Aggregator
周鸿祎谈黎巴嫩寻呼机爆炸案：供应链和网络安全必须掌握在自己手中
1 year 9 months ago
近日，黎巴嫩境内连续发生的寻呼机、对讲机等通讯设备爆炸事件震惊全球，不仅造成了重大的人员伤亡和财产损失，也引发了国际社会对于供应链安全、网络安全及电子设备安全的深刻反思。对此360集团创始人周鸿祎在其新近发布的短视频中直呼这是“网络战和真实物理作战的结合”，并指出此次事件暴露出两个层面的安全问题，一是供应链安全，二是网络安全。
为什么供应链安全如此重要？以黎巴嫩寻呼机爆炸案为例，事件发生后，国际社会普遍认为，在寻呼机内安装炸药并使其能够在接受特定信号后自爆的过程即为一种典型的“供应链攻击”方式，即通过对产品的生产和流通环节进行干预或篡改以达到恶意目的的一种策略。
“试想一下，一辆新能源汽车如果电路被动了手脚，甚至不需要安放炸弹，只要让电池短路就能引发车辆起火或爆炸”，周鸿祎说。
与供应链安全相对应，网络安全在智能设备日渐普及的今天也极为重要。各类设备如智能手机、智能家居等均可通过互联网连接至云端服务器获取服务与支持，由于它们通常具备开放接口以便用户接入各类应用和服务，也因此增加了遭受外界非法侵入的可能性。周鸿祎指出，黎巴嫩寻呼机爆炸事件展示了一种新型的网络攻击手段，即不再局限于信息窃取、系统瘫痪、攻击智能设备，还能通过控制物理设备直接引发物理伤害和人员伤亡。
“随着无人驾驶汽车的普及，只要入侵车企的网络就能远程让你的车在公路上停下，或者在停车场里启动，横冲直撞不听指挥。”周鸿祎认为，随着人工智能的发展，智能终端越来越多，被植入和渗透的风险加大，所有系统都可能成为攻击目标。网络安全防御压力增大，轻则被窃听或数据窃取，重则产生爆炸等物理破坏。
那么应如何维护供应链及网络安全？周鸿祎认为最重要的是要把安全“抓在自己手里”。
“我们现在每个终端产品都依赖全球供应链，由大量的供应商来完成。如何确保生产、运输、仓储过程中每个环节都可控，安全尤为重要，尤其是对关乎国家安全的设备和技术，应该加速自主研发和生产，确保设备的可信性和安全性，避免被外部力量动手脚”，周鸿祎说，“所以加强供应链的安全管理势在必行”。
对于网络安全方面，周鸿祎认为需要加强网络攻击的探测和感知能力，积累大量安全大数据，提高对网络攻击的感知能力。
事实上，网络攻击距离我们的日常生活并不遥远，甚至可以说是无孔不入。资料显示，360集团实现每天云查杀560亿次，发现各类安全事件1亿次，帮助企业每天拦截勒索攻击超过100万次、挖矿攻击1000万次，破解了“看不见”国家级网络攻击的“卡脖子”难题。累计捕获境外国家级APT组织54个，占国内总数的98%，包括某西方大国对武汉市地震监测中心、西北工业大学的网络攻击，也因此成为遭受该国国防部、商务部“双重制裁”的唯一一家中国网安企业。
“360在网络攻击的探测和感知拦截方面做了很多工作，将近20年免费杀毒积累了大量的安全大数据，这些数据结合我们团队每天的实战攻防，使360建立起一套对网络攻击感知能力极强的技术体系。我们也会从这件事情中汲取教训，加强安全防护，守护国家安全，共同迎接网络安全新的挑战”，周鸿祎说。
企业资讯
CVE-2024-6656 | TNB Mobile Solutions Cockpit Software up to 2.12 hard-coded credentials
1 year 9 months ago
A vulnerability classified as critical was found in TNB Mobile Solutions Cockpit Software up to 2.12. This vulnerability affects unknown code. The manipulation leads to hard-coded credentials.
This vulnerability was named CVE-2024-6656. The attack can be initiated remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2024-46044 | Tenda CH22 1.0.0.6(468) /goform/fromqossetting qos stack-based overflow
1 year 9 months ago
A vulnerability, which was classified as critical, has been found in Tenda CH22 1.0.0.6(468). Affected by this issue is the function fromqossetting of the file /goform/fromqossetting. The manipulation of the argument qos leads to stack-based buffer overflow.
This vulnerability is handled as CVE-2024-46044. The attack may be launched remotely. Furthermore, there is an exploit available.
vuldb.com
CVE-2024-46045 | Tenda CH22 1.0.0.6(468) /goform/frmL7ProtForm frmL7PlotForm page stack-based overflow
1 year 9 months ago
A vulnerability, which was classified as critical, was found in Tenda CH22 1.0.0.6(468). This affects the function frmL7PlotForm of the file /goform/frmL7ProtForm. The manipulation of the argument page leads to stack-based buffer overflow.
This vulnerability is uniquely identified as CVE-2024-46045. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
vuldb.com
CVE-2024-46049 | Tenda O6 1.0.0.7(2054) /goform/exeCommand formexeCommand cmdinput stack-based overflow
1 year 9 months ago
A vulnerability has been found in Tenda O6 1.0.0.7(2054) and classified as critical. This vulnerability affects the function formexeCommand of the file /goform/exeCommand. The manipulation of the argument cmdinput leads to stack-based buffer overflow.
This vulnerability was named CVE-2024-46049. The attack can be initiated remotely. Furthermore, there is an exploit available.
vuldb.com
CVE-2024-46046 | Tenda FH451 1.0.0.9 RouteStatic stack-based overflow
1 year 9 months ago
A vulnerability was found in Tenda FH451 1.0.0.9 and classified as critical. This issue affects the function RouteStatic. The manipulation leads to stack-based buffer overflow.
The identification of this vulnerability is CVE-2024-46046. The attack may be initiated remotely. Furthermore, there is an exploit available.
vuldb.com
CVE-2024-46048 | Tenda FH451 1.0.0.9 formexeCommand command injection
1 year 9 months ago
A vulnerability was found in Tenda FH451 1.0.0.9. It has been classified as critical. Affected is the function formexeCommand. The manipulation leads to command injection.
This vulnerability is traded as CVE-2024-46048. It is possible to launch the attack remotely. Furthermore, there is an exploit available.
vuldb.com
CVE-2024-46047 | Tenda FH451 1.0.0.9 fromDhcpListClient stack-based overflow
1 year 9 months ago
A vulnerability was found in Tenda FH451 1.0.0.9. It has been declared as critical. Affected by this vulnerability is the function fromDhcpListClient. The manipulation leads to stack-based buffer overflow.
This vulnerability is known as CVE-2024-46047. The attack can be launched remotely. There is no exploit available.
vuldb.com
CVE-2024-31415 | Eaton Foreseer 7.6 insufficiently protected credentials
1 year 9 months ago
A vulnerability classified as problematic was found in Eaton Foreseer 7.6. This vulnerability affects unknown code. The manipulation leads to insufficiently protected credentials.
This vulnerability was named CVE-2024-31415. Local access is required to approach this attack. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2024-31416 | Eaton Foreseer 7.6/7.8.500 improper validation of specified quantity in input
1 year 9 months ago
A vulnerability, which was classified as problematic, has been found in Eaton Foreseer 7.6/7.8.500. This issue affects some unknown processing. The manipulation leads to improper validation of specified quantity in input.
The identification of this vulnerability is CVE-2024-31416. Attacking locally is a requirement. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
Nextcloud Hub 9 released: New features, more security, updated performance
1 year 9 months ago
Nextcloud has launched Nextcloud Hub 9, a significant update to its open-source cloud-based collaboration platform. It introduces several new features to improve user experience, performance, and security. Enhanced security in Nextcloud Hub 9 Nextcloud Hub 9 lets you strengthen your security and administrative controls even further with several new fine-grained security tools and mechanics: The option to set up a PIN code for passwordless authentication, adding an extra layer of security in case someone gains … More →
The post Nextcloud Hub 9 released: New features, more security, updated performance appeared first on Help Net Security.
Help Net Security
What's Next for Secure Communication After Exploding Pagers?
1 year 9 months ago
No OpSec Measure Is Bulletproof to the Effects of a Corrupted Supply Chain
Secure communications in an age of network insecurity has focused mostly on encryption and fears of surveillance tracking. But as this week revealed to the dismay of terrorists and criminals alike, no OpSec measure is bulletproof to the effects of a corrupted supply chain.
Secure communications in an age of network insecurity has focused mostly on encryption and fears of surveillance tracking. But as this week revealed to the dismay of terrorists and criminals alike, no OpSec measure is bulletproof to the effects of a corrupted supply chain.
Cyber Insurers Are Intensely Scrutinizing Healthcare Clients
1 year 9 months ago
As threat actors continue to evolve their attacks to circumvent security measures, cyber insurers are raising the bar for prospective healthcare security clients. Underwriters are increasing their scrutiny and adding new coverage requirements, said Chris Henderson of cybersecurity company Huntress.
Microsoft: Russian Cyber Proxies Targeting Harris Campaign
1 year 9 months ago
Microsoft Says Russia-Linked Cyber Actors Are Supporting Trump by Attacking Harris
Microsoft warned the Kremlin is targeting the 2024 presidential election campaign of Vice President Kamala Harris with its wide-ranging election interference operations. Russian groups likely aligned with the Kremlin have shifted their focus to the Harris campaign in recent months.
Microsoft warned the Kremlin is targeting the 2024 presidential election campaign of Vice President Kamala Harris with its wide-ranging election interference operations. Russian groups likely aligned with the Kremlin have shifted their focus to the Harris campaign in recent months.
Picus Security Receives $45M to Enhance Exposure Management
1 year 9 months ago
Riverwood Capital Leads Investment in Security Validation Firm to Grow in Americas
Picus Security has received $45 million in funding led by Riverwood Capital. The investment will accelerate product development in exposure management, including attack surface management and automated pen testing. The company plans to expand further in the Americas, targeting key growth areas.
Picus Security has received $45 million in funding led by Riverwood Capital. The investment will accelerate product development in exposure management, including attack surface management and automated pen testing. The company plans to expand further in the Americas, targeting key growth areas.
Raptor Train Botnet Infects 260,000 Devices Globally
1 year 9 months ago
Chinese Botnet Targets US Critical Infrastructure and Taiwan
A Chinese state-sponsored botnet called Raptor Train has infected more than 260,000 IoT and office network devices to target critical infrastructure globally. The hackers used zero-days and known vulnerabilities to compromise more than 20 different types of devices to expand their botnet.
A Chinese state-sponsored botnet called Raptor Train has infected more than 260,000 IoT and office network devices to target critical infrastructure globally. The hackers used zero-days and known vulnerabilities to compromise more than 20 different types of devices to expand their botnet.
Tor Says Platform Is Safe After German Police Interception
1 year 9 months ago
German Law Enforcement Reportedly Deanonymized Tor User in 2021
The Tor Project on Wednesday reassured users that they will remain anonymous after media reported that German police successfully used Tor to trace the alleged administrator of a child pornography site. Tor users can continue to use the browser "securely" and the "Tor Network is healthy," it said.
The Tor Project on Wednesday reassured users that they will remain anonymous after media reported that German police successfully used Tor to trace the alleged administrator of a child pornography site. Tor users can continue to use the browser "securely" and the "Tor Network is healthy," it said.
关于发布《网络安全标准实践指南——敏感个人信息识别指南》的通知
1 year 9 months ago
本《实践指南》给出了敏感个人信息识别规则以及常见敏感个人信息类别和示例，可用于指导各组织识别敏感个人信息，也可为敏感个人信息处理和保护工作提供参考。
超过 1000 个 ServiceNow 实例被发现泄露企业知识库数据
1 year 9 months ago
在 2023 年发布有关 ServiceNow 数据泄露的报告后，该公司推出了一项安全更新，引入了新的 ACL，以防止未经身份验证访问客户数据。