOps Automated Governance movement. They’re both authors, prolific writers, speakers, and contributors to reference architectures and other materials supporting Automated DevOps Governance. Bill Bensing, whose mantra is…

The post Toil Not: Automate DevOps Governance appeared first on CodeSecure.

The post Toil Not: Automate DevOps Governance appeared first on Security Boulevard.

Organizations that leveraged AI and automation in security prevention cut the cost of a data breach by $2.22 million compared to those that didn't deploy these technologies

Как политика невмешательства позволяет хакерам нарушать закон, прикрываясь легитимными сервисами.

Временные туннели играют неожиданную роль в распространении вредоносного ПО.

阿根廷安全部宣布了使用 AI 预测未来犯罪的计划，此举被批评可能危及公民权利。阿根廷极右翼总统 Javier Milei 本周成立了一个新部门 Artificial Intelligence Applied to Security Unit，将使用机器学习算法分析历史犯罪数据以预测未来犯罪。该部门预计还将部署面部识别软件识别通缉犯，巡视社交媒体，分析实时监控探头以发现可疑活动。虽然安全部表示新部门将有助于“发现潜在威胁、识别犯罪集团动向或预测骚乱”，但类似《少数派报告》的方法仍然给人们敲响了警钟。专家担心特定社会群体可能会受到该技术的过度审查，以及对谁能访问这些信息表达了担忧。国际特赦组织警告说，大规模监控影响言论自由，鼓励自我审查，危及人权。

360发布“实网攻防人才培育计划”：在全国设立20个实战训练营

能力共生 生态共赢！ISC.AI 2024数字安全生态大会成功召开

国家金融科技风险监控中心与360达成战略合作

8月1日，ISC.AI 2024第二届全国信息安全产教融合发展大会暨全国信息安全行业产教融合共同体2024年年会在北京国家会议中心圆满召开。会上，360数字安全集团发布“实网攻防高质量人才培育计划”，

近日，ISC.AI 2024“安全融新 生态共赢”360数字安全生态大会在北京成功召开。来自全国各地的业内领袖、生态伙伴代表齐聚一堂，共同探讨人工智能时代下数字安全产业市场新机遇、洞见 AI 技术赋能

2024年7月31日，第十二届互联网安全大会（ISC.AI 2024）在北京国家会议中心盛大开幕。国家金融科技风险监控中心（以下简称“风控中心”）受邀参加，并与三六零数字安全科技集团有限公司（以下简称

Исследователи выясняют, как LLM влияют на наше мировоззрение.

Vulnerability / Network SecurityEnterprise Resource Planning (ERP) Software is at the heart of man

Enterprise Resource Planning (ERP) Software is at the heart of many enterprising supporting human resources, accounting, shipping, and manufacturing. These systems can become very complex and difficult to maintain. They are often highly customized, which can make patching difficult. However, critical vulnerabilities keep affecting these systems and put critical business data at risk.  The

Cybercriminals increasingly leverage the TryCloudflare Tunnel to deliver Remote Access Trojans (RATs) in financially motivated attacks. TryCloudflare is a tool for developers to experiment with Cloudflare Tunnel without adding a site to Cloudflare’s DNS. Threat actors continually refine tactics to evade detection and enhance campaign efficacy, complicating attribution and necessitating ongoing analysis.  They exploit Cloudflare […]

The post Hackers Abuse TryCloudflare Service To Bypass Detection And Deliver Malware appeared first on Cyber Security News.