Aggregator

本期周报简介：1、关于软件开发与网络安全的讨论。 2、数据安全风险监测用于哪些维度？

A vulnerability classified as problematic was found in Trend Micro Email Encryption Gateway 5.5. This vulnerability affects unknown code. The manipulation leads to cross site scripting (Reflected). This vulnerability was named CVE-2018-6226. The attack can be initiated remotely. Furthermore, there is an exploit available.

Learn how DataDome uses genetic algorithms, an AI technique inspired by natural selection, to create rules for blocking bot traffic.

The post Genetic Algorithms: Using Natural Selection to Block Bot Traffic appeared first on Security Boulevard.

The ONNX infrastructure has been servicing criminal actors as far back as 2017.

Home > Mac administration, macOS, Privileges.app > Managing time limited admin rights with P

A vulnerability was found in Apple iTunes up to 12.2. It has been rated as critical. This issue affects some unknown processing of the component WebKit. The manipulation leads to memory corruption. The identification of this vulnerability is CVE-2015-5802. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

Starting in 2025, the RSAC Innovation Sandbox Top 10 Finalists will each receive a $5 million investment to drive cybersecurity innovation.

Members of Loosely Organized Group Recently Tied to Partnership With RansomHub
Will the indictment of five alleged members of the loosely affiliated Scattered Spider cybercrime group disrupt its wider activities? The current count of known attacks tied to the group stands at over 130, but the accused have so far been tied by the FBI to only 45 of the attacks.

Also: Bitfinex Launderer Razzlekhan Gets 18-Month Sentence
This week, sentences in FTX, Bitfinex and Helix cases, a $25.5M Thala hack, the WazirX hack and South Korea probed UpBit. U.S. lawmakers want a crackdown on Tornado. U.S. Prosecutors may scale back crypto cases. BIT Mining fined $10M and the Chinese Communist Party expelled a key blockchain figure

Also: VPN Vulnerabilities Attract Hackers, Hackers Use Swiss Mail to Send Malware
This week, Russia suspected in Balctic Sea cable sabotage, VPNs draw ransomware attackers and Swiss snail mail malware. An AI training company reported a cybertheft of $250,000 and a U.S. space firm reported a breach. Microsoft said it will pay $$$ for AI vulnerabilities and a MFA success story.

Red Team Finds Vulnerabilities in Critical Infrastructure Org’s Security Framework
The U.S. cyber defense agency is urging critical infrastructure operators to learn from the experience of a volunteer red teaming test and not rely too heavily on host-based endpoint detection and response solutions at the expense of network layer protections.

Watchdog Agency Report Points to Unimplemented Cyber Recommendations
The U.S. Department of Health and Human Services needs to take important actions to do a better job of carrying out its duties as the lead federal agency responsible for strengthening cybersecurity in the healthcare and public health sector, said a new federal watchdog agency report.

Mexico is investigating a ransomware attack targeting its legal affairs office, as confirmed by the president amidst growing cybersecurity concerns. Mexico’s president announced the government is investigating an alleged ransomware hack that targeted the administration’s legal affairs office. “Today they are going to send me a report on the supposed hacking.” President Claudia Sheinbaum said […]