Aggregator

权威认证｜梆梆安全顺利通过CCRC“移动互联网应用程序（App）个人信息安全测试”认证

嘶吼
7 months ago

近日，梆梆安全顺利通过中国网络安全审查认证和市场监管大数据中心（CCRC） “移动互联网应用程序（App）个人信息安全测试”测量审核项目，其中，个人信息的收集、存储、使用，个人信息主体的权利检测参数测试结果为合格。标志着梆梆安全可向App个人信息保护监督管理部门、合格评定机构、App运营者、App用户等提供个人信息安全检测，可作为承担检测、评估等技术服务的参考依据。

中国网络安全审查认证和市场监管大数据中心（英文缩写为：CCRC）是国家市场监督管理总局直属单位。依据《网络安全法》《数据安全法》《个人信息保护法》《网络安全审查办法》及国家有关强制性产品认证法律法规，承担网络安全审查技术与方法研究、网络安全审查技术支撑工作。

本次安全认证依据GB/T 35273《信息安全技术个人信息安全规范》中收集、使用用户信息的要求和GB/T 41391《信息安全技术 移动互联网应用程序（App）收集个人信息基本要求》以及国家行政主管部门发布的政策法规中涉及的要求。认证机构进行综合评价，对符合认证要求的，认证机构颁发认证证书并允许使用认证标志。

梆梆安全从2018年便开展个人信息保护合规检测、咨询等相关服务，依托国家相关法律法规，出具相应的检测方法、检测步骤及合规咨询，包括移动APP安全、数据保护、隐私合规等多方面，覆盖移动应用的设计、开发、检测、发布、运营等各个环节，真正为客户提供APP全生命周期安全解决方案。并可依托专业的技术服务人员，输出全面详尽的合规检测报告，协助移动应用程序开发和运营企业进行隐私合规检测、合规整改，满足合规监管检测、企业自查自纠等检测场景需求，保障应用上架后符合监管单位/机构的相关要求。


目前，梆梆安全已服务10万家以上企业及开发者用户，安全技术覆盖的移动应用软件超过100万，通过App发布前后的合规评估、应急处置、安全培训及认证咨询等技术手段，帮助企业构建全方位、多层次的移动合规安全体系。

未来，梆梆安全在立足于移动应用安全的同时，坚持在数据安全及个人信息保护领域持续深耕，积极践行社会责任与使命担当，以专业的安全服务筑起坚固防线，通过专业的安全产品和服务，为政府、企业、开发者和消费者交付安全、稳固、可信的网络空间生态环境，为企业数据安全隐私合规的健康发展贡献力量。

梆梆安全

Ukrainian hacker gets prison for infostealer operations

Help Net Security
7 months ago

Ukrainian national Mark Sokolovsky was sentenced to 60 months in federal prison for one count of conspiracy to commit computer intrusion. According to court documents, he conspired to operate the Raccoon Infostealer as a malware-as-a-service (MaaS). Individuals who deployed Raccoon Infostealer to steal data from victims leased access to the malware for approximately $200 per month, paid for by cryptocurrency. These individuals used various ruses, such as email phishing, to install the malware onto the … More →

The post Ukrainian hacker gets prison for infostealer operations appeared first on Help Net Security.

Help Net Security

美国确认首例严重禽流感病例

不安全
7 months ago
美国疾控中心（CDC）确认了首例严重禽流感病例。路易斯安那州的一名患者接触了后院的病鸡和死鸡后住院。患者感染的 H5N1 病毒谱系被称为 D1.1 genotype，与最近奶牛以及饲养员感

美国确认首例严重禽流感病例

Solidot
7 months ago
美国疾控中心（CDC）确认了首例严重禽流感病例。路易斯安那州的一名患者接触了后院的病鸡和死鸡后住院。患者感染的 H5N1 病毒谱系被称为 D1.1 genotype，与最近奶牛以及饲养员感染的病毒谱系不同。根据 CDC 的数据，美国目前有逾 60 人感染了禽流感，实际感染数字可能更高。随着 H5N1 禽流感病毒传播到南加州的畜群，加州州长 Gavin Newsom 宣布进入紧急状态。

CVE-2014-2143 | Cisco IOS/IOS XE up to 15.4(1.1)T/15.4(1)T IKE Main Mode Packet denial of service (CSCun31021/CSCun31021 / Nessus ID 73736)

Vuldb Updates
7 months ago
A vulnerability has been found in Cisco IOS and IOS XE up to 15.4(1.1)T/15.4(1)T and classified as problematic. This vulnerability affects unknown code of the component IKE Main Mode Packet Handler. The manipulation leads to denial of service. This vulnerability was named CVE-2014-2143. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2014-2128 | Cisco ASA up to 9.1 SSL VPN Authentication HTTP POST Request improper authentication (cisco-sa-20140409-asa / Nessus ID 73533)

Vuldb Updates
7 months ago
A vulnerability classified as critical was found in Cisco ASA up to 9.1. This vulnerability affects unknown code of the component SSL VPN Authentication. The manipulation as part of HTTP POST Request leads to improper authentication. This vulnerability was named CVE-2014-2128. The attack can be initiated remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.
vuldb.com

CVE-2014-2129 | Cisco ASA up to 9.1 SIP HTTP POST Request input validation (cisco-sa-20140409-asa / Nessus ID 73533)

Vuldb Updates
7 months ago
A vulnerability, which was classified as critical, has been found in Cisco ASA up to 9.1. This issue affects some unknown processing of the component SIP Handler. The manipulation as part of HTTP POST Request leads to improper input validation. The identification of this vulnerability is CVE-2014-2129. The attack may be initiated remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.
vuldb.com

CVE-2014-2154 | Cisco ASA up to 8.4(.6) SIP Inspection Engine resource management (Alert 33904 / Nessus ID 73827)

Vuldb Updates
7 months ago
A vulnerability classified as problematic was found in Cisco ASA up to 8.4(.6). Affected by this vulnerability is an unknown functionality of the component SIP Inspection Engine. The manipulation leads to improper resource management. This vulnerability is known as CVE-2014-2154. The attack can be launched remotely. There is no exploit available.
vuldb.com

CVE-2014-2276 | EMC Connectrix Manager up to 12.1.1 Firmware access control (ID 123082 / XFDB-91987)

Vuldb Updates
7 months ago
A vulnerability classified as problematic was found in EMC Connectrix Manager up to 12.1.1. Affected by this vulnerability is an unknown functionality of the component Firmware. The manipulation leads to improper access controls. This vulnerability is known as CVE-2014-2276. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

Well done, ANY.RUN: Our Top Cybersecurity Awards in 2024

Anyrun
7 months ago

It’s December, and it’s high time to tell Santa how good girls and boys we’ve been at ANY.RUN. It’s time to reap acknowledgment from the industry, the community, and the customers. Here are the major tech awards we’ve received in 2024 as cybersecurity experts.   Cybersecurity Excellence Awards from Cybersecurity Insiders We nailed it in the […]

The post Well done, ANY.RUN: Our Top Cybersecurity Awards in 2024 appeared first on ANY.RUN's Cybersecurity Blog.

ANY.RUN

Managed ad