Apple Says It's Time to Digitize Your ID, Ready or Not

Digital driver’s licenses have had a slow start in the US so far, but iOS 15 Wallet will give the nascent technology a serious push...

Platform Update: Akamai Boosts Edge Application Power, Expanding Possibilities for Developers

Welcome to the Akamai Platform Update -- two days of new capabilities and innovations across our edge technology and security product portfolios. Today, we look at our edge technology products, which include edge computing, edge delivery CDN, and other complementary products and services that hel...

Platform Update: Akamai Boosts Edge Application Power, Expanding Possibilities for Developers

Welcome to the Akamai Platform Update -- two days of new capabilities and innovations across our edge technology and security product portfolios...

File Upload Vulnerability in OfficeWeb365 of Xi'an Daxi Information Technology Co.(CNVD-2021-47669)

OfficeWeb365 focuses on Office document online preview and PDF document online preview cloud services, including Microsoft Word document online preview, Excel table online preview, Powerpoint presentation document online preview, WPS word processing, WPS forms, WPS presentations and Adobe PDF...

SQL Injection Vulnerability in Farmers' Credit Information System of Nanning Desi Technology Co.

Nanning Desi Technology Co., Ltd, business scope includes computer software development and technical services; computer, office equipment sales and maintenance, etc.. A SQL injection vulnerability exists in the Farmer Credit Information System of Nanning Desi Technology Co. An attacker can utili...

Utilities ‘Concerningly’ at Risk from Active Exploits

The amount of time that utility networks spend exposed to a known application exploit has spiked over the past two months — something analysts called out as a “concerning datapoint,” and an important reminder that ransomware isn’t the only threat utility networks need to secure against. A new...

Upcoming Speaking Engagements

This is a current list of where and when I am scheduled to speak: Ill be part of a European Internet Forum virtual debate on June 17, 2021. The topic is "Decrypting the encryption debate: How to ensure public safety with a privacy-preserving and secure Internet?" I’m speaking at the all-online...

The Adaptive Security Engine – A Quantum Leap Forward for Application and API Protection

At Akamai, our mission is to make application and API security highly effective and easy. As part of that effort, we are excited to announce the Adaptive Security Engine -- a new core technology powering Akamai's application and API protection offerings, designed to enable a hands-off approach to...

Information leakage vulnerability in Pear Project Management System of Sichuan Shilai Technology Co.

Pear Project Management System is a lightweight online project/task collaboration system. An information leakage vulnerability exists in the Pear Project Management System of Sichuan Shilai Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in NVS3000 Integrated Video Surveillance Platform of Datang Telecom Technology Co. Ltd (CNVD-2021-45156)

Datang Telecom Technology Co., Ltd. is a provider of products and integrated solutions in the field of information and communications. A SQL injection vulnerability exists in Datang Telecom Technology Co., Ltd.'s NVS3000 Integrated Video Surveillance Platform, which can be exploited by attackers ...

Agile Development Framework of Shanghai PowerSoft Information Technology Co.

Ltd. is a high-tech enterprise specializing in the research and development of development frameworks and enterprise application system development. A logic flaw vulnerability exists in the Agile Development Framework of PowerSoft Shanghai, which can be exploited by attackers to obtain sensitive...

Weak Password Vulnerability in SG-6000-M2105 by Shanshi Netcom

SG-6000-M2105 is a firewall product of Shanshi Netcom Technology Beijing Co. A weak password vulnerability exists in the SG-6000-M2105, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in Multimedia Information Distribution System of Guangdong Xing Shen Technology Co.

Ltd. is located in Guangzhou Science City, where high-tech enterprises gather, and is an innovative enterprise specializing in the research, development, production and sales of commercial display systems, intelligent robots and other products. Ltd. multimedia information dissemination system SQL...

Unauthorized Access Vulnerability in Serial Port Terminal Server of Beijing Kanghai Times Technology Co.

Ltd. is a private high-tech enterprises, has been committed to the serial communications equipment and network communications products, research and development, production, sales, while providing technical advice and technical services, is a technology, industry and trade as one of the high-tech...

Logic flaws and vulnerabilities in the government procurement transaction system of Hangzhou Pinming Information Technology Co.

Hangzhou Pinming Information Technology Co., Ltd. is a high-tech enterprise dedicated to building a domestic leading public resource transaction informationization field. A logic flaw vulnerability exists in the government procurement transaction system of Hangzhou Pinming Information Technology...

Circutor SGE-PLC1000 OS Command Injection Vulnerability

Circutor SGE-PLC1000 is a smart metering system device. The primary function is to manage utility power through CIRWATT meters or other meters with PRIME technology.An operating system command injection vulnerability exists in firmware version 0.9.2b of the Circutor SGE-PLC1000, which can be...

Weak Password Vulnerability in IP-COM Deep Internet Behavior Management of Shenzhen HeWeiShun Network Technology Company Limited (CNVD-2021-43952)

Shenzhen HeWeiShun Network Technology Co., Ltd. business scope includes: network products, communication products, computer software and hardware, integrated circuit technology development, etc.. A weak password vulnerability exists in IP-COM Deep Internet Behavior Management. Attackers utilize t...

Information leakage vulnerability in the website building system of Zhejiang Tuxun Technology Co.

Ltd. was founded in 2000, is a high-tech enterprise specializing in the construction of e-government and the research and development of safety production informatization products. There is an information leakage vulnerability in the website building system of Zhejiang Tuxun Technology Co. An...

SQL Injection Vulnerability in Residency Capacity Building System of Chongqing Yuanqiu Technology Co.

Chongqing Yuanqiu Science and Technology Co., Ltd. is an independent legal entity under the Southwest Information Center of the Ministry of Science and Technology, which is a large-scale intelligence service organization engaged in the collection of medical information and the development of...

Weak Password Vulnerability in Bee.com Internet's Enterprise Flow Control Cloud Router

Founded in October 2016, Chengdu ZhiBee.com Technology Limited Liability Company is an emerging high-tech company integrating research and development, production and sales. A weak password vulnerability exists in the BeeNet Interconnect Enterprise Flow Control Cloud Router , which can be exploit...