| Mobile Web

Search results for Block

AI & Enterprise

South Korea urges urgent checks for PHP vulnerabilities, says operators should check for intrusion traces after updates

South Korea’s science ministry urged website operators to urgently check and update against PHP security vulnerabilities and to verify signs of compromise even after updating. A FAQ issued by the Ministry of Science and ICT and the Korea Internet & Security Agency said three remote code execution vulnerabilities were identified in PHP, allowing attacks without login. The ministry advised reviewing access logs and file changes, rotating key credentials and applying additional settings for one flaw pending a patch.

AI & Enterprise

Theori releases response plan for Node.js flaw for sites unable to patch immediately

AI-based offensive cybersecurity company Theori said it has reproduced and verified a critical flaw found in the Node.js runtime and released an emergency response guide for companies and institutions. The vulnerability, dubbed Node2Shell, stems from an out-of-bounds write defect in a Brotli decoder module, enabling denial-of-service, memory exposure and remote code execution without authentication. Theori also suggested temporary mitigations and opened a free online diagnostic service at nodejsguard.io.

AI & Enterprise

Checkpoint Korea says AI security-first gains are taking shape, aims to expand firewall market share

Lim Hyun-ho (임현호), who took charge of Checkpoint Korea last November, said he aims to take an edge in AI security and use it to expand market share in firewalls. He said the company is seeing results and received high marks from customers during a proof-of-concept project last quarter. Checkpoint is focusing on its AI Defense Plane platform and AI-based CTEM solutions, while stepping up efforts to target the financial sector and invest in compliance infrastructure in Korea.