Aggregator
Medusa Blog
9 months ago
cohenido
Medusa Blog
9 months ago
cohenido
CVE-2014-7716 | Nestler Ultimate Christian Radios 1.0.1 X.509 Certificate cryptographic issues (VU#582497)
9 months ago
A vulnerability has been found in Nestler Ultimate Christian Radios 1.0.1 and classified as critical. This vulnerability affects unknown code of the component X.509 Certificate Handler. The manipulation leads to cryptographic issues.
This vulnerability was named CVE-2014-7716. The attack needs to be initiated within the local network. There is no exploit available.
vuldb.com
CVE-2016-1252 | apt prior 1.0.9.8.4/1.4~beta2 Signature Validation path error (DSA 3733-1 / EDB-40916)
9 months ago
A vulnerability was found in apt. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Signature Validation. The manipulation leads to path error.
This vulnerability is known as CVE-2016-1252. The attack can be launched remotely. Furthermore, there is an exploit available.
It is recommended to upgrade the affected component.
vuldb.com
EDRSilencer red team tool used in attacks to bypass security
9 months ago
error code: 1106
Unlocking the value of AI-powered identity security
9 months ago
While most organizations are still in the early horizons of their identity security journey, those who achieve maturity are seeing disproportionately higher returns for every dollar spent, according to SailPoint. Identity security adoption still in early stages The value of identity security remains largely untapped today. Of the organizations surveyed, roughly 41% remain at the very beginning of their identity security journey with only 10% progressing to the more advanced stages; this large gap highlights … More →
The post Unlocking the value of AI-powered identity security appeared first on Help Net Security.
Help Net Security
USENIX NSDI ’24 – Sprinter: Speeding Up High-Fidelity Crawling of the Modern Web
9 months ago
Authors/Presenters:Ayush Goel and Jingyuan Zhu, University of Michigan; Ravi Netravali,
BianLian
9 months ago
cohenido
Rhysida
9 months ago
cohenido
Play
9 months ago
cohenido
Stego, uBlock, PPTP, Log4J, Command Jacking, Windows 10, Feet, Josh Marpet, and More. - SWN #422
9 months ago
Welcome to the Security Weekly Podcast Network, your all-in-one so
2024年,全球数据贩卖、勒索攻击等黑产事件大幅上升
9 months ago
随着大量新兴技术(AI、漏洞、社工等)被攻击方熟练且复合使用,预计2024年黑产将超越2023年,甚至是2021年的高点。
【复现】 WebLogic T3/IIOP 反序列化漏洞(CVE-2024-21216)风险通告
9 months ago
-赛博昆仑漏洞安全通告-【复现】 WebLogic T3/IIOP 反序列化漏洞(CVE-2024-21216)风险通告
JVN: Schneider Electric製Data Center Expertにおける複数の脆弱性
9 months ago
Schneider Electricが提供するData Center Expertには、複数の脆弱性が存在します。
讲讲我对公众号的两个认知,以及未来的转型打算
9 months ago
昨天,一个朋友打电话给我:“你知道么,现在大厂已经全面停止投放图文了”额……知道是知道,只是不知道他们转型转的这么坚决。而且以我的认知,图文的受众仍然有着强硬而坚决的小众群体,这部分群体在网上的影响力
Play
9 months ago
cohenido
Play
9 months ago
cohenido
可绕过安全防护!EDR Silencer红队工具遭黑客利用
9 months ago
EDR Silencer 是受 MdSec NightHawk FireBlock 启发而开发的开源工具,可检测运行中的 EDR 进程。
2016年就已存在,Jetpack 中的这个严重漏洞终于被修复了
9 months ago
环境异常 当前环境异常,完成验证后即可继续访问。 去验证