Aggregator

via the comic & dry wit of Randall Munroe, creator of XKCD

Permalink

The post Randall Munroe’s XKCD ‘Water Filtration’ appeared first on Security Boulevard.

In this blog series, we dive into the challenges faced by our heroes of Threat-Informed Defense, how they address them, and the benefits they are driving for their team and organization. 

The post Defensive Stack Optimization: A Threat-Informed Defense Use Case appeared first on Security Boulevard.

U.K.'s National Crime Agency says it arrested a 17-year-old teenager who is suspected of being connected to the cyberattack on Transport for London, the city's public transportation agency. [...]

威努特携新品全面出席本次盛会并发表主题演讲。

Navigating the complexities of software supply chain security demands proactive measures to identify and manage vulnerabilities and compliance issues effectively.

The post A proactive defense: Utilize SBOMs and continuous monitoring appeared first on Security Boulevard.

Hackers have been leveraging publicly available exploit code for two critical vulnerabilities in the WhatsUp Gold network availability and performance monitoring solution from Progress Software. [...]

A vulnerability was found in WPFactory Helper Plugin up to 1.7.0 on WordPress. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to cross site scripting. This vulnerability was named CVE-2024-8656. The attack can be initiated remotely. There is no exploit available.

Nederland zet alles op alles om de wraklocaties van gezonken Nederlandse onderzeeboten in Maleisische wateren te beschermen als laatste rustplaats van de bemanning. Dat was vandaag de boodschap op een bijeenkomst voor de nabestaanden. Het gaat om Hr.Ms. O20 en Hr.Ms. KXVI. Beide onderzeeboten gingen in 1941 verloren bij gevechten met Japan tijdens de Tweede Wereldoorlog.

Artificial intelligence (AI) is one of the hottest buzzwords these days, dominating headlines and rocking the stock market. Many companies have already added AI functionality to their software solutions, and many hope to add even more in the coming months. It’s important to remember, however, that the foundation these technologies are built on can significantly impact their effectiveness and scalability. The Cloud Native Computing Foundation (CNCF) recently released a whitepaper that highlights the importance of cloud-native technology and AI as critical technology trends.

The post 4 Best Practices for Using Cloud-Native Infrastructure for AI Workloads appeared first on Security Boulevard.

Ireland’s Data Protection Commission launches inquiry into whether Google followed GDPR rules over AI model training

旅行者 1 号已在太空中飞行了 47 年之久，它的各种仪器和零部件都出现了老化的迹象。去年 11 月旅行者 1 号因内存损坏切断了与地球的通信，故障直到今年 6 月才完全解决。它的姿态推进推机器最近也出现了问题，内部燃料管被二氧化硅堵住了，二氧化硅是燃料箱中橡胶膜随时间推移而产生的副产品。NASA 工程师在数周的精心准备之后切换到另一组推进器。为节省日益减少的电力供应，旅行者 1 号和 2 号已关闭所有非必要的系统，包括部分加热器。但这也使得准备切换的推进器变冷，贸然启动可能会造成损坏。工程师在仔细研究之后，关闭了飞船主加热器一小时，释放足够电力启动推进器加热器。这一做法成功了。8 月 27 日工程师确认推进器正常运行，帮助飞船指向地球。

Bank customers in the Central Asia region have been targeted by a new strain of Android malware codenamed Ajina.Banker since at least November 2023 with the goal of harvesting financial information and intercepting two-factor authentication (2FA) messages. Singapore-headquartered Group-IB, which discovered the threat in May 2024, said the malware is propagated via a network of Telegram channels

Deal Will Help Mastercard Offer Greater Protection, Trust for Digital Transactions
Mastercard plans to buy threat intelligence firm Recorded Future for $2.65 billion to enhance cyber resilience and offer greater protection and trust around digital transactions. The deal will enhance Mastercard's identity, fraud prevention services by helping businesses identify and mitigate risk.

VMware设备虚拟化漏洞挖掘（中篇） by ourren

Java反序列化漏洞浅析与应对 by ourren

D.I.E暑期新生赛结果公示及官方WP by ourren

溯源知名数据售卖组织USDoD by ourren

解读：知识图谱与大模型的 “完美联姻” by ourren

网络空间安全工程技术人才培养体系指南-综合版 by ourren

更多最新文章，请访问SecWiki

GitLab on Wednesday released security updates to address 17 security vulnerabilities, including a critical flaw that allows an attacker to run pipeline jobs as an arbitrary user. The issue, tracked as CVE-2024-6678, carries a CVSS score of 9.9 out of a maximum of 10.0 "An issue was discovered in GitLab CE/EE affecting all versions starting from 8.14 prior to 17.1.7, starting from 17.2 prior to

In a strategic move to bolster its cybersecurity capabilities, Mastercard has announced an agreement to acquire Recorded Future, a leading global threat intelligence company, for $2.65 billion. This acquisition, from Insight Partners, aims to enhance Mastercard’s existing suite of services focused on cyber resilience and trust within the digital economy. Recorded Future, renowned as the […]

The post Mastercard to Acquire Threat Intel Firm Recorded Future for $2.65 Billion appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

SpaceX Polaris Dawn 宇航员 Jared Isaacman 和 Sarah Gillis 完成了首次商业太空行走。两人身穿 SpaceX 特制宇航服相隔 15 分钟走出飞船。这次任务被称为 Polaris Dawn，由亿万富翁 Isaacman 支付资金。此前只有政府资助的宇航机构宇航员才能进行太空行走。首次商业太空行走高度为 700 公里。太空行走是太空中最困难的行动之一，一家私营公司成功实现这一壮举在太空旅行史上具有里程碑意义。过去几十年，执行太空行走的宇航员使用气闸舱将飞船与外部真空隔开，但此次 SpaceX Dragon 没有这么做，飞船实际上完全暴露在外部太空中。

Секретность или эффективность: зачем Северная столица меняет мессенджеры?

Microsoft is updating SymCrypt, its core cryptographic library, with new quantum-secure algorithms. Microsoft’s details are here. From a news article:

The first new algorithm Microsoft added to SymCrypt is called ML-KEM. Previously known as CRYSTALS-Kyber, ML-KEM is one of three post-quantum standards formalized last month by the National Institute of Standards and Technology (NIST). The KEM in the new name is short for key encapsulation. KEMs can be used by two parties to negotiate a shared secret over a public channel. Shared secrets generated by a KEM can then be used with symmetric-key cryptographic operations, which aren’t vulnerable to Shor’s algorithm when the keys are of a sufficient size...

The post Microsoft Is Adding New Cryptography Algorithms appeared first on Security Boulevard.