Aggregator

速修复

速修复

关于四种Tomcat内存马的一些学习与思考

New York Attorney General Letitia James sued video game developer and publisher Valve Corporation for using game loot boxes to facilitate illegal gambling activities among children and teenagers. [...]

AgentSmith-HUB v0.1.8 更新说明

Cisco SD-WAN vulnerability CVE-2026-20127 has been exploited since 2023 to gain unauthenticated admin access. A critical Cisco SD-WAN vulnerability, tracked as CVE-2026-20127 (CVSS score of 10.0), has been actively exploited since 2023. The flaw affects Catalyst SD-WAN Controller and Manager and allows remote, unauthenticated attackers to bypass authentication and gain full administrative access by sending […]

BAE Systems планирует сделать радиоэлектронную борьбу массовой.

История успеха (и вреда) нового шифровальщика, который заменил закрытый Phobos.

关键词网络病毒安全研究人员发现，一起新的 NPM 供应链攻击利用“图片藏毒”技术传播远控木马。

关键词网络攻击安全公司 Sansec 披露，一家全球前十的大型连锁超市电商网站被植入数字支付窃取器（payme

关键词安全公司 Malwarebytes 报告发现，一起针对社交媒体用户的新型攻击正通过 Facebook 广

关键词安全漏洞近日，西班牙一名 DIY 爱好者阿兹杜法尔（Sammy Azdoufal）在尝试用 PS5 手柄

A "coordinated developer-targeting campaign" is using malicious repositories disguised as legitimate Next.js projects and technical assessments to trick victims into executing them and establish persistent access to compromised machines. "The activity aligns with a broader cluster of threats that use job-themed lures to blend into routine developer workflows and increase the likelihood of code

Просто поставили зеркало - и подняли точность связи до идеала.

本文仅用于安全研究与防御加固目的。演示内容全部基于虚拟 CAN 总线与实验数据，帮助理解 CAN/ISO-TP/诊断通信与固件安全审计思路；不提供面向真实车辆的操控复现与攻击指令

2025年底，“数字泔水（slop）”被韦氏词典出版商评选为年度热词，并将其定义为“通常由人工智能批量生成的低质量数字内容”。这个本义为“剩饭菜”的词汇，在网络环境中日渐突出。

2月25日，社会救助法草案二次审议稿提请十四届全国人大常委会第二十一次会议审议。

2026年2月26日，最高人民法院召开“迎两会·守公正·启新程”第十场新闻发布会，主题是“人民法院依法惩治电信网络诈骗、侵财犯罪工作情况”。最高人民法院刑三庭庭长汪斌、刑四庭副庭长司明灯、刑三庭副庭长王鲁出席发布会，并回答记者提问。

推动城市级网络安全治理范式从传统的“分散自治”向现代的“协同共治”转型，已成为破题的关键。佛山市探索构建的“1+N+X”城市分布式网络安全防护体系的实践，正是对这一战略转型的系统性回应。

Cybersecurity researchers have disclosed details of a new malicious package discovered on the NuGet Gallery, impersonating a library from financial services firm Stripe in an attempt to target the financial sector. The package, codenamed StripeApi.Net, attempts to masquerade as Stripe.net, a legitimate library from Stripe that has over 75 million downloads. It was uploaded by a user named