Aggregator

各种网络暴力信息在互联网上不断滋生和传播，借助新兴技术和服务演进、升级，对公民个人权益和社会公共利益造成损害。因此，进一步加强对这些网络暴力信息的治理，是实现建设数字中国和网络强国目标的必要举措。

Google DeepMind 研究人员在《自然》期刊上发表论文，称其模型 GenCast 在一周以上的天气预报表现优于目前公认最先进的 European Centre for Medium-Range Weather Forecasts 模型。GenCast 组合使用了大气科学家使用的计算方法和生成式 AI 模型常用的 diffusion 模型。GenCast 模型的分辨率高于欧洲模型的分辨率，而且其所需的算力也比较低。基准测试显示，GenCast 在 97% 的测试中比欧洲模型更准确。DeepMind 还用 GenCast 预测热带气旋的轨迹，前四天 GenCast 的准确度显著高于欧洲模型，其优势保持了大约一周。DeepMind 使用的相关数据将发布在 GraphCast 项目 GitHub 页面上。

本期，一位军人出身的网安企业家分享他对网安市场的行业观察。

大模型RCE漏洞！！

红人计划进行时，快来看看开发者们用豆包MarsCode实现了哪些精彩创意吧~心动不如立即加入，丰厚奖金等你来拿！

以色列商业间谍软件飞马座(Pegasus)攻击超出想象 2500次检测中找出7起感染

ISC Stormcast For Thursday, December 5th, 2024 https://isc.sans.edu/podcastdetail/9242, (Thu, Dec 5th)

We’re on the cusp of a technological revolution that is poised to transform our lives – and we hold the power to shape its impact

授人以鱼不如授人以渔。在绕过杀软的同时利用漏洞，就是我接下来给大家讲的技术手段。

课程基于原著，涵盖书中未尽之精华

BT集团因Black Basta勒索软件攻击关闭部分服务器，尽管服务未受影响，但数据泄露风险引发关注。

看雪论坛作者ID：Jtian

A vulnerability has been found in Allaire ColdFusion Server up to 4.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file openfile.cfm. The manipulation leads to improper privilege management. This vulnerability is known as CVE-1999-0477. The attack can be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Airspan WiMax ProST 4.1. Affected by this vulnerability is an unknown functionality of the component Administration Panel. The manipulation leads to improper authentication. This vulnerability is known as CVE-2008-1262. The attack can be launched remotely. Furthermore, there is an exploit available.

HackSynth is an autonomous penetration testing agent that leverages Large Language Models (LLMs) to solve Capture The Flag (CTF) challenges without human intervention.  It utilizes a two-module architecture: a planner to create commands and a summarizer to understand the hacking process’s current state by employing contextual information from past commands to make future decisions and […]

The post HackSynth : Autonomous Pentesting Framework For Simulating Cyberattacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

用数据说话

Is it possible to install app on smartphone over the WIFI?

A vulnerability, which was classified as critical, was found in Apache Struts. Affected is an unknown function of the component CookieInterceptor. The manipulation leads to improper access controls. This vulnerability is traded as CVE-2012-0392. It is possible to launch the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Boozt Standard 0.9.8 and classified as critical. Affected by this vulnerability is an unknown functionality of the file index.cgi of the component Administration Interface. The manipulation of the argument name leads to memory corruption. This vulnerability is known as CVE-2002-0098. The attack can be launched remotely. Furthermore, there is an exploit available.

其它两个0day的补丁将于12月18日推出