Aggregator

Platform Used for Drugs, Arms Trafficking and Money Laundering
French and Dutch police led the takedown of an encrypted messaging platform used in international drug and arms trafficking. Dutch police discovered the app, named Matrix, on the phone of a criminal convicted in 2021 of murdering a journalist.

This release includes stronger AI Code Assurance and AI CodeFix capabilities. Choose from two new operating modes to run the server in a way that best suits your business needs. Exciting things continue to happen with our language support, like new architecture rules, support for Ansible IaC, and full support of our Dart/Flutter coverage. Find out what’s in store for you.

The post SonarQube Server 10.8 Release Announcement appeared first on Security Boulevard.

Authors/Presenters: Alexander Rubin, Martin Rakhmanov

Our sincere appreciation to DEF CON, and the Presenters/Authors for publishing their erudite DEF CON 32 content. Originating from the conference’s events located at the Las Vegas Convention Center; and via the organizations YouTube channel.

Permalink

The post DEF CON 32 – Atomic Honeypot – A MySQL Honeypot That Drops Shells appeared first on Security Boulevard.

【行业动态】企业如何构建 “有韧性”的防反勒索制度体系？

日本政府建议将用户名、密码写入遗嘱

英特尔面临的挑战

A Threat Actor Claims to be Selling Access to Directorate General of Taxation and AFAP Republic

今日暂未更新资讯~
更多最新文章，请访问SecWiki

U.S. CISA adds ProjectSend, North Grid Proself, and Zyxel firewalls bugs to its Known Exploited Vulnerabilities catalog

酒业巨头申请破产原因：勒索攻击致企业无法正常运转

A vulnerability, which was classified as critical, has been found in Oracle Financial Services Regulatory Reporting for De Nederlandsche Bank 8.0.4. Affected by this issue is some unknown functionality of the component User Interface. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2020-11022. The attack may be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A software supply chain attack has lead to the publication of malicious versions of Solana’s web3.js library on the npm registry. Just like the recent Lottie Player supply chain compromise, this attack was reportedly made possible due to compromised (phished) npm.js account credentials. What happened? “Earlier today, a publish-access account was compromised for @solana/web3.js, a JavaScript library that is commonly used by Solana [decentralized apps]. This allowed an attacker to publish unauthorized and malicious packages … More →

The post Solana’s popular web3.js library backdoored in supply chain compromise appeared first on Help Net Security.

The year 2024 is one of continual evolution for communication service providers (CSPs) and the cybersecurity landscape.

The post How CSPs are Adapting to the Threat Landscape and Meeting new Cybersecurity Challenges appeared first on Security Boulevard.

【追随大师】 | 《内存取证的局限与价值：一场经典的网络安全防御思维之争》

Docker/Kubernetes (K8s)Penetration Testing Checklist

Docker/Kubernetes (K8s)Penetration Testing Checklist

TryHackme’s Advent of Cyber 2024 — Day 03 Writeup

Tricky & Simple EXIF protection Bypass