Aggregator

聚焦源代码安全，网罗国内外最新资讯！编译：代码卫士网络安全研究人员披露了位于 SimpleHelp 远程访问软件中的多个漏洞，可导致信息暴露、提权和远程代码执行等后果。Horizon3.ai公司的研

聚焦源代码安全，网罗国内外最新资讯！编译：代码卫士Ivanti 公司已发布安全更新，修复了影响 Avalanche、Application Control Engine和Endpoint Manag

中国 RISC-V 开发商厦门算能科技有限公司（Sophgo）被美国列入实体名单（Entity List），意味着除非获得特批，禁止美国公司与该公司有任何业务往来。去年 10 月台积电据报

中国 RISC-V 开发商厦门算能科技有限公司（Sophgo）被美国列入实体名单（Entity List），意味着除非获得特批，禁止美国公司与该公司有任何业务往来。去年 10 月台积电据报道终止为算能制造芯片，原因是该公司订购的芯片与华为 Ascend 910B AI 加速器极为相似。华为否认与算能有任何业务往来，而算能也发表声明否认与华为有任何业务往来。华为早就被美国列入实体名单。

A vulnerability, which was classified as critical, has been found in Fortinet FortiRecorder, FortiWeb and FortiVoice. Affected by this issue is some unknown functionality of the component Packet Handler. The manipulation leads to path traversal. This vulnerability is handled as CVE-2024-48885. The attack may be launched remotely. There is no exploit available.

A vulnerability classified as critical was found in Fortinet FortiAnalyzer and FortiManager up to 6.4.15/7.0.13/7.2.5/7.4.3. Affected by this vulnerability is an unknown functionality of the component Shell Command Handler. The manipulation leads to incorrect privilege assignment. This vulnerability is known as CVE-2024-45331. Attacking locally is a requirement. There is no exploit available.

A vulnerability classified as critical has been found in Fortinet FortiAnalyzer and FortiManager up to 7.4.3/7.6.1. Affected is an unknown function. The manipulation leads to weak authentication. This vulnerability is traded as CVE-2024-50563. It is possible to launch the attack remotely. There is no exploit available.

A significant cybersecurity threat has emerged, threatening the integrity of thousands of PHP-based web applications. A report from Imperva Threat Research has unveiled a sophisticated campaign where malicious actors are exploiting vulnerabilities in these applications to deploy malware, particularly with a focus on gambling-related platforms in Indonesia. Despite a longstanding prohibition on gambling in Indonesia […]

The post Thousands of PHP-based Web Applications Exploited to Deploy Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Операторы дронов получили неожиданные и даже опасные полномочия.

人工智能（AI）和机器学习（ML）如何重塑欺诈检测、无密码身份验证

在 Help Net Security 采访中，Solaris 集团网络安全副总裁 Nuno Martins da Silveira Teodoro 讨论了数字银行安全方面的最新进展。他谈到了人工智能