Chinese search engine Baidu has denied experiencing a data breach after the daughter of Vice President Xie Guangjun was accused of leaking user information. Baidu refuted this, stating that neither staff nor executives can access user data, suggesting instead that the information was sourced from doxing databases available online. Despite the company’s denial, its share price dropped by 4%.
Critical Rails Flaw Could Let Unauthenticated Attackers Read Server Files via Image Uploads
Ruby on Rails has released fixes for a critical Active Storage vulnerability that could let unauthenticated attackers read arbitrary files from application servers through crafted
