Aggregator

红蓝技术节选: 涵盖Kerberoasting缓解、SAML漏洞、活动目录攻击、MikroTik渗透测试、DLL利用、红蓝工具等等

红蓝技术节选: 涵盖Kerberoasting缓解、SAML漏洞、活动目录攻击、MikroTik渗透测试、DLL利用、红蓝工具等等

红蓝技术节选: 涵盖Kerberoasting缓解、SAML漏洞、活动目录攻击、MikroTik渗透测试、DLL利用、红蓝工具等等

红蓝技术节选: 涵盖Kerberoasting缓解、SAML漏洞、活动目录攻击、MikroTik渗透测试、DLL利用、红蓝工具等等

红蓝技术节选: 涵盖Kerberoasting缓解、SAML漏洞、活动目录攻击、MikroTik渗透测试、DLL利用、红蓝工具等等

红蓝技术节选: 涵盖Kerberoasting缓解、SAML漏洞、活动目录攻击、MikroTik渗透测试、DLL利用、红蓝工具等等

CISA is asking for feedback on future guidance outlining bad security practices in product development as part of its Secure by Design initiative

I noticed in my logs 2 weeks ago regular probe from a subnet in the Amazone cloud only scanning for

天文学家观察木星上著名的大红斑已至少有 150 年的历史，这是一个足以吞没地球的巨大反气旋。不过每当哈勃太空望远镜近距离观察它时，总能发现一些新惊喜。哈勃在 2023 年 12 月至 2024 年 3 月的 90 天内，对这个红色风暴进行了新的观测，结果显示大红斑并不像看起来那么稳定。最新的资料显示大红斑就像果冻般在抖动。研究人员表示大红斑在加速和减速时，会对其南北两侧的风向喷流造成推力，这类似三明治，当中间有太多馅料时，面包片就会被迫鼓起来。

October 17, 2024We've recently come across an X post by Jamie Vital who notes that he has cre

中国网络空间安全协会发表了一篇文章《漏洞频发、故障率高 应系统排查英特尔产品网络安全风险》，列举了英特尔产品的多个问题，包括 CPU 侧信道漏洞，第 13、14 代高端酷睿桌面处理器不稳定性问题，IPMI（智能平台管理接口），ME（管理引擎）等等，建议对英特尔在华销售产品启动网络安全审查，切实维护中国国家安全和中国消费者的合法权益。英特尔官方微信发表声明，作为一家在华经营近 40 年的跨国公司，英特尔严格遵守业务所在地适用的法律和法规。“英特尔始终将产品安全和质量放在首位，一直积极与客户和业界密切合作，确保产品的安全和质量。我们将与相关部门保持沟通，澄清相关疑问，并表明我们对产品安全和质量的坚定承诺。”

VMware released an advisory (VMSA-2024-0021) addressing a critical vulnerability in its HCX platform. The vulnerability, CVE-2024-38814, is an authenticated SQL injection flaw that poses a significant security risk. With a CVSSv3 base score of 8.8, this issue is classified as having “Important” severity. The vulnerability allows malicious authenticated users with non-administrator privileges to execute unauthorized […]

The post VMware HCX Platform Vulnerable to SQL Injection Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

你可能错过的新鲜事AMD 等多家巨头组建 x86 生态小组10 月 16 日，处理器制造商 AMD 与英特尔宣布联合多家 OEM 和软件开发商成立 x86 生态系统顾问小组，以应对来自 Arm 架

Поднебесная требует срочно проверить безопасность чипов Intel.

Cyber-physical devices are increasingly getting compromised and leveraged by criminal groups and state-sponsored threat actors. Fyodor Yarochkin, Senior Threat Solution Architect with Trend Micro, believes that getting a better understanding of attackers’ infrastructure leads to a better understanding of the attackers themselves. (The answers have been lightly edited for clarity.) In your talk at Deep Conference next week, you will be talking about cyber-physical devices being compromised and used by cyber criminals and state-sponsored threat … More →

The post The role of compromised cyber-physical devices in modern cyberattacks appeared first on Help Net Security.

There has been a sharp increase in the perceived value of AI technologies in hacking, according to a report from Bugcrowd platform, which surveyed 1,300 ethical hackers and security researchers.

The post Hackers Turn to AI as Hardware Attacks Surge appeared first on Security Boulevard.

В США выдвинуты жесточайшие обвинения организаторам хакерской группы.