Qilin
You must login to view this content
Aggregator
The role of the cybersecurity PM in incident-driven development
10 months 4 weeks ago
From PowerShell abuse to USB data theft, modern threats hit fast—and hard.vSee how security-minded PMs are responding with real-time controls, smarter policies, and tools like ThreatLocker Patch Management. [...]
Sponsored by ThreatLocker
Why Security Nudges Took Off
10 months 4 weeks ago
Nudges can be powerful — but they are not immune to overuse or misapplication.
Swati Babbar
微软 CEO 轻淡的回应公司裁员之谜
10 months 4 weeks ago
微软 CEO 纳德拉（Satya Nadella）周四在给员工的备忘录中简单回应了大规模裁员引发员工担忧一事。微软在股价创新高利润创纪录向 AI 大规模投资的同时进行了大规模裁员，今年至今裁员逾 1.5 万人，其中 7 月初裁掉了 9 千人。为什么公司状况如此之好却仍然进行裁员？纳德拉使用了标准的模糊语言，没有正面回应，只是说裁员给员工带来了压力，但是进步不是沿着一条直线，是动态的，有时候不协调，但总是苛刻的，我们还是来谈谈使命吧。这是高管或政客在不愿意正面回应时使用的话术，没什么意义，他不愿意告诉员工他的薪酬是与利润和股价挂钩，而不是与员工的忠诚挂钩，裁员能让投资者或股东满意，对投资者有利，对他也有利。
ChatGPT, к ноге. Думать и говорить теперь будет Трамп — через тебя
10 months 4 weeks ago
Белый дом учит искусственный интеллект послушанию.
CVE-2022-45442 | Sinatra up to 2.2.2/3.0.3 Header Content-Disposition code download (GHSA-8x94-hmjh-97hq / Nessus ID 242690)
10 months 4 weeks ago
A vulnerability was found in Sinatra up to 2.2.2/3.0.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Header Handler. The manipulation of the argument Content-Disposition leads to download of code without integrity check.
This vulnerability is known as CVE-2022-45442. The attack can be launched remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2025-40597 | SonicWALL SMA 100 Web Interface heap-based overflow (SNWLID-2025-0012 / Nessus ID 242692)
10 months 4 weeks ago
A vulnerability has been found in SonicWALL SMA 100 and classified as critical. This vulnerability affects unknown code of the component Web Interface. The manipulation leads to heap-based buffer overflow.
This vulnerability was named CVE-2025-40597. The attack can be initiated remotely. There is no exploit available.
vuldb.com
CVE-2025-40596 | SonicWALL SMA 100 Web Interface stack-based overflow (SNWLID-2025-0012 / Nessus ID 242692)
10 months 4 weeks ago
A vulnerability was found in SonicWALL SMA 100 and classified as critical. This issue affects some unknown processing of the component Web Interface. The manipulation leads to stack-based buffer overflow.
The identification of this vulnerability is CVE-2025-40596. The attack may be initiated remotely. There is no exploit available.
vuldb.com
Despite changes, crisis pregnancy centers still attract scrutiny over HIPAA promises
10 months 4 weeks ago
Some crisis pregnancy centers (CPCs) still tell visitors that their data is protected under the HIPAA privacy law — despite guidance to the contrary from the government and CPCs' own umbrella organizations. Data privacy and abortion-rights groups want states to do more to end those claims.
Multiple Vulnerabilities in Tridium Niagara Framework Let Attacker to Collect Sensitive Data from the Network
10 months 4 weeks ago
Researchers identified 13 critical vulnerabilities in Tridium’s widely-deployed Niagara Framework that could allow attackers to compromise building automation systems and collect sensitive network data. The vulnerabilities, affecting versions 4.10u10 and earlier, as well as 4.14u1 and earlier, enable attackers with network access to execute sophisticated attack chains resulting in complete system compromise, including root-level remote […]
The post Multiple Vulnerabilities in Tridium Niagara Framework Let Attacker to Collect Sensitive Data from the Network appeared first on Cyber Security News.
Florence
【转载】美军首次实弹试射“堤丰”的地点分析
10 months 4 weeks ago
美陆军第3多域特遣部队在美海军陆战队、美海军以及澳大利亚陆军的联合协作下，在澳大利亚北领地使用“堤丰”系统实弹发射1枚“标准-6”导弹，成功击沉海上目标靶船。现根据卫星影像结合开源信息，对美军本次实弹试射的地理位置信息和技术特点进行深度解析
【资料】美国情报总监公布新证据揭露奥巴马指挥制作虚假情报
10 months 4 weeks ago
NPM 包 “is” 被攻陷 设备遭完全访问
10 months 4 weeks ago
速更新
《中国开源发展深度报告（2024）》发布，奇安信聚焦开源安全参与编制
10 months 4 weeks ago
作为国内网络安全行业的领军企业，奇安信旗下代码安全实验室深度参与了本次报告的编制工作，并指出，开源软件的漏洞问题日益严峻，整体安全风险仍在持续。
密西根大学 | 消息推送在审查规避中的应用
10 months 4 weeks ago
Hacker Added Prompt to Amazon Q to Erase Files and Cloud Data
10 months 4 weeks ago
A hacker injected a malicious prompt into Amazon Q via GitHub, aiming to delete user files and wipe AWS data, exposing a major security flaw.
Deeba Ahmed
U.S. Woman Sentenced to 8.5 Years for Role in North Korean Worker Scam
10 months 4 weeks ago
Christina Marie Chapman, an Arizona resident, was sentenced to 8.5 years in prison for her role in a wide-ranging North Korean IT worker scam that sent $17 million to the outlaw country. Chapman ran a laptop farm from her home, validated stolen U.S. identities for the scammers, and transferred money overseas to the bad actors.
The post U.S. Woman Sentenced to 8.5 Years for Role in North Korean Worker Scam appeared first on Security Boulevard.
Jeffrey Burt
U.S. Woman Sentenced to 8.5 Years for Role in North Korean Worker Scam
10 months 4 weeks ago
A 50-year-old Arizona woman who pleaded guilty in February to her role in a massive North Korean
Critical VMware Tools VGAuth Vulnerabilities Enable Full System Access for Attackers
10 months 4 weeks ago
Two critical vulnerabilities in the VMware Guest Authentication Service (VGAuth) component of VMware Tools allow local attackers to escalate privileges from any user account to SYSTEM-level access on Windows virtual machines. The vulnerabilities, tracked as CVE-2025-22230 and CVE-2025-22247, affect VMware Tools installations across ESXi-managed environments and standalone VMware Workstation deployments. Key Takeaways1. VMware Tools VGAuth […]
The post Critical VMware Tools VGAuth Vulnerabilities Enable Full System Access for Attackers appeared first on Cyber Security News.
Florence
Нейросеть теперь и чиновник, и HR, и копирайтер: Минцифры запускает эксперимент века
10 months 4 weeks ago
Добро пожаловать в новую бюрократию.