qbi2d ago

#Qihoo 360 hat mal eben seinen privaten Schlüssel verloren.
Man konnte deren KI-Assistent "360 Security Claw" herunterladen. Unter `/namiclaw/components/OpenClaw/openclaw.7z/credentials` fand sich der private TLS-Schlüssel (Zertifikat) für alle Domains unter myclaw.360.cn, gültig bis April 2027.
Betrifft so um die 460 Mio. User.

via https://channel.0w0.best/posts/7042

今天abc看了啥🤔

来自 L 站用户消息： 360 安全龙虾的安全证书私钥泄露，涉及 CN=*.myclaw.360.cn位于 /path/to/namiclaw/components/Openclaw/openclaw.7z/credentials有效期1年

Neil J. RubenkingJul 20, 2023

The free Qihoo 360 Total Security is an attractive security app that comes with a ton of bonus tools, but they don’t all work and its core antivirus protection doesn't measure up.

https://www.pcmag.com/reviews/qihoo-360-total-security-86

#security #antivirus #pcmag #qihoo #qihu

Qihoo 360 Total Security Review

The free Qihoo 360 Total Security is an attractive security app that comes with a ton of bonus tools, but they don’t all work and its core antivirus protection doesn't measure up.

PCMAG
ITSEC NewsDec 21, 2020
Smart Doorbell Disaster: Many Brands Vulnerable to Attack - Investigation reveals device sector is problem plagued when it comes to security bugs. https://threatpost.com/smart-doorbell-vulnerable-to-attack/162527/ #360d819smartvideodoorbell #hardcodedcredential #smartwifidoorbell #digitaldoorbells #vulnerabilities #xf-ip007h #docooler #victure #accfly #extaum #tickas #hacks #qihoo #vd300 #http #iot
Smart Doorbell Disaster: Many Brands Vulnerable to Attack

Investigation reveals device sector is problem plagued when it comes to security bugs.

Threatpost - English - Global - threatpost.com