Aggregator

Бизнесы исчезают один за другим. Так решил ИИ. Апелляций не будет

Securitylab.ru

1 year ago

Бан в Instagram стал угрозой репутации, о которой никто не предупреждал.

智慧未来少年守护丨第五届极客少年挑战赛正式启幕！

嘶吼

1 year ago

数字浪潮奔涌，网安使命在肩！由多部门联合主办的第五届极客少年挑战赛，即日正式启动全国报名！

本届赛事在赛制体系上实现全面升级，首次设立中、小学双赛道，赛事同步扩大辐射范围，面向全国在校中小学生开放报名通道，诚邀少年英才共赴网络安全巅峰对决，在跨地域竞技交流中推动青少年网安素养整体提升。

【赛制革新双轨并行】

本届赛事首次采用"中小学组别并行"模式，通过"线上预赛+初赛""线下夏令营+决赛"的立体化赛程设计，充分考虑不同学段青少年的认知特点和技能水平，为中小学生量身打造阶梯式竞技平台。预赛即日起至7月6日截止，期间选手可随时报名参与线上答题。赛题聚焦AI安全、计算机基础知识、个人信息保护、网络安全法律法规等专业领域，通过理论考核、场景推演、防御实战等多元化形式，全方位锻造选手"学以致用、攻防兼备"的网络安全素养。

【人才筑基多维培育】

延续往届经典特色，本届赛事将继续联合四川大学开展"极客少年·山海营"。初赛晋级选手将参与“极客少年·山海营”特训计划，在四川大学教授及企业技术专家带领下，开展网络安全攻防特训、产业基地实地研学。决赛模拟真实网络攻防场景，检验选手应急处置与协同防御能力，助力构建网安人才培育生态。

【校园深耕知识赋能】

赛事延续“网络安全进校园”传统，预赛期间将走进多所中小学开展专题讲座，介绍极客少年挑战赛，并围绕“AI风险识别”“个人信息防护”等主题进行知识科普。通过案例解析、互动问答等形式，帮助中小学生建立网络安全思维。

【参赛须知】

1、参赛对象：本届大赛面向全国在校中小学生开放挑战。本赛事仅接受中华人民共和国合法公民报名（含港澳地区），所有参赛者不得有违法犯罪记录，并进行实名注册。

2、报名系统：本届大赛选手分为小学组和中学组两个组别，比赛中各组独立排名。

3、队伍组成：参赛者须以个人为单位报名参赛，须设指导老师1名。指导老师不得参赛，每名指导老师可以带领不同的参赛队员。

4、填报要求：请填写正确且真实的参赛选手及指导老师信息，在报名截止后，不得变更身份信息、联系方式、学校信息以及指导老师信息，赛事组委会将在初赛结束后逐一核查，如发现存在虚假信息，经核实后将取消该参赛选手所有成绩及奖项。

五载春秋磨剑，今朝锋芒毕现。四年前从蓉城起步的极客少年挑战赛，现如今已成长为中国青少年网络安全教育的标杆品牌。这个夏天，让我们共同见证新一代青少年网安卫士的崛起！

扫描上方二维码，或微信搜索[第五届极客少年挑战赛预赛]小程序登入报名，即可开启你的极客征程！

仿真考卷下载链接：https://pan.baidu.com/s/1CnyvXN7UZ50rrOHNLeOYvA?pwd=2025

企业资讯

[42000][1071] Specified key was too long; max key length is 767 bytes

杨龙

1 year ago

已email字段为例，改成latin1_bin ： alter table resumemodify emai […]

杨龙

IJCAI 25 | SAP——基于拆分与私有化框架的语言模型隐私保护微调方案

字节跳动技术团队

1 year ago

State-sponsored hackers compromised the email accounts of several Washington Post journalists

Security Affairs

1 year ago

State-sponsored hackers compromised the email accounts of several journalists working at the Washington Post. A cyberattack, likely carried out by state-sponsored hackers, compromised the Microsoft email accounts of Washington Post journalists, including reporters covering China and national security. “A cyberattack on the Washington Post compromised email accounts of several journalists and was potentially the work […]

Pierluigi Paganini

CVE-2023-0804 | LibTIFF 4.4.0 TIFF File tools/tiffcrop.c tiffcrop out-of-bounds write (Issue 497 / Nessus ID 240052)

Vuldb Updates

1 year ago

A vulnerability was found in LibTIFF 4.4.0. It has been declared as critical. This vulnerability affects the function tiffcrop of the file tools/tiffcrop.c of the component TIFF File Handler. The manipulation leads to out-of-bounds write. This vulnerability was named CVE-2023-0804. The attack can be initiated remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

vuldb.com

CVE-2023-0801 | LibTIFF 4.4.0 TIFF File libtiff/tif_unix.c tiffcrop out-of-bounds write (Issue 498 / Nessus ID 240052)

Vuldb Updates

1 year ago

A vulnerability has been found in LibTIFF 4.4.0 and classified as critical. Affected by this vulnerability is the function tiffcrop of the file libtiff/tif_unix.c of the component TIFF File Handler. The manipulation leads to out-of-bounds write. This vulnerability is known as CVE-2023-0801. The attack can be launched remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

vuldb.com

CVE-2023-0796 | LibTIFF 4.4.0 TIFF File tools/tiffcrop.c out-of-bounds (Issue 499 / Nessus ID 240052)

Vuldb Updates

1 year ago

A vulnerability was found in LibTIFF 4.4.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file tools/tiffcrop.c of the component TIFF File Handler. The manipulation leads to out-of-bounds read. This vulnerability is handled as CVE-2023-0796. The attack may be launched remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

vuldb.com

CVE-2023-0802 | LibTIFF 4.4.0 TIFF File tools/tiffcrop.c tiffcrop out-of-bounds write (Issue 500 / Nessus ID 240052)

Vuldb Updates

1 year ago

A vulnerability was found in LibTIFF 4.4.0 and classified as critical. Affected by this issue is the function tiffcrop of the file tools/tiffcrop.c of the component TIFF File Handler. The manipulation leads to out-of-bounds write. This vulnerability is handled as CVE-2023-0802. The attack may be launched remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

vuldb.com

CVE-2024-21404 | Microsoft Visual Studio/.NET denial of service (Nessus ID 240053)

Vuldb Updates

1 year ago

A vulnerability classified as critical has been found in Microsoft Visual Studio and .NET. Affected is an unknown function. The manipulation leads to denial of service. This vulnerability is traded as CVE-2024-21404. It is possible to launch the attack remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

vuldb.com

CVE-2023-40745 | LibTIFF up to 4.5.1 tiffcp.c integer overflow (Nessus ID 240052)

Vuldb Updates

1 year ago

A vulnerability classified as critical has been found in LibTIFF up to 4.5.1. This affects an unknown part of the file tiffcp.c. The manipulation leads to integer overflow. This vulnerability is uniquely identified as CVE-2023-40745. It is possible to initiate the attack remotely. There is no exploit available.

vuldb.com

CVE-2024-21386 | Microsoft Visual Studio/ASP.NET Core denial of service (Nessus ID 240053)

Vuldb Updates

1 year ago

A vulnerability was found in Microsoft Visual Studio and ASP.NET Core. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to denial of service. This vulnerability is known as CVE-2024-21386. The attack can be launched remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

vuldb.com

Beyond Just Detection: Oasis Offers Full Lifecycle Management for NHIs

Security Boulevard

1 year ago

Oasis is the first and only NHI company to complete full lifecycle management, with provisioning built in.

The post Beyond Just Detection: Oasis Offers Full Lifecycle Management for NHIs appeared first on Security Boulevard.

John D. Boyle

Любовь под процент: Apple брала комиссию за чувства и попала на 50 миллионов евро

Securitylab.ru

1 year ago

Всё началось как обычный спор о платежах — но превратилось в судебную историю года.

CVE-2025-5209 | Ivory Search Plugin up to 5.5.9 on WordPress Setting cross site scripting (EUVD-2025-18481)

VulDB Recent Entries

1 year ago

A vulnerability, which was classified as problematic, has been found in Ivory Search Plugin up to 5.5.9 on WordPress. Affected by this issue is some unknown functionality of the component Setting Handler. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2025-5209. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

vuldb.com

大部分重子物质藏身于星际之间

Solidot

1 year ago

天文学家运用观测快速射电暴（Fast Radio Bursts, FRBs）首度证实，超过四分之三的宇宙重子物质（baryonic matter）潜藏于星系间稀薄的气体中，对理解宇宙中物质的分布与交互作用迈出关键一步。科学界已知宇宙中至少有一半的重子物质尚未被直接观测确认。快速射电暴为来自遥远星系的短促而强烈的电波讯号，近年被证实可用以测量宇宙中的重子含量，但直到近期仍无法用来定位这些物质的具体位置。研究团队分析了60个快速射电暴事件，从距离地球仅1,174万光年的M81星系中的快速电波爆 20200120E，一直到距离达91亿光年的快速电波爆 20230521B。透过量测这些讯号在穿越宇宙空间过程中所遭遇的延迟（色散测量），研究团队成功追踪其沿途所通过的气体密度，进而将遗失的重子物质定位于星系间介质（intergalactic medium, IGM）中。研究结果显示，约76%的重子物质存在于星系间介质之中，另有约15%分布于星系晕（halo）中，其余则以恒星或冷星系气体的形式存在。此一分布结果与先前先进的宇宙模拟预测高度一致，为首次以观测方式直接加以验证。

CVE-2025-43200 | Apple iOS/iPadOS iCloud Link Remote Code Execution (Nessus ID 238308)

Vuldb Updates

1 year ago

A vulnerability was found in Apple iOS and iPadOS. It has been classified as critical. This affects an unknown part of the component iCloud Link Handler. The manipulation leads to Remote Code Execution. This vulnerability is uniquely identified as CVE-2025-43200. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

vuldb.com