Aggregator
CVE-2024-49113 检测: 通过公开可用 PoC 利用 Windows LDAP 拒绝服务漏洞又名 LDAPNightmare
10 months 3 weeks ago
安全客
Как понять, что ваш аккаунт Google взломан?
10 months 3 weeks ago
4 тревожных признака и проверенные методы защиты.
CVE-2019-5788 | Google Chrome up to 73 Blink Storage HTML Page integer overflow (EDB-46571 / ID 371692)
10 months 3 weeks ago
A vulnerability was found in Google Chrome up to 73. It has been rated as critical. This issue affects some unknown processing of the component Blink Storage. The manipulation as part of HTML Page leads to integer overflow.
The identification of this vulnerability is CVE-2019-5788. The attack may be initiated remotely. Furthermore, there is an exploit available.
It is recommended to upgrade the affected component.
vuldb.com
0889挖矿团伙rootkit后门溯源排查记录
10 months 3 weeks ago
近期发现某国内的黑客团伙用0889.org作为恶意样本地址和通信域名,后面简称0889组织。最近一次排查某云上阅读更多
Zgao
0889挖矿团伙rootkit后门溯源排查记录
10 months 3 weeks ago
近期发现某国内的黑客团伙用0889.org作为恶意样本地址和通信域名,后面简称0889组织。最近一次排查某云上挖矿的case,发现该组织通过jenkins RCE漏洞突破边界,内网横向
Chess.com config
10 months 3 weeks ago
Product Walkthrough: How Satori Secures Sensitive Data From Production to AI
10 months 3 weeks ago
Every week seems to bring news of another data breach, and it’s no surprise why: securing sensitive data has become harder than ever. And it’s not just because companies are dealing with orders of magnitude more data. Data flows and user roles are constantly shifting, and data is stored across multiple technologies and cloud environments. Not to mention, compliance requirements are only getting
The Hacker News
Облава в Абудже: как четверо китайцев управляли сотней нигерийских мошенников
10 months 3 weeks ago
Преступная схема работала под прикрытием легального гостиничного бизнеса.
CVE-2011-5019 | Textpattern 4.4.1 ddb cross site scripting (EDB-36489 / XFDB-72102)
10 months 3 weeks ago
A vulnerability classified as problematic was found in Textpattern 4.4.1. Affected by this vulnerability is an unknown functionality. The manipulation of the argument ddb leads to cross site scripting.
This vulnerability is known as CVE-2011-5019. The attack can be launched remotely. Furthermore, there is an exploit available.
vuldb.com
How do hackers divert ships? (read description)
10 months 3 weeks ago
【安全圈】无需拆卸笔记本电脑即可访问 Windows 11 BitLocker 加密文件
10 months 3 weeks ago
【安全圈】黑客滥用 Microsoft VSCode 远程隧道绕过安全工具
10 months 3 weeks ago
【安全圈】黑客声称惠普企业遭入侵,列出待售数据
10 months 3 weeks ago
【安全圈】宁波某化工企业被境外势力获取危险源监控视频数据
10 months 3 weeks ago
Former CIA Analyst Pleads Guilty to Sharing Top Secret Files
10 months 3 weeks ago
CIA analysts Asif William Rahman has pleaded guilty to sharing classified documents about an Israeli attack
CVE-2004-1958 | Epic Games Unreal Tournament 2003 2225 Win32 Manifest manifest.ini path traversal (EDB-24041 / XFDB-15942)
10 months 3 weeks ago
A vulnerability was found in Epic Games Unreal Tournament 2003 2225 Win32. It has been rated as problematic. Affected by this issue is some unknown functionality of the file manifest.ini of the component Manifest. The manipulation leads to path traversal.
This vulnerability is handled as CVE-2004-1958. The attack may be launched remotely. Furthermore, there is an exploit available.
vuldb.com
Handala
10 months 3 weeks ago
cohenido
How Many Rooms Should I Solve Per Day? Or Should I Focus More on Theory?
10 months 3 weeks ago
Hey everyone, I’m currently trying to balance my cybersecurity learning between sol
评论 | 请读懂用“反向驯化”对付算法背后的诉求
10 months 3 weeks ago
从正常商业逻辑来说,“回头客”本应享有消费优惠,但在“大数据杀熟”之下,老用户不仅享受不到优惠,甚至价格更高。“大数据杀熟”对相同商品或服务予以差别化定价,这是对消费者公平交易权的侵犯,是对民法典中公平原则、诚实信用原则的违反。