Aggregator

从攻击者视角发现弱点，提升资产可见性，识别评估和响应潜在威胁。

The North Korean Lazarus hacking group exploited a Google Chrome zero-day tracked as CVE-2024-4947 through a fake decentralized finance (DeFi) game targeting individuals in the cryptocurrency space. [...]

Firm Won't Deploy Feature in the EU, UK Due to Data Collection Norms
Meta is rolling out facial recognition technology on its social media platforms to spot scam ads featuring celebrity deepfakes. Meta took down 8,000 of the "celeb bait" scam ads. The feature also aims to verify the identities of users locked out of their Facebook or Instagram accounts.

Tech Giants, AI Firms, Academics Urge Congress to Take Action by Term-End
A coalition of more than 60 AI industry players is pushing Congress to prioritize legislation that would codify the U.S. Artificial Intelligence Safety Institute. The letter says the action would allow U.S. to maintain influence in the development of science-backed standards for advanced AI systems.

Firm Won't Deploy Feature in the EU, UK Due to Data Collection Norms
Meta is rolling out facial recognition technology on its social media platforms to spot scam ads featuring celebrity deepfakes. Meta took down 8,000 of the "celeb bait" scam ads. The feature also aims to verify the identities of users locked out of their Facebook or Instagram accounts.

Tech Giants, AI Firms, Academics Urge Congress to Take Action by Term-End
A coalition of more than 60 AI industry players is pushing Congress to prioritize legislation that would codify the U.S. Artificial Intelligence Safety Institute. The letter says the action would allow U.S. to maintain influence in the development of science-backed standards for advanced AI systems.

别担心AI控制人类了，PUA大模型是分分钟的事儿。

A vulnerability was found in Forescout SecureConnector up to 11.3.5 on Windows. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Configuration File Handler. The manipulation leads to insecure default initialization of resource. This vulnerability is handled as CVE-2024-9949. It is possible to launch the attack on the local host. There is no exploit available.

360中标中移动集采

出门在外，善自珍重，女性更应保护自己。不合常理的紧急求租更要小心。

A vulnerability was found in AshPostgres up to 2.4.9. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to files or directories accessible. This vulnerability is known as CVE-2024-49756. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Terms Descriptions Plugin up to 3.4.6 on WordPress. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2024-9374. It is possible to launch the attack remotely. There is no exploit available.

实至名归！

A vulnerability was found in Cisco Firepower Management Center and classified as problematic. This issue affects some unknown processing. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2024-20388. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Cisco Firepower Management Center and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross site scripting. This vulnerability was named CVE-2024-20387. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in Cisco Firepower Management Center. This affects an unknown part. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2024-20377. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in Cisco ASA and Firepower Threat Defense. Affected by this issue is some unknown functionality of the component VPN Web Client Services. The manipulation leads to basic cross site scripting. This vulnerability is handled as CVE-2024-20382. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in Cisco ASA and Firepower Threat Defense. Affected by this vulnerability is an unknown functionality of the component VPN Web Client Services. The manipulation leads to basic cross site scripting. This vulnerability is known as CVE-2024-20341. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.