Aggregator

6月榜单发布，恭喜获得荣耀个人白帽点亮6月新奖章！

还未获得补天避暑大礼包的小白帽们速来！惊喜任务返场

小米荣获“2023年度漏洞管理实践先进企业”！

小米荣获“2023年度漏洞管理实践先进企业”！

小米荣获“2023年度漏洞管理实践先进企业”！

Parallels Desktop是macOS下的一个虚拟机软件，在其打包功能中存在一处安全性问题。本文通过利用 Parallels Desktop 对 macOS 安装程序的信任，进行本地权限提升。

撬开芯片的大门——故障注入实战（高级课程），欢迎报名！

撬开芯片的大门——故障注入实战（高级课程），欢迎报名！

在Evernote应用中发现的关键性漏洞，该漏洞可以通过嵌入恶意PDF文件到笔记中，利用PDF.js的字体注入进行JavaScript代码执行，进而通过ipcRenderer和BrokerBridge实现跨进程通信，最终达到远程代码执行

In 2023, the cryptocurrency industry faced a significant increase in illicit activities, including money laundering, fraud, and ransomware attacks. Ransomware attacks were especially prevalent and profitable for attackers. However, other forms of criminal activity also saw a rise.

Akamai researchers have observed numerous exploit attempts for the PHP vulnerability CVE-2024-4577 as early as one day after disclosure.

The Russia-based cybercrime group dubbed "Fin7," known for phishing and malware attacks that have cost victim organizations an estimated $3 billion in losses since 2013, was declared dead last year by U.S. authorities. But experts say Fin7 has roared back to life in 2024 -- setting up thousands of websites mimicking a range of media and technology companies -- with the help of Stark Industries Solutions, a sprawling hosting provider is a persistent source of cyberattacks against enemies of Russia.

The Russia-based cybercrime group dubbed "Fin7," known for phishing and malware attacks that have cost victim organizations an estimated $3 billion in losses since 2013, was declared dead last year by U.S. authorities. But experts say Fin7 has roared back to life in 2024 -- setting up thousands of websites mimicking a range of media and technology companies -- with the help of Stark Industries Solutions, a sprawling hosting provider is a persistent source of cyberattacks against enemies of Russia.

漏洞挖掘第一篇文章复现CVE-2019-0708，含学习路线推荐，希望您喜欢！

携手斯元，共同出海。

7月15-16日，合肥中科大，InForSec网络安全大学生夏令营导师面对面活动即将盛大开幕。

We are thrilled to announce Cloudflare Zaraz support for server-side rendering of embeds from X and Instagram. This allows for secure, privacy-preserving, and performant embedding without third-party JavaScript or cookies, enhancing security, privacy, and performance on your website

大家望眼欲穿地等待的2024 Let's GoSSIP 暑期学校活动日程发布了！