Aggregator

当前，网络威胁形势更加严峻，对企业网络安全运营工作的要求也不断加大。幸运的是，通过落实以下基础性的网络安全运营 […]

根据一项新的地理空间分析，中低收入国家有超过 44 亿人无法获取得到安全管理的饮用水；这些地区有近一半人口的饮用水受到粪便污染的影响。获得安全的饮用水是一种人权，也是“联合国 2030 年可持续发展议程”的核心。通过将家庭调查数据与整个地球观测数据和地理空间建​​模技术相结合，研究人员绘制了 135 个中低收入国家安全管理饮用水的详图，发现在 2020 年，这些国家中只有三分之一的人能够获取得到安全管理的饮用水。这意味着在中低收入国家中，估计有 44 亿人缺乏安全饮用水。饮用水中检测到粪便污染令人担忧，因为摄入粪便中的病原体是公共卫生的重大风险，也是导致全球幼儿死亡的一个因素。

自演习开始以来，我们注意到在传统红队攻击之外，出现了许多新的威胁元素。本期文章将对过去一段时间内重保期间的主要活动和事件进行全面回顾与分析，为未来的防御工作提供参考。

2022 年美国国家标准技术局（NIST）宣布了后量子加密和签名算法竞赛的四位获胜者。现在它正式发布了三种后量子加密标准：基于 CRYSTALS-Kyber 的 ML-KEM 用于通用加密，ML-DSA（旧称 CRYSTALS-Dilithium）和 SLH-DSA（旧称 Sphincs+）用于数字签名，第四种 FN-DSA（旧称 FALCON）预计将在今年晚些时候完成，也将用于数字签名。四种后量子加密算法中 ML-KEM、ML-DSA 都是基于格(lattice)的算法，寻找格上的最短向量被认为是计算机领域最困难的问题之一，至今没有经典或量子算法能在多项式时间内解决该问题。NIST 还在评估两种使用不同数学方法的加密算法，万一基于格的算法被发现容易被量子计算机破解，候选算法可作为替代。

KCon大会培训日回归！课程人员有限，先到先得~

KCon大会议题巡展正式开启

Siemensから各製品向けのアップデートが公開されました。

前一段时间做了个应急响应，病毒样本是用Python写的，对其样本进行分析与研究

AVEVAが提供するAVEVA Historianには、SQLインジェクションの脆弱性が存在します。

PTCが提供する複数の製品には、制限または調整なしのリソースの割り当ての脆弱性が存在します。

A CVSS score 4.9 AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N severity vulnerability discovered by 'Kentaro Kawane of GMO Cybersecurity by Ierae' was reported to the affected vendor on: 2024-08-16, 32 days ago. The vendor is given until 2024-12-14 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Andrea Micalizzi aka rgod (@rgod777)' was reported to the affected vendor on: 2024-08-16, 60 days ago. The vendor is given until 2024-12-14 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 6.5 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N severity vulnerability discovered by 'Kentaro Kawane of GMO Cybersecurity by Ierae' was reported to the affected vendor on: 2024-08-16, 32 days ago. The vendor is given until 2024-12-14 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Andrea Micalizzi aka rgod (@rgod777)' was reported to the affected vendor on: 2024-08-16, 60 days ago. The vendor is given until 2024-12-14 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 5.3 AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N severity vulnerability discovered by 'solid-snail' was reported to the affected vendor on: 2024-08-16, 61 days ago. The vendor is given until 2024-12-14 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'rgod' was reported to the affected vendor on: 2024-08-16, 61 days ago. The vendor is given until 2024-12-14 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'rgod' was reported to the affected vendor on: 2024-08-16, 61 days ago. The vendor is given until 2024-12-14 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

核弹级？宇宙级？