Aggregator

FSF 呼吁迁移出 GitHub 以抗议微软 Windows 11 对 TPM2.0 的强制性要求

Solidot
1 year 6 months ago
微软高管上个月表示，TPM2.0 对 Windows 11 是必不可少的，不配备 TPM 的 Windows 10 电脑将无法升级到 Windows 11。TPM 代表 Trusted Platform Module，是用于储存加密密钥等敏感数据的专用安全芯片或固件，提供了硬件级安全性，确保敏感数据没有未经授权访问。对于 Windows 11 对 TPM2.0 的强制性要求，自由软件基金会（FSF）呼吁举行抗议，认为 Windows 10 即将终止支持，将无法再获得安全更新，而仍然能正常运行的 Windows 10 电脑无法升级到 Windows 11 是微软自己制造的问题。FSF 呼吁 Windows 10 用户或者迁移到 GNU/Linux，避开微软的新软件，将自己的项目迁移出微软旗下的代码托管平台 GitHub。减少数字垃圾，摆脱微软的控制，实现自己控制软件的权利。

Balancing proprietary and open-source tools in cyber threat research

Help Net Security
1 year 6 months ago

In this Help Net Security interview, Thomas Roccia, Senior Security Researcher at Microsoft, discusses how threat research drives faster, better decision-making in cybersecurity operations. Roccia provides insights into balancing internal and external research strategies, the influence of AI and geopolitical events, and how organizations can strengthen their security posture to counter threats.

The post Balancing proprietary and open-source tools in cyber threat research appeared first on Help Net Security.

Mirko Zorz

CVE-2013-5318 | Benjamin Arnaudetr Ginkgocms 5.0 index.php rang sql injection (EDB-27274 / XFDB-86395)

Vuldb Updates
1 year 6 months ago
A vulnerability was found in Benjamin Arnaudetr Ginkgocms 5.0. It has been rated as critical. This issue affects some unknown processing of the file index.php. The manipulation of the argument rang leads to sql injection. The identification of this vulnerability is CVE-2013-5318. The attack may be initiated remotely. Furthermore, there is an exploit available.
vuldb.com

Weekly Update 433

Troy Hunt
1 year 6 months ago

It sounds easy - "just verify people's age before they access the service" - but whether we're talking about porn in the US or Australia's incoming social media laws, the reality is way more complex than that. There's no unified

Troy Hunt

CVE-2001-0421 | Sun Solaris 2.6/8.0 FTP Server CWD Password information disclosure (EDB-20764 / Nessus ID 13378)

Vuldb Updates
1 year 6 months ago
A vulnerability was found in Sun Solaris 2.6/8.0. It has been classified as critical. This affects an unknown part of the component FTP Server. The manipulation of the argument CWD with the input ~ leads to information disclosure (Password). This vulnerability is uniquely identified as CVE-2001-0421. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2016-2209 | Symantec Endpoint Protection up to 12.1.6 MP4 Dec2SS memory corruption (SYM16-010 / EDB-40037)

Vuldb Updates
1 year 6 months ago
A vulnerability classified as critical has been found in Symantec Endpoint Protection up to 12.1.6 MP4. Affected is an unknown function of the component Dec2SS. The manipulation leads to memory corruption. This vulnerability is traded as CVE-2016-2209. It is possible to launch the attack remotely. Furthermore, there is an exploit available. It is recommended to apply a patch to fix this issue.
vuldb.com

CVE-2017-9810 | Kaspersky Anti-Virus up to 8.0.4 on Linux Web Interface 7pk security (ID 143190 / EDB-42269)

Vuldb Updates
1 year 6 months ago
A vulnerability was found in Kaspersky Anti-Virus up to 8.0.4 on Linux and classified as problematic. Affected by this issue is some unknown functionality of the component Web Interface. The manipulation leads to 7pk security features. This vulnerability is handled as CVE-2017-9810. The attack may be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.
vuldb.com

Managed ad