Aggregator

Исследователи выяснили: мы с машинами говорим на разных языка. И это опаснее, чем кажется.

用 frida 向 React Native 动态注入 js 代码

UNC2814 hit 53 victims in 42 countries with novel backdoor in decade long cyber espionage operation

Introduction: Steal It Today, Break It in a Decade Digital evolution is unstoppable, and though the pace may vary, things tend to fall into place sooner rather than later. That, of course, applies to adversaries as well. The rise of ransomware and cyber extortion generated funding for a complex and highly professional criminal ecosystem. The era of the cloud brought general availability of

Забудьте про письма от принцев – теперь присылают вредоносный Next.js.

速修复

速修复

关于四种Tomcat内存马的一些学习与思考

New York Attorney General Letitia James sued video game developer and publisher Valve Corporation for using game loot boxes to facilitate illegal gambling activities among children and teenagers. [...]

AgentSmith-HUB v0.1.8 更新说明

Cisco SD-WAN vulnerability CVE-2026-20127 has been exploited since 2023 to gain unauthenticated admin access. A critical Cisco SD-WAN vulnerability, tracked as CVE-2026-20127 (CVSS score of 10.0), has been actively exploited since 2023. The flaw affects Catalyst SD-WAN Controller and Manager and allows remote, unauthenticated attackers to bypass authentication and gain full administrative access by sending […]

BAE Systems планирует сделать радиоэлектронную борьбу массовой.

История успеха (и вреда) нового шифровальщика, который заменил закрытый Phobos.

关键词网络病毒安全研究人员发现，一起新的 NPM 供应链攻击利用“图片藏毒”技术传播远控木马。

关键词网络攻击安全公司 Sansec 披露，一家全球前十的大型连锁超市电商网站被植入数字支付窃取器（payme

关键词安全公司 Malwarebytes 报告发现，一起针对社交媒体用户的新型攻击正通过 Facebook 广

关键词安全漏洞近日，西班牙一名 DIY 爱好者阿兹杜法尔（Sammy Azdoufal）在尝试用 PS5 手柄

A "coordinated developer-targeting campaign" is using malicious repositories disguised as legitimate Next.js projects and technical assessments to trick victims into executing them and establish persistent access to compromised machines. "The activity aligns with a broader cluster of threats that use job-themed lures to blend into routine developer workflows and increase the likelihood of code

Просто поставили зеркало - и подняли точность связи до идеала.

本文仅用于安全研究与防御加固目的。演示内容全部基于虚拟 CAN 总线与实验数据，帮助理解 CAN/ISO-TP/诊断通信与固件安全审计思路；不提供面向真实车辆的操控复现与攻击指令