Aggregator
Let’s All Agree to Use Seeds as ML-KEM Keys
1 year 10 months ago
21 Aug 2024 Last week, NIST published t
2023 年美国出生率再创新低
1 year 10 months ago
根据美国疾控中心 (CDC) 的最新数据,2022-2023 年间,美国出生率再次下降。过去 17 年美国出生率一直在稳步下降,2007-2009 年金融危机引发的经济大衰退期间出生率下降最为显著。根据 CDC 的数据,2007 年到 2022 年间,美国出生率下降近 23%。2023 年登记出生人数为 3,596,017 人,比 2022 年登记出生人数 3,667,758 人减少约 2%。2023 年 15-44 岁女性总体生育率下降近 3%,每千名女性生育 54.5 人,低于 2022 年每千名女性生育 56 人。2022-2023 年间,青少年生育率下降 4%,15-19 岁女孩从每千名生育 13.6 人下降到 13.1 人。
CVE-2023-41993 | Oracle Java SE/GraalVM Enterprise Edition JavaFX WebKitGTK unusual condition
1 year 10 months ago
A vulnerability classified as critical was found in Oracle Java SE and GraalVM Enterprise Edition. This vulnerability affects unknown code of the component JavaFX WebKitGTK. The manipulation leads to improper check for unusual conditions.
This vulnerability was named CVE-2023-41993. The attack can be initiated remotely. Furthermore, there is an exploit available.
It is recommended to upgrade the affected component.
vuldb.com
Patch Tuesday not Done ’til LINUX Won’t Run?
1 year 10 months ago
Redmond reboot redux: “Something has gone seriously wrong.” You can say that again, Microsoft.
The post Patch Tuesday not Done ’til LINUX Won’t Run? appeared first on Security Boulevard.
Richi Jennings
Australia Calls Off Clearview AI Investigation Despite Lack of Compliance
1 year 10 months ago
Australia’s data protection watchdog has decided to stop its investigation into US facial recognition company Clearview AI
Submit #395541: Oracle JavaTM Platform SE: 8u401 Improper Check for Unusual Conditions [Accepted]
1 year 10 months ago
Submit #395541 / VDB-275428
lywand
Atlassian security advisory (AV24-469)
1 year 10 months ago
Canadian Centre for Cyber Security
CVE-2024-28000 | LiteSpeed Cache Plugin up to 6.3.0.1 on WordPress privileges assignment
1 year 10 months ago
A vulnerability classified as critical has been found in LiteSpeed Cache Plugin up to 6.3.0.1 on WordPress. This affects an unknown part. The manipulation leads to incorrect privilege assignment.
This vulnerability is uniquely identified as CVE-2024-28000. It is possible to initiate the attack remotely. There is no exploit available.
vuldb.com
CVE-2020-11847 | OpenText Privileged Access Manager up to 3.7.0.0 PAM Server os command injection
1 year 10 months ago
A vulnerability was found in OpenText Privileged Access Manager up to 3.7.0.0. It has been rated as critical. Affected by this issue is some unknown functionality of the component PAM Server. The manipulation leads to os command injection.
This vulnerability is handled as CVE-2020-11847. An attack has to be approached locally. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2020-11850 | OpenText Self Service Password Reset up to 4.4.0.5/4.5.0.1 cross site scripting
1 year 10 months ago
A vulnerability was found in OpenText Self Service Password Reset up to 4.4.0.5/4.5.0.1. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting.
This vulnerability is known as CVE-2020-11850. The attack can be launched remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2020-11846 | OpenText Privileged Access Manager up to 3.7.0.0 Token privileges management
1 year 10 months ago
A vulnerability was found in OpenText Privileged Access Manager up to 3.7.0.0. It has been classified as critical. Affected is an unknown function of the component Token Handler. The manipulation leads to improper privilege management.
This vulnerability is traded as CVE-2020-11846. It is possible to launch the attack remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
GitHub Enterprise Server vulnerable to critical auth bypass flaw
1 year 10 months ago
A critical vulnerability affecting multiple versions of GitHub Enterprise Server could be exploited to bypass authentication and enable an attacker to gain administrator privileges on the machine. [...]
Bill Toulas
E-cology10远程代码执行漏洞
1 year 10 months ago
E-cology10远程代码执行漏洞
Critical Thinking AI in Cybersecurity: A Stretch or a Possibility?
1 year 10 months ago
It might still sound far-fetched to say AI can develop critical thinking skills and help us make decisions in the cybersecurity industry. But we're not far off.
Nenad Zaric
Oregon Zoo Warns Over 100,000 Customers of Payment Card Compromise
1 year 10 months ago
Oregon Zoo revealed that an unauthorized actor potentially obtained payment card information used in transactions over six months
Как измерить эффективность SOC: подходы и лучшие практики
1 year 10 months ago
Вебинар Positive Technologies состоится 22 августа в 14:00 (мск).
应急“国家队”!360支撑全国20+省市网络安全应急工作
1 year 10 months ago
全国20+省市的共同选择!
ISC带队!数十家网安中坚力量共绘上海安全大脑建设蓝图
1 year 10 months ago
ISC带队!数十家网安中坚力量共绘上海安全大脑建设蓝图
《黑神话:悟空》疯狂24小时:爆火下的网络安全陷阱
1 year 10 months ago
陷进去可以,别“陷”进去