4439 matches found
U.S. Senators Urge VPN Ban for Federal Workers Over Spying
UPDATE Two U.S. senators are taking bipartisan aim at foreign-owned virtual private networks VPNs, which they say are often headquartered “in countries that do not share American interests or values” – specifically, China and Russia. Sens. Ron Wyden D-Ore. and Marco Rubio R-Fla. have signed a joi...
Binaryen Buffer Overflow Vulnerability (CNVD-2019-34839)
Binaryen is a compiler and toolchain infrastructure library written in C++. Binaryen suffers from a buffer overflow vulnerability. An attacker could exploit this vulnerability to cause a denial of service with specially crafted input...
China's AI Strategy and its Security Implications
Gregory C. Allen at the Center for a New American Security has a new report with some interesting analysis and insights into China's AI strategy, commercial, government, and military. There are numerous security -- and national security -- implications...
Military Carrier Pigeons in the Era of Electronic Warfare
They have advantages: Pigeons are certainly no substitute for drones, but they provide a low-visibility option to relay information. Considering the storage capacity of microSD memory cards, a pigeon's organic characteristics provide front line forces a relatively clandestine mean to transport...
China Blocks Microsoft's Bing Search Engine, Despite Offering Censored Results
Update: Microsoft's search engine Bing has been restored in China after being inaccessible in the country for almost two days. According to sources familiar with the matter, Bing was blocked due to an accidental technical error and not due to an attempt at censorship. China has blocked...
China Blocks Microsoft's Bing Search Engine, Despite Offering Censored Results
Update: Microsoft's search engine Bing has been restored in China after being inaccessible in the country for almost two days. According to sources familiar with the matter, Bing was blocked due to an accidental technical error and not due to an attempt at censorship. China has blocked...
Cross-site Scripting Vulnerability in China Knowledge Network's TengYun Journal Co-Editing System
TengCloud periodicals collaborative editorial system mainly improves the three main functions of expense management, network debut, and multi-journal joint management, and at the same time provides several practical gadgets to improve the efficiency of the editors' work. A cross-site scripting...
Unprotected MongoDB leaks resumes of 202M Chinese job seekers
By Waqas China is often suspected to sponsor hack attacks against organizations and agencies in the US or Europe. However, this time around China itself has become a victim of a security breach. Reportedly, an unprotected MongoDB has exposed personal and professional details of more than 202...
YUNUCMS cross-site scripting vulnerability (CNVD-2019-00565)
YUNUCMS is China Yunyou YUNU network technology company of a set of open source enterprise station building content management system CMS. YUNUCMS1.1.8 version of the app/admin/controller/System.php file there is a cross-site scripting vulnerability , a remote attacker can write to the sys.php fi...
Wide-Ranging German Doxxing Incident Hits Hundreds of Politicians
Hundreds of German politicians, including Chancellor Angela Merkel, have been doxxed in a puzzling incident, with their private information and political documents dumped online. At least one local reporter is claiming the information is explosive. According to a report from German public...
SQL Injection Vulnerability in the Community Corrections System of the Department of Justice
China Mobile Communications Corporation hereinafter referred to as "China Mobile" is a centralized enterprise established in 2000 in accordance with the overall deployment of the national telecommunications system reform. A SQL injection vulnerability exists in the community correction system of...
China's APT10
Wired has an excellent article on China's APT10 hacking group. Specifically, on how they hacked managed service providers in order to get to their customers' networks. I am reminded of the NSA's "I Hunt Sysadmins" presentation, published by the Intercept. EDITED TO ADD 1/5: Another article on the...
Quick Sales Network QuickXiao 1.0 SQL Injection
Exploit Title : Quick Sales Network QuickXiao 1.0 SQL Injection Author Discovered By : KingSkrupellos Date : 30/12/2018 Vendor Homepage : Quickxiao.Com Tested On : Windows Exploit Risk : Medium Category : WebApps Version Information : 1.0 CWE : CWE-89 Improper Neutralization of Special Elements...
How China Helped Make the Internet Less Free in 2018
Tech companies, democratic governments, and civil society need to work together to fight back against growing surveillance and censorship online...
Starbucks: unuse domain still in using at wechat by Starbucks East China
Summary: spcc.mobi is still using at wechat offical account by Starbucks East China. but this domain is on sale. Description: I had reported this at reportid=433843，bu your gays had ignored, because they said the domain is unused. In fact, spcc.mobi still having an interface using at wechat offic...
How China’s Elite APT10 Hackers Stole the World’s Secrets
A new DOJ indictment outlines how Chinese hackers allegedly compromised data from companies in a dozen countries in a single intrusion...
What the US Can Learn from Israel and China's Collaboration
Opinion: What we can learn from Israel's surprising technological ties with China...
Twitter Draws Data Privacy Concerns with Two New Bugs
Two recently-patched flaws in Twitter’s platform have reignited concerns about user data-privacy issues. On Monday, the social-media giant revealed a hole that accidentally enabled bad actors to pull the country codes of accounts’ phone numbers – and revealed that several IP addresses located in...