Aggregator

本文介绍了EASM、CAASM、DRPS、CTEM四种攻击面管理的技术的核心点和适用场景，并提出了基于资产视图的精益安全体系建设想法

Name: SunshineCTF 2024 (an SunshineCTF event.)
Date: Oct. 19, 2024, 2 p.m. — 21 Oct. 2024, 14:00 UTC  [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://2024.sunshinectf.org/
Rating weight: 38.57
Event organizers: Knightsec

Authors/Presenters:Jiangfei Duan, The Chinese University of Hong Kong; Ziang Song, ByteDance; Xupeng Miao and Xiaoli Xi, Carnegie Mellon University; Dahua Lin, The Chinese University of Hong Kong; Harry Xu, University of California, Los Angeles; Minjia Zhang, Microsoft; Zhihao Jia, Carnegie Mellon University

Our sincere thanks to USENIX, and the Presenters & Authors for publishing their superb 21st USENIX Symposium on Networked Systems Design and Implementation (NSDI '24) content, placing the organizations enduring commitment to Open Access front and center. Originating from the conference’s events situated at the Hyatt Regency Santa Clara; and via the organizations YouTube channel.

Permalink

The post USENIX NSDI ’24 – Parcae: Proactive, Liveput-Optimized DNN Training on Preemptible Instances appeared first on Security Boulevard.

via the comic humor & dry wit of Randall Munroe, creator of XKCD

Permalink

The post Randall Munroe’s XKCD ‘Experimental Astrophysics’ appeared first on Security Boulevard.

Regulatory concerns may have slowed initial SaaS adoption for financial services companies, but today, many rely heavily on apps like Salesforce, Microsoft 365, and ServiceNow to manage their operations.  Now, fully invested, financial services companies are faced with the challenge of safeguarding sensitive financial data that is stored off-prem. At the same time, they need […]

The post Securing Financial Operations: Know Your SaaS appeared first on Adaptive Shield.

The post Securing Financial Operations: Know Your SaaS appeared first on Security Boulevard.

Новое простое число на 16 миллионов цифр длиннее предшественника.

Trend Micro Deep Security权限提升漏洞

国家信息安全漏洞共享平台（以下简称CNVD）本周共收集、整理信息安全漏洞272个，其中高危漏洞151个、中危漏洞106个、低危漏洞15个。

Янн ЛеКун разочаровал технооптимистов своими прогнозами.

Microsoft is warning of Windows crashing with the blue screen of death on some ASUS laptop models when trying to upgrade to the latest version of the operating system, Windows 11 version 24H2. [...]

Avevo appena segnalato l'aggiornamento al Piracy Shield, di cui avevo perso anche la prima versione,

小米公司成功流片国内首款 3nm 手机系统级芯片10 月 20 日消息，据北京卫视消息，北京市经济和信息化局总经济师唐建国表示，小米公司成功流片国内首款 3nm 手机系统级芯片。所谓流片，就是像流水线

盛邦安全

This article is the result of a collaboration with Josimar. You can find Josimar’s c

盛邦安全

A vulnerability was found in cryptocoinjs secp256k1-node up to 3.8.0/4.0.3/5.0.0 and classified as problematic. Affected by this issue is the function publicKeyVerify. The manipulation leads to improper validation of integrity check value. This vulnerability is handled as CVE-2024-48930. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

Editor’s note: The cur

A vulnerability has been found in OneDev up to 11.0.8 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to information disclosure. This vulnerability is known as CVE-2024-45309. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.