vBulletin Releases Patch Update for New RCE and SQLi Vulnerabilities

After releasing a patch for a critical zero-day remote code execution vulnerability late last month, vBulletin has recently published a new security patch update that addresses 3 more high-severity vulnerabilities in its forum software. If left unpatched, the reported security vulnerabilities, which affect vBulletin 5.5.4 and prior versions, could eventually allow remote attackers to take…

Eight Chinese tech firms placed on U.S. Entity List for their role in human rights violations against Muslim minority groups – TechCrunch

Eight Chinese tech firms, including SenseTime and Megvii, have been added to the U.S. government Entity List for their role in enabling human rights violations against Muslim minority groups in China, including the Uighurs. The firms were among 28 total organizations, mostly Chinese government agencies, that were implicated “in the implementation of China’s campaign of…

US puts Chinese surveillance tech firms on economic blacklist over Uyghur abuse

The US government has blacklisted 28 Chinese organizations for their alleged involvement in perpetrating systematic abuses against the Uyghur Muslim minority residing in the country’s Xinjiang province. To that effect, eight technology companies have been added to the Entity List — including Dahua Technology, Hikvision, IFLYTEK, Megvii Technology, Sense Time, Xiamen Meiya Pico Information Co.…