Aggregator

看雪论坛作者ID：是气球呀

A vulnerability classified as problematic was found in Oracle Database Server up to 8.1.5. Affected by this vulnerability is an unknown functionality of the file nmiconf.tcl of the component Intelligent Agent. The manipulation of the argument ORACLE_HOME as part of Environment Variable leads to Local Privilege Escalation. This vulnerability is known as CVE-1999-0888. It is possible to launch the attack on the local host. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

为最大限度切断境内不法分子与境外诈骗集团勾结的犯罪链条，近日，最高人民检察院、公安部决定继续联合挂牌督办第四批8起特大跨境电信网络诈骗犯罪案件，依法从重从快严厉打击跨境电信网络诈骗及境内关联违法犯罪活动。

欧洲理事会2日通过两项关于网络安全的法案，旨在进一步加强欧盟抵御网络威胁的能力和网络团结合作。这两项法律分别为《网络团结法案》和《网络安全法案》修正案，属于欧盟网络安全立法“一揽子计划”的一部分。

近日，《全球数据跨境流动合作倡议》全文对外发布，就各方普遍关切的数据跨境流动治理问题提出了建设性解决思路，明确中国促进全球数据跨境流动合作的立场主张。

意见反馈截止时间为2025年1月31日24:00前。

大数据时代，信息在网络空间发布、传播渠道愈发丰富多样。值得警惕的是，一些敏感信息在未经脱密处理、未经风险隐患评估的情况下，通过互联网公开传播，成为境外间谍情报机关获取开源情报的重要来源，对我国家安全构成威胁。

2024年11月20日，2024中国5G+工业互联网大会“5G+AI赋能新型工业化”分论坛在武汉市成功举办。会上，中国移动重磅发布了工业互联网行业首份聚焦人工智能安全的《AI+工业互联网安全解决方案白皮书》。

近日，全球领先的IT市场研究和咨询公司IDC发布《IDC Technology Assessment：中国安全大模型实测之安全运营，2024》（Doc#CHC52725024，2024年11月）报告。

The North Korea-aligned threat actor known as Kimsuky has been linked to a series of phishing attacks that involve sending email messages that originate from Russian sender addresses to ultimately conduct credential theft. "Phishing emails were sent mainly through email services in Japan and Korea until early September," South Korean cybersecurity company Genians said. "Then, from mid-September,

近日，一起大规模的数据泄露事件震动了网络安全界。名为“HikkI-Chan”的黑客在臭名昭著的Breach Forums上泄露了超过3.9亿VK用户的个人信息。

The Foundation for Defense of Democracies has warned that Chinese-made LIDAR sensors could be weaponized for espionage

针对七大行业进行供需两端的市场及技术趋势分析。今天走进教育行业。

勒索防护新思路｜通过验证提升勒索防护能力

Группа специалистов становится на стражу целостности голосования.

Trying to hack Thermopro TP25

KDE 项目今年 8 月底宣布，从 Plasma 6.2 开始将在桌面环境中直接请求捐款。用户会在每年的 12 月看到一次系统通知，请求向非盈利组织 KDE e.V.捐款。开发者表示他们尽最大努力减少请求捐款的系统通知的恼人程度，通知很小且不显眼，容易关闭。关闭之后一年之后才会再次出现。用户也很容易永久关闭该通知。现在 12 月已经过去了一天，请求捐款的系统通知是否有效？开发者报告，非常有效，KDE e.V.在一天内收到的捐款两倍于之前一整个月收到的捐款。对社交网络上相关评论的跟踪显示，大部分用户对此都持正面态度，几乎没有差评。Kubuntu 和 Debian 等主流发行版尚未使用 Plasma 6.2 桌面，开发者猜测明年 12 月的情况可能会更好。

OpenAI正在考虑在ChatGPT中针对免费用户投放广告以平衡成本支出

A vulnerability was found in Netgear WGR614 V8/V9. It has been rated as critical. Affected by this issue is some unknown functionality of the component Web Management Interface. The manipulation of the argument "?") leads to improper input validation. This vulnerability is handled as CVE-2008-6122. The attack may be launched remotely. Furthermore, there is an exploit available.

A critical vulnerability has been discovered in Salesforce applications that could potentially allow a full account takeover. The vulnerability, uncovered during a penetration testing exercise, hinges on misconfigurations within Salesforce Communities, particularly exploiting the Salesforce Lightning component framework. The implications of this vulnerability are severe, affecting both data security and privacy. Attackers could gain access […]

The post Salesforce Applications Vulnerability Could Allow Full Account Takeover appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.