Aggregator

更新：3.3 syscallfuzzhttps://www.kanxue.com/book-194-5304.

文末投递简历

AI代码助手惊现“规则文件后门”攻击，数百万开发者面临威胁

看雪论坛作者ID：王cb

开源电子书管理软件 Calibre 释出了 8.0 版本。主要新特性包括：大幅改进了对 Kobo 电子书阅读器的支持，支持原生编辑、查看和转换 Kobo 使用的 KEPUB 格式文件，将电子书发送到 Kobo 设备时会自动将 EPUB 格式转换为 KEPUB 格式；Calibre 可连接文件夹并将其视为基于 USBMS 的设备，该功能非常适用于 Chromebook，原因是在 Chromebook 中 USB 设备显示为文件夹而不是实际设备；bug 修复，改进了 Linux Weekly News、Spectator 和 Economist 等新闻源，等等。

Тесты в московских изоляторах показали почти 100% результат.

An analysis of cyberattacks made against applications published this week by Digital.ai, a provider of a platform for securely delivering software, finds a 20% year over year increase, with 83% of applications tracked in January now under constant cyberattack compared to 65% a year ago.

The post Report Surfaces Sharp Increase in Cyberattacks Aimed at Applications appeared first on Security Boulevard.

The cybersecurity landscape has been recently disrupted by the emergence of the VanHelsing ransomware, a sophisticated strain identified by the CYFIRMA Research and Advisory Team. This ransomware targets Windows systems, employing advanced encryption techniques and appending a unique “.vanhelsing” extension to compromised files. It also utilizes double extortion tactics, threatening to leak stolen data unless […]

The post VanHelsing Ransomware Targets Windows Systems with New Evasion Tactics and File Extension appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

In a recent development, the U.S. Department of Justice unsealed an indictment against employees of the Chinese contractor I-SOON, revealing their involvement in multiple global espionage operations. These operations are attributed to the FishMonger APT group, which is believed to be I-SOON’s operational arm. The group, also known as Earth Lusca, TAG-22, Aquatic Panda, or […]

The post I-SOON’s ‘Chinese Fishmonger’ APT Targets Government Entities and NGOs appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Тысячи репозиториев, но единицы реальных угроз.

本文讲解利用 CREATE 与 CREATE2 操作码的攻击手法及防御策略。

本文讲解利用 CREATE 与 CREATE2 操作码的攻击手法及防御策略。

本文讲解利用 CREATE 与 CREATE2 操作码的攻击手法及防御策略。

本文讲解利用 CREATE 与 CREATE2 操作码的攻击手法及防御策略。

Experts warn of the active exploitation of two recently patched security vulnerabilities affecting Cisco Smart Licensing Utility. Cisco disclosed two vulnerabilities in its Smart Licensing Utility: CVE-2024-20439, a static credential backdoor, and CVE-2024-20440, an information disclosure flaw. Attackers can exploit the backdoor to access sensitive log files. While no active exploitation was initially observed, the […]

首席信息安全官正处在安全运营的关键十字路口：从“传统 SOC”转向“AI 原生 SOC”。

首席信息安全官正处在安全运营的关键十字路口：从“传统 SOC”转向“AI 原生 SOC”。

首席信息安全官正处在安全运营的关键十字路口：从“传统 SOC”转向“AI 原生 SOC”。

首席信息安全官正处在安全运营的关键十字路口：从“传统 SOC”转向“AI 原生 SOC”。