OpenAI's Next AI Model Astra Shows Cyber Performance Strong Enough to Trigger Pause

OpenAI has announced that it's pausing some "internal activities" involving its upcoming artificial intelligence AI model Astra after an internal evaluation found it had made significant advancements in agentic coding and cybersecurity. In response to the discovery, the AI upstart said it's...

CISA: Bulletproof Defense: Mitigating Risks from Bulletproof Hosting Providers

CISA, in collaboration with the U.S. National Security Agency, U.S. Department of Defense Cyber Crime Center, U.S. Federal Bureau of Investigation, and international partners, have released the guide Bulletproof Defense: Mitigating Risks from Bulletproof Hosting Providers to help internet service...

EUVD-2020-13331

Malware in sbrugna...

The Pall Mall Pact and why it matters

The US State Department reportedly plans to sign an international agreement designed to govern the use of commercial spyware known as the Pall Mall Pact. The Pall Mall Pact, formally known as the Pall Mall Process, was initiated by France and the United Kingdom in February 2024. The goal of the...

CVE-2020-20545

Cross-Site Scripting XSS vulnerability in Zhiyuan G6 Government Collaboration System V6.1SP1, via the 'method' parameter to 'seeyon/hrSalary.do'...

CVE-2020-20545

Cross-Site Scripting XSS vulnerability in Zhiyuan G6 Government Collaboration System V6.1SP1, via the 'method' parameter to 'seeyon/hrSalary.do'...

CVE-2020-20545

CVE-2020-20545 describes a Cross-Site Scripting (XSS) vulnerability in Zhiyuan G6 Government Collaboration System V6.1SP1, triggered by the method parameter to seeyon/hrSalary.do . Multiple sources (NVD, CVE lists, CNNVD) confirm the affected product and entry, with the issue rooted in user input...

PT-2021-10505

Name of the Vulnerable Software and Affected Versions: Zhiyuan G6 Government Collaboration System version V6.1SP1 Description: The issue is related to a Cross-Site Scripting XSS vulnerability. It can be exploited via the method parameter to the "seeyon/hrSalary.do" endpoint. This allows for...

CVE-2020-20545: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting XSS vulnerability in Zhiyuan G6 Government Collaboration System V6.1SP1, via the 'method' parameter to 'seeyon/hrSalary.do'...