Hikvision Patches High-Severity Vulnerability in Security Management System

March 4, 2024 at 08:48AM Hikvision has released patches for two vulnerabilities in its security management system HikCentral Professional. The more serious flaw, CVE-2024-25063, could lead to unauthorized access to specific URLs. The second bug, CVE-2024-25064, requires authentication to be exploited. Hikvision urges customers to apply the patches promptly, as prior vulnerabilities have been exploited. … Read more

In Other News: Major Law Firm Hacked, Chinese Bank Pays Ransom, PyPI Security Audit

November 17, 2023 at 11:15AM SecurityWeek’s weekly roundup highlights several cybersecurity stories. The world-renowned law firm Allen & Overy experienced a data breach by the LockBit ransomware group. The largest bank in China, Industrial and Commercial Bank of China, allegedly paid a ransom to the LockBit gang. Europol aided in the takedown of a vishing … Read more

Beijing reportedly asked Hikvision to identify fasting students in Muslim-majority province

November 14, 2023 at 01:04AM US-based research group IPVM has accused Chinese video surveillance equipment company Hikvision of developing technology to identify Muslim students fasting during Ramadan, based on their dining records. Hikvision confirmed winning the tender for the project but denied its products can analyze video streams to identify ethnic minorities. IPVM claims the … Read more