995 matches found
Qualys Named an Overall Leader in CNAPP by KuppingerCole
We’re proud to share that Qualys has been named an Overall Leader in the 2025 KuppingerCole Leadership Compass for Cloud-Native Application Protection Platforms CNAPP—achieving leadership positions in both product and market presence. This recognition validates our commitment to delivering truste...
A week in security (June 23 – June 29)
Last week on Malwarebytes Labs: Gmail’s multi-factor authentication bypassed by hackers to pull off targeted attacks Thousands of private camera feeds found online. Make sure yours isn’t one of them Sextortion email scammers increase their "Hello pervert" money demands Many data brokers are faili...
ICE Rolls Facial Recognition Tools Out to Officers' Phones
Plus: US feds charge alleged masterminds behind infamous forum, Scattered Spider targets airlines, and hackers open a valve at a Norwegian dam...
Flock Safety LPR 安全漏洞
Flock Safety LPR is a license plate recognition product from Flock Safety USA. A security vulnerability exists in Flock Safety LPR version 2.2 and prior versions that stems from improper access control of the chip debug interface...
Flock Safety LPR 安全漏洞
Flock Safety LPR is a license plate recognition product from Flock Safety USA. A security vulnerability exists in Flock Safety LPR version 2.2 and prior versions, which stems from the explicit storage of code...
Facial recognition: Where and how you can opt out
Our remote team recently took a trip to our Estonian office. When we arrived from our various destinations, we started chatting about how our travel had been. Our senior privacy advocate, David Ruiz, mentioned that he'd opted out of facial recognition while at San Francisco International Airport...
Foundation of Affective Computing and Interaction
This book provides a comprehensive exploration of affective computing and human-computer interaction technologies. It begins with the historical development and basic concepts of human-computer interaction, delving into the technical frameworks and practical applications of emotional computing,...
Selea多款产品 安全漏洞
Selea Targa iZero and others are an optical character recognition camera for automatic license plate recognition from Selea, Italy. A security vulnerability exists in several Selea products, which stems from the /common/getfile.php script that does not validate the file parameter, potentially...
VulnCheck KEV: CVE-2025-34021
A server-side request forgery SSRF vulnerability exists in multiple Selea Targa IP OCR-ANPR camera models, including iZero, Targa 512, Targa 504, Targa Semplice, Targa 704 TKM, Targa 805, Targa 710 INOX, Targa 750, and Targa 704 ILB. The application fails to validate user-supplied input in JSON...
VReaves: Eavesdropping on Virtual Reality App Identity and Activity Via Electromagnetic Side Channels
Virtual reality VR has recently proliferated significantly, consisting of headsets or head-mounted displays HMDs and hand controllers for an embodied and immersive experience. The VR device is usually embedded with different kinds of IoT sensors, such as cameras, microphones, communication sensor...
Mitigating Data Poisoning Attacks to Local Differential Privacy
The distributed nature of local differential privacy LDP invites data poisoning attacks and poses unforeseen threats to the underlying LDP-supported applications. In this paper, we propose a comprehensive mitigation framework for popular frequency estimation, which contains a suite of novel...
[SECURITY] Fedora 42 Update: qt6-qtsensors-6.9.1-1.fc42
The Qt Sensors API provides access to sensor hardware via QML and C++ interfaces. The Qt Sensors API also provides a motion gesture recognition API for devices...
DiffUMI: Training-Free Universal Model Inversion Via Unconditional Diffusion for Face Recognition
Face recognition technology presents serious privacy risks due to its reliance on sensitive and immutable biometric data. To address these concerns, such systems typically convert raw facial images into embeddings, which are traditionally viewed as privacy-preserving. However, model inversion...
AUMA PROFOX和AUMA AC1.2 安全漏洞
AUMA PROFOX and AUMA AC1.2 are both products of AUMA, Inc.AUMA PROFOX is a professional-grade laboratory automation system for sample handling and liquid workstation control.AUMA AC1.2 is an adaptive controller. AUMA PROFOX and AUMA AC1.2 have a security vulnerability that stems from an...
One Patch to Rule Them All: Transforming Static Patches into Dynamic Attacks in the Physical World
Numerous methods have been proposed to generate physical adversarial patches PAPs against real-world machine learning systems. However, each existing PAP typically supports only a single, fixed attack goal, and switching to a different objective requires re-generating and re-deploying a new PAP...
Securing Traffic Sign Recognition Systems in Autonomous Vehicles
Deep Neural Networks DNNs are widely used for traffic sign recognition because they can automatically extract high-level features from images. These DNNs are trained on large-scale datasets obtained from unknown sources. Therefore, it is important to ensure that the models remain secure and are n...
Honoring Innovation, Growth, and Collaboration: The Akamai Partner Awards
Introducing the Akamai Partner Awards, which recognize excellence — both organizational and individual — in sales, services, marketing, and technical impact...
CVE-2023-52366
Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of this vulnerability may cause features to perform abnormally...
CVE-2023-21268
In update of MmsProvider.java, there is a possible way to change directory permissions due to a path traversal error. This could lead to local denial of service of SIM recognition with no additional execution privileges needed. User interaction is not needed for exploitation...