Aggregator

AI 发展很快，并且还在加速。

A vulnerability was found in Vizayn Urun Tanitim Sitesi 0.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file default.asp. The manipulation of the argument id leads to sql injection. This vulnerability is known as CVE-2007-2803. The attack can be launched remotely. Furthermore, there is an exploit available.

(Download trurl here)Release presentationAt 08:00 UTC I will do

A vulnerability classified as critical has been found in D-Link DAR-7000 up to 20240912. Affected is an unknown function of the file /view/DBManage/Backup_Server_commit.php. The manipulation of the argument host leads to os command injection. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability is traded as CVE-2024-9004. It is possible to launch the attack remotely. Furthermore, there is an exploit available. It is recommended to replace the affected component with an alternative.

A vulnerability was found in Jinan Chicheng Company JFlow 2.0.0. It has been rated as problematic. This issue affects the function AttachmentUploadController of the file /WF/Ath/EntityMutliFile_Load.do of the component Attachment Handler. The manipulation of the argument oid leads to improper access controls. The identification of this vulnerability is CVE-2024-9003. The attack may be initiated remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

A US news website recently faced a 1.85 billion request DDoS attack. Learn how DataDome stopped the attack in its tracks, keeping the customer safe.

The post How DataDome Protected a US News Website from a 12-Hour DDoS Attack appeared first on Security Boulevard.

Submit #407023 / VDB-278154

Artificial intelligence (AI) is already embedded deep into the economic and social fabric of the world. It does everything from operating website chatbots to authenticating users with their bank. It keeps planes in the sky and cars on the road. It identifies criminals and reviews mortgage and job applications. But as it becomes more important to our daily lives, regulators are getting nervous.

The post The EU AI Act and the Need for Data-Centric Security appeared first on Security Boulevard.

German law enforcement seized 47 cryptocurrency exchange services hosted in the country that facilitated illegal money laundering activities for cybercriminals, including ransomware gangs. [...]

“Hoe kunnen datawetenschap en kunstmatige intelligentie bijdragen aan moderne oorlogsvoering?" Met die prikkelende vraag begon Roy Lindelauf vandaag zijn oratie Zwaartepunt Data: Datawetenschap en AI in het militaire domein. Lindelauf werd officieel geïnstalleerd als hoogleraar data science en AI op de Nederlandse Defensie Academie (NLDA) in Breda. Hij werkt aan de Faculteit Militaire Wetenschappen (FMW).

Submit #406225 / VDB-278153

A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been declared as critical. This vulnerability affects the function setTracerouteCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument command leads to os command injection. This vulnerability was named CVE-2024-9001. The attack can be initiated remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

Submit #406140 / VDB-278152

A vulnerability was found in FrogCMS 0.9.5. It has been classified as problematic. This affects an unknown part of the file /admin/?/user/add. The manipulation leads to cross-site request forgery. This vulnerability is uniquely identified as CVE-2024-46394. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in Ece Software Electronic Ticket System and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2024-7785. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in linlinjava litemall 1.8.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file AdminGoodscontroller.java. The manipulation of the argument goodsId/goodsSn/name parameters leads to sql injection. This vulnerability is known as CVE-2024-46382. The attack can be launched remotely. There is no exploit available.

A previously undocumented malware called SambaSpy is exclusively targeting users in Italy via a phishing campaign orchestrated by a suspected Brazilian Portuguese-speaking threat actor. "Threat actors usually try to cast a wide net to maximize their profits, but these attackers are focused on just one country," Kaspersky said in a new analysis. "It's likely that the attackers are testing the

A vulnerability classified as critical has been found in Arabia2000 Car Wallpapers HD 1.3. Affected is an unknown function of the component X.509 Certificate Handler. The manipulation leads to cryptographic issues. This vulnerability is traded as CVE-2014-6857. The attack can only be done within the local network. There is no exploit available.

Discover actionable strategies to strengthen your organization’s incident response and crisis management. Gain insights into improving cyber readiness and effectively responding to threats.

The post Executive Guide to Incident Response Readiness appeared first on Sygnia.

Onboarding new employees is an important time for any organization but comes with a unique set of security risks. Learn more from Specops Software about these risks and how to mitigate them. [...]