Aggregator

XS-Leaks through Speculation Rules

Google Classic Papers

A vulnerability was found in AdventNet Manageengine Netflow Analyzer 7. It has been classified as problematic. This affects an unknown part of the file ping.do of the component traceroute. The manipulation of the argument searchTerm leads to basic cross site scripting. This vulnerability is uniquely identified as CVE-2007-3594. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

反沙盒？一文足以

哥斯拉源码解读+如何绕过waf检测

THM靶场-Lookup-通关WriteUp

禅道18.x-20.x版本漏洞挖掘思路分析

MemoryModule的远程反射dll加载与一些没有实现的想法

2024鹏城杯线下赛复现

JDBC Attack漫谈

智能驾驶「大决战」要来了，未来的主战场在哪？

马斯克玩坏了 X，2000 万「Twitter 难民」疯狂涌向这个 App

В программе — пять ключевых направлений информационной безопасности.

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.

• CVE-2024-51378 CyberPanel Incorrect Default Permissions Vulnerability

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.

Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the Known Exploited Vulnerabilities Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information.

Although BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.

Today, the Cybersecurity and Infrastructure Security Agency (CISA) released an updated public version of the Continuous Diagnostics and Mitigation (CDM) Data Model Document. Version 5.0.1 aligns with fiscal year 2023 Federal Information Security Modernization Act (FISMA) metrics.

The CDM Data Model Document provides a comprehensive description of a common data schema to ensure that prescribed diagnostic activities within CDM solutions are consistent across all participating federal agencies. Agencies leverage the common data schema to accomplish these critical objectives: 

• Reduce agency threat surface.
• Increase visibility into the federal cybersecurity posture.
• Improve federal cybersecurity response capabilities.
• Streamline FISMA reporting.

Vendors also can benefit from the CDM Data Model Document.

For additional information, visit the Continuous Diagnostics and Mitigation (CDM) Program web page.

黑客利用 macOS 扩展文件属性隐藏恶意代码

新型漏洞攻击利用服务器进行恶意更新