Aggregator

漏洞管理新论：从KEV到CTEM

安全喷子
9 months 2 weeks ago
漏洞管理(Vulnerability Management)作为信息安全领域中最为人熟知的概念之一，一直是安全运营的核心活动。本文将探讨KEV目录、EPSS等新兴的漏洞评估方法，以及CTEM等前瞻性框架如何帮助组织更好地应对当前的威胁环境。

Decrypted: DoNex Ransomware and its Predecessors

Avast Threat Labs
9 months 2 weeks ago

Researchers from Avast have discovered a flaw in the cryptographic schema of the DoNex ransomware and its predecessors. In cooperation with law enforcement organizations, we have been silently providing the decryptor to DoNex ransomware victims since March 2024. The  cryptographic weakness was made public at Recon 2024 and therefore we have no reason to keep […]

The post Decrypted: DoNex Ransomware and its Predecessors appeared first on Avast Threat Labs.

Threat Research Team

Rosetta：多样化网络环境下的TLS流量分类

绿盟科技研究通讯
9 months 2 weeks ago
在加密流量分类问题中，因多样化网络中不同的TCP机制导致的数据包长度序列发生变化而使模型失效， Rosetta系统通过TCP感知的流量增强机制和自监督学习获取TLS特征从而使不同网络环境中达到相对较好的分类效果。

Managed ad