Security
“This magnificent work is not finished yet. Come back later.”
Gradio by Hugging Face, Jupyter Server, and Streamlit from Snowflake vulnerable to NTLMv2 hash disclosure of the kind recently exploited by... CISA
"We are working internally, and with leading external experts, to remediate the issue.”
"We need to reduce moving parts," VP says.
World-famous library is still battling to recover from an incident described as one of the worst in British history.
"It's the world's biggest red team," creator claims.
Researchers allege that bugs could allow adversaries to "inject malicious libraries into Microsoft's applications to gain entitlements and user-granted permissions".
CVE-2024-38063 lets unauthenticated attackers carry out remote code execution by "repeatedly sending IPv6 packets".
"Supply chains for local councils will always be the weakest link to be exploited by attackers looking for valuable information due to the vast number of services employed for operations."