Aggregator

网信办发布《移动互联网未成年人模式建设指南》，将未成年人模式范围由应用程序扩大到移动智能终端、应用程序、应用程序分发平台三方，“未成年人模式将在移动智能终端设置统一入口，用户可一键开启，所有应用程序实现同步切换，形成安全可控的独立空间。”《建设指南》要求：
用户可在首次开机或系统设置选择不需要未成年人模式，系统将不再出现相关提醒...
退出未成年人模式，需要家长进行验证同意。移动智能终端应当在符合个人信息保护的前提下，提供密码、指纹、人脸等单一或复合验证方式...
（1）在面向不满16周岁用户的未成年人模式中，默认推荐使用总时长不超过1小时，同时提供家长豁免操作；
（2）在面向16周岁以上不满18周岁用户的未成年人模式中，默认推荐使用总时长不超过2小时，同时提供家长豁免操作；
（3）在未成年人模式下，当未成年人用户连续使用移动智能终端时长超过30分钟，移动智能终端应当发出休息提醒；
（4）在未成年人模式下，移动智能终端每日22时至次日6时期间默认不向未成年人提供服务，同时提供家长豁免操作；
采取必要措施防范外链信息内容风险...

Z-BL4CX-H4T Defaced the Website of Chavez Tatuador

A critical security flaw has been uncovered in certain TP-Link routers, potentially allowing malicious actors to remotely compromise affected devices. The vulnerability, identified as CVE-2024-11237, affects TP-Link VN020 F3v(T) routers running firmware version TT_V6.2.1021, which are primarily deployed through Tunisie Telecom and Topnet ISPs. Similar variants of the router used in Algeria and Morocco are […]

The post Critical TP-Link DHCP Vulnerability Let Attackers Execute Arbitrary Code Remotely appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Palo Alto Networks is warning that a critical zero-day vulnerability on Next-Generation Firewalls (NGFW) management interfaces, currently tracked as 'PAN-SA-2024-0015,' is actively being exploited in attacks. [...]

A new report from the Open Software Supply Chain Attack Reference (OSC&R) team provides a framework to reduce how much vulnerable software reaches production.

Submit #443950 / VDB-284719

Submit #443906 / VDB-284718

主站 分类 漏洞 工具 极客

Submit #443398 / VDB-284717

Submit #443386 / VDB-284716

Submit #443385 / VDB-284715

Submit #443384 / VDB-283418

Submit #443370 / VDB-284711

0Day открывает доступ к межсетевым экранам Palo Alto по всему миру.

Feds sentence PII extortionist, Volt Typhoon rebuilds botnet to target old SOHO routers, and TA455 uses fake job lures in aerospace industry

The post The Good, the Bad and the Ugly in Cybersecurity – Week 46 appeared first on SentinelOne.

Insight #1: Two tricks to stop mystery breaches

The majority of security leaders reportedly don’t know what caused data security incidents at their organizations over the past 12 months. To reduce the likelihood of unknown security breaches, prioritize regular staff training and tabletop exercises. This empowers employees to identify and escalate potential risks, bolstering your overall security posture and resilience against cyberattacks.

The post Cybersecurity Insights with Contrast CISO David Lindner | 11/15/24 appeared first on Security Boulevard.