Google Chrome V8 Type Confusion Vulnerability (CVE-2023-2033) Notice
![](https://nsfocusglobal.com/wp-content/uploads/2020/04/0421-1.jpg)
April 19, 2023
Overview On April 17, NSFOCUS CERT found that Google officially fixed a Chrome V8 type confusion vulnerability (CVE-2023-2033). Due to flaws in the verification of the data type being used by the application, type confusion can occur during the process. Attackers can trigger this vulnerability by sending a crafted link that successfully induces users to […]
8 Potential Security Hazards of ChatGPT
![](https://nsfocusglobal.com/wp-content/uploads/2023/04/Feature-Image-2.png)
April 18, 2023
Summary OpenAI opened for testing ChatGPT on November 30, 2022, and since then, ChatGPT has become popular worldwide. ChatGPT, an AI-driven chat robot, has become the fastest-growing consumer application in the past two decades of internet development. But while it made a hit, ChatGPT also faces security risks in AI’s own data and models. Given […]
Troubleshooting Common Errors During NTA HA Configuration
April 18, 2023
An HA switchover is initiated when: Common errors during HA configuration: 1. “The versions of the local and peer devices are different.” is displayed during configuration. Solution: Upgrade the devices and ensure that the versions of the two devices are the same. 2. “Failed to enable the HA SSH service on the peer end.” is […]
Microsoft’s April security update for multiple high-risk product vulnerabilities
![](https://nsfocusglobal.com/wp-content/uploads/2020/11/microsoft.jpg)
April 17, 2023
Overview NSFOCUS CERT recently monitored that Microsoft had released a security update patch for April, which fixed 97 security issues, involving Microsoft Word, Layer2 Tunneling Protocol, Microsoft Publisher, Windows Kernel and other widely used products, including high-risk vulnerability types such as privilege escalation and remote code execution. Among the vulnerabilities fixed in Microsoft’s monthly updates […]
Key Technologies for Software Supply Chain Security—Detection Technique (Part 4)—Interactive Application Security Testing (IAST) and Fuzzing (Fuzz Testing)
![](https://nsfocusglobal.com/wp-content/uploads/2022/10/Chain-scaled-e1666342354234.jpg)
April 17, 2023
Interactive Application Security Testing (IAST) IAST is a new application security testing technique that has become popular in recent years and is recognized by Gartner as one of the top 10 technologies in the cybersecurity field. IAST works to constantly monitor and collect the traffic or codes inside when the application is running, and transfer […]
Multiple Security Vulnerability Notification on Apple Products
April 14, 2023
Overview Recently, NSFOCUS CERT has detected that Apple has officially fixed the security vulnerabilities of several products. Please take protective measures as soon as possible. The details of the vulnerability are as follows: Apple IOSurfaceAccelerator privilege escalation vulnerability (CVS 2023-28206): There is an out of bounds write vulnerability in Apple IOSurfaceAccelerator, which allows unauthenticated attackers […]
Top 7 Cybersecurity Predictions in 2023
![](https://nsfocusglobal.com/wp-content/uploads/2023/04/Feature-Image.png)
April 13, 2023
With the rapid development of cyberspace technology, network security is a topic that cannot be ignored while people maintain interoperability. Through the analysis of emergency response events recorded by NSFOCUS, we have summarized the development trends of network threats and would like to share the top seven predictions we discovered to look ahead to the […]
Key Technologies for Software Supply Chain Security – Detection Technique (Part 3) – Dynamic Application Security Testing (DAST)
![](https://nsfocusglobal.com/wp-content/uploads/2022/10/Chain-scaled-e1666342354234.jpg)
April 10, 2023
In actual attack scenarios, when the source code is often unavailable, a white-box-based model is used to analyze software vulnerabilities. Hackers mostly conduct black-box scans against running systems or services, looking for possible vulnerabilities to attack. DAST simulates a hacker’s attack using an outside-in detection technique on systems or services at runtime to detect possible […]
NSFOCUS Featured in Frost Radar™ Cloud-native Application Protection Platforms, 2022
![](https://nsfocusglobal.com/wp-content/uploads/2023/04/Pic-2-2-e1680586547784.png)
April 5, 2023
Santa Clara, Calif. April 5, 2023 – NSFOCUS, a global provider of intelligent hybrid security solutions, announced that it has been featured in Frost Radar™: Cloud-Native Application Protection Platforms (CNAPP). In this report, Frost & Sullivan identifies NSFOCUS and other 14 other companies as the powerhouses that are dominating and shaping the CNAPP market. NSFOCUS […]
Troubleshooting of Failure to Import a License into NSFOCUS ADS
April 4, 2023
After ADS is installed, you must import a license before using it. License types vary a bit for hardware devices and virtual devices: ADS will provide limited functions when a license expires, as shown in Table 1. What functions are still available depends on the license type. Table 1 Functions available upon license expiry Tips: […]