Concerns over the European Union’s Cyber Resilience Act (CRA)

2023-08-02 KENNETH 0

Concerns over the European Union’s Cyber Resilience Act (CRA) As the world’s most popular open source content management system, WordPress acknowledges the European Union’s initiative to bolster the cybersecurity of digital hardware and software products with the Cyber Resilience Act (CRA). The Act’s effort to counter the increasing threat of cyberattacks and promote informed usage of digital products with increased security updates and transparency is commendable.  While we wholly endorse the objectives of the CRA, we are apprehensive about the Act’s implications on open source software due to unclear terms and definitions. Specifically, the Act’s prohibition on “unfinished software” and ambiguous definition of “commercial activity” could inadvertently inhibit innovation and economic participation in the European digital landscape. Open source projects, like WordPress, often rely on continual updates and improvements—a process that may technically fall under the label of “unfinished.” Furthermore, [ more… ]

No Image

USN-6267-1: Firefox vulnerabilities

2023-08-02 KENNETH 0

USN-6267-1: Firefox vulnerabilities Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. (CVE-2023-4047, CVE-2023-4048, CVE-2023-4049, CVE-2023-4051, CVE-2023-4053, CVE-2023-4055, CVE-2023-4056, CVE-2023-4057, CVE-2023-4058) Max Vlasov discovered that Firefox Offscreen Canvas did not properly track cross-origin tainting. An attacker could potentially exploit this issue to access image data from another site in violation of same-origin policy. (CVE-2023-4045) Alexander Guryanov discovered that Firefox did not properly update the value of a global variable in WASM JIT analysis in some circumstances. An attacker could potentially exploit this issue to cause a denial of service. (CVE-2023-4046) Mark Brand discovered that Firefox did not properly validate the size of an untrusted input stream. An attacker could potentially [ more… ]

[도서] 텐서플로와 케라스로 구현하는 딥러닝 3/e

2023-08-02 KENNETH 0

[도서] 텐서플로와 케라스로 구현하는 딥러닝 3/e 분야별 신상품 – 국내도서 – 컴퓨터와 인터넷 [도서]텐서플로와 케라스로 구현하는 딥러닝 3/e 아미타 카푸어,안토니오 걸리,수짓 팔 저/이병욱 역 | 에이콘출판사 | 2023년 08월 판매가 45,000원 (10%할인) | YES포인트 2,500원(5%지급) 딥러닝에 관련된 거의 모든 최신 기술을 설명한다. 회귀부터 시작해 딥러닝의 기초를 설명하고, 컨볼루션 신경망, 순환 신경망, LTSM, 자연어 처리, 이미지 합성 등에 대한 최신 기술 동향을 소개한다. 특히 현재 활 Source: [도서] 텐서플로와 케라스로 구현하는 딥러닝 3/e

No Image

Multi-Cloud API Security with NGINX and F5 Distributed Cloud WAAP

2023-08-02 KENNETH 0

Multi-Cloud API Security with NGINX and F5 Distributed Cloud WAAP The question is no longer if you’re in the cloud, but how many clouds you’re in. Most enterprises today recognize there isn’t a “one cloud fits all” solution and have shifted toward a hybrid or multi-cloud architecture. According to data from F5’s State of Application Strategy in 2023 report, 85% of enterprises operate applications with two or more different architectures. For development and API teams, this creates a lot of pressure. They’re tasked with securely delivering APIs at scale in complex, distributed environments. Connections are no longer simply between clients and backend services – they are now between applications deployed in different clouds, regions, data centers, or edge locations . Meanwhile, every API must meet the organization’s security and compliance requirements, regardless of where it is deployed and what tools [ more… ]

AWS 주간 소식 모음 – Amazon Bedrock용 에이전트, Amazon SageMaker Canvas 신 기능 등

2023-08-02 KENNETH 0

AWS 주간 소식 모음 – Amazon Bedrock용 에이전트, Amazon SageMaker Canvas 신 기능 등 올해 7월, ASEAN의 AWS 커뮤니티는 새로운 역사를 썼습니다. 먼저, 말레이시아 AWS 사용자 그룹에서는 최근 말레이시아에서 첫 번째 AWS Community Day를 개최했습니다. 필리핀 AWS 사용자 그룹은 또 다른 중요한 이정표에 도달했습니다. 2일간의 AWS Community Day 필리핀을 개최하여 창립 10주년을 기념했습니다. 다음은 Jeff Barr가 10년 전 필리핀 마닐라에서 열린 AWS 사용자 그룹 모임에 참석했던 경험을 공유하는 것을 포함해 행사에서 찍은 몇 장의 사진입니다. AWS Community Day를 조직하고 주최한 AWS 커뮤니티 히어로, AWS 커뮤니티 빌더, AWS 사용자 그룹 리더 및 모든 자원 봉사자에게 큰 축하를 보냅니다! 또한 모임에 참석하여 AWS 커뮤니티를 지원해 주신 모든 분들께 감사드립니다. 지난주 출시 사항 지난주에는 뉴욕의 AWS Summit을 비롯하여 흥미로운 출시 행사가 있었습니다. 개인적으로 가장 기억에 남는 몇 가지를 소개하면 다음과 같습니다. (미리 보기) Amazon Bedrock용 에이전트 – 이제 Amazon Bedrock용 관리형 에이전트를 생성하여 [ more… ]