Aggregator

还没导入k线数据，继续在测试。

In a recent podcast interview with Cybercrime Magazine's host, David Braue, Scott Schober, Cyber Expert, Author of "Hacked Again," and CEO of Berkeley Varitronics Systems, discusses the July 2024 CrowdStrike outage, explaining what happened and more. 

The post Microsoft-CrowdStrike Outage Explained appeared first on Security Boulevard.

A vulnerability was found in CJmall 4.1.8. It has been rated as critical. This issue affects some unknown processing of the component X.509 Certificate Handler. The manipulation leads to cryptographic issues. The identification of this vulnerability is CVE-2014-5855. Access to the local network is required for this attack. There is no exploit available.

瑞典卫生部周一发布了一份指导方针，对儿童和青少年的屏幕使用时间设限。卫生部门建议，父母和监护人应该考虑如何在孩子面前使用屏幕设备，当孩子在场时向其解释自己在手机上做什么。它建议两岁以下儿童不应接触任何屏幕，2-5 岁儿童的屏幕使用时间应限制在 1 小时以内，6-12 岁儿童的屏幕使用时间应限制在 2 小时以内，13-18 岁青少年的屏幕使用时间限制在 3 小时。这一建议将大幅减少瑞典儿童和青少年目前的平均屏幕使用时间——9-12 岁儿童每天屏幕使用时间是 4 个小时，17-18 岁青少年每天花在屏幕前的时间超过 7 个小时，这一数字还不包括学校作业。

A vulnerability was found in WebSPELL 4.01.02. It has been classified as problematic. Affected is an unknown function of the file picture.php. The manipulation of the argument id leads to path traversal. This vulnerability is traded as CVE-2007-2369. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A fully open model — one where the training data is available for inspection and modification — provides a means for addressing another threat: malicious or accidentally bad training data.

The post Why NTIA Support of Open-Source AI is Good for Security appeared first on Security Boulevard.

Malware authors have iterated on one of the premier encryptors on the market, building something even bigger and better.

Searchlight Cyber observed a 56% rise in active ransomware groups in H1 2024, demonstrating the growing fragmentation of the ransomware landscape

A vulnerability was found in clearhub Windows Live Hotmail PUSH mail 1.00.97. It has been declared as critical. This vulnerability affects unknown code of the component X.509 Certificate Handler. The manipulation leads to cryptographic issues. This vulnerability was named CVE-2014-5854. The attack needs to be initiated within the local network. There is no exploit available.

According to Nearly 300 Security Practitioners One of the best ways to proactively protect your organization is through threat hunting....

The post The Evolution of Threat Hunting appeared first on Security Boulevard.