Aggregator

分步骤详细讲解广泛普及的商业渗透软件Cobalt Strike中DNS隐蔽隧道的设置和利用，带领读者fileless入侵后成功将目标系统数据外传，展示并分析其通信数据包，说明检测算法，最后演示使用现有DLP产品实现检测未知威胁。

A previously undisclosed misconfiguration vulnerability in the rTorrent client is being exploited in the wild to mine Monero.

On February 28, Akamai recorded a 1.35 Tbps DDoS attack against one of our customers. The attack was driven by a relatively new vector, memcached reflection. Possibly the largest publicly disclosed DDoS attack to date, the memcached attack was more than twice the size of the largest DDoS attacks that were launched against an Akamai customer by the operators of the Mirai botnet in September of 2016.

McAfee Security Innovation Alliance (SIA) is a technology ecosystem designed to assemble the world’s leading security innovations to form a...

The post Together We Are Forming a Powerful Alliance Against the Bad Guys appeared first on McAfee Blog.

ysoserial 中收录了 Mozilla Rhino 的反序列化 Gadget，我们来分析一下。

ysoserial 中收录了 Mozilla Rhino 的反序列化 Gadget，我们来分析一下。

ysoserial 中收录了 Mozilla Rhino 的反序列化 Gadget，我们来分析一下。

When new technology initiatives are approached in the right way, organizations can implement them, mitigate risk, and provide the best user experience.

The same drop zone server used last week to mine Monero on compromised Jenkins automation servers is now being used in a new Monero mining campaign targeting Oracle Web Logic servers.

一款很有意思的工具，记录一下windows上安装体验的过程。

一款很有意思的工具，记录一下windows上安装体验的过程。

一款很有意思的工具，记录一下windows上安装体验的过程。

一款很有意思的工具，记录一下windows上安装体验的过程。

As the black-market price for stolen data declines, attackers turn to cryptojacking schemes to maximize their profits—all at your expense.

为什么想重写这个呢，想说后面扫描ssrf和命令执行的时候，能快速改成自己想要的api，更容易修改一些。 工具改自:https://github.com/bugScanTeam/DNSLog 需要两个域名和一台服务器。 推荐这里买一个.pw域名，可以自定义dns服务器。https://cn.resel

Risk transfer strategies allow you more time to focus on your business.

Today, we released security updates to provide additional protections against malicious attackers. By default, Windows 10 receives these updates automatically, and for customers running previous versions, we recommend they turn on automatic updates as a best practice. More information about this month’s security updates can be found in the Security Update Guide.