Aggregator

关键词网络攻击摘要美国最大的比特币 ATM 运营商 Byte Federal 发生数据泄露事件，58,000 名客户受到影响。黑客利用 GitLab 中的漏洞访问了客户的敏感数据。暴露的信息包括姓名、

关键词内核漏洞网络安全和基础设施安全局（CISA）已将两个新的漏洞添加到其已知被利用漏洞目录中，其中一个是涉及 Windows 内核的漏洞，目前正被用于攻击。该漏洞编号为CVE-2024-35250，

关键词网络攻击据Cyber Security News消息，网络安全专家发现了一波针对Youtube创作者的攻击，攻击者利用钓鱼邮件，冒充品牌方与这些创作者进行合作沟通，以此来传播恶意软件。攻击者使用

关键词安全漏洞近期臭名昭著的以色列商业间谍软件开发商 NSO 集团的飞马座（Pegasus）间谍软件被发现攻击了两名塞尔维亚的 iPhone 用户。调查结果表明，NSO 利用了一种新开采的漏洞，可能涉

Подписавшись на очередной блог, можно стать жертвой дезинформации и вербовки.

**Author’s Note: This article is based on findings from the recent paper “BadGPT-4o: stripping safet

Wallarm honeypot research finds potentially exposed APIs are being discovered within half a minute

You know security is an overwhelming term and while I had the luxury to work for security firms, I f

Code ownership might not be a pressing concern when a small team of around 10 developers works on th

Addressing cyber threats before they have a chance to strike or inflict serious damage is by far the best security approach any company can embrace. Achieving this takes a lot of research and proactive threat hunting. The problem here is that it is easy to get stuck in endless arrays of data and end up with no relevant intel.  To avoid this, use these five battle-tested techniques that are

Addressing cyber threats before they have a chance to strike or inflict serious damage is by far th

Table of Contents Introdu

Как всего один маленький флажок сумел всколыхнуть WordPress-сообщество?

Russia FSB relies on Ukrainian minors for criminal activities disguised as “quest gam

Ukraine’s SBU uncovered an FSB espionage campaign recruiting minors for criminal activities disguised as “quest games.” The Security Service of Ukraine (SBU or SSU) uncovered a new espionage campaign linked to Russia’s intelligence agency Federal Security Service (FSB), which consists of involving minor Ukrainians in criminal activities under the guise of “quest games”. In Kharkiv, […]

著者：ptr-yudaiはじめに今回のブログ記事では、今年の8月29日と30日に開催されたCODEGATE CTF 2024 Finalsで取り組んだ問題の解説を公開します。CODEGATE

What is Uplift Modeling ?When faced with the problem of trying to influence prospective customers i

通告编号:NS-2024-0036-12024-12-17TAG：Apache Struts、S2-067、CVE-2024-53677漏洞危害：攻击者利用此漏洞，可实现任意文件上传。版本：1.11漏

近日，绿盟科技CERT监测到Apache发布安全公告，修复了Apache Struts任意文件上传漏洞S2-067(CVE-2024-53677)。CVSS评分9.5，目前漏洞PoC已公开，绿盟科技复现成功，请相关用户尽快采取措施进行防护。