Aggregator
First round of French election: party attacks and a modest traffic dip
4 months ago
How Cloudflare mitigated DDoS attacks targeting French political parties during the 2024 legislative elections, as detailed in our ongoing election coverage
João Tomé
Declare your AIndependence: block AI bots, scrapers and crawlers with a single click
4 months ago
To help preserve a safe Internet for content creators, we’ve just launched a brand new “easy button” to block all AI bots. It’s available for all customers, including those on our free tier
Alex Bocharov
Sustainability and ESG: Understanding the Difference and Why It Matters
4 months ago
Navya Lakkaraju
复杂之眼EDR 威胁狩猎查询MEQL规则
4 months ago
MEQL是复杂之眼的专有的查询语言,分享一些MEQL查询规则,通过复杂之眼EDR提供的MEQL威胁狩猎页面,用
Are Attacks Hiding in Your Encrypted Traffic?
4 months ago
Distributed denial-of-service (DDoS) attackers are both persistent and creative. One of their creative methods that has seen an increase recently is attacks on HTTPS web applications and services by employing encrypted traffic. Attackers are unrelenting in their assaults on high-value encrypted targets. The high...
MIke Wetherbee
蠕虫病毒伪装传播,根目录文件遭神秘删除
4 months ago
记一次某游戏 mod 文件加密逆向过程
4 months ago
虽然很早注册了论坛账号,但都没怎么实际进行过逆向。这次动手逆向一次某游戏mod文件加密逆向过程,在此分享和大家交流学习一下。
CVE-2021-41773 explained
4 months ago
An in-depth look at CVE-2021-41772: a path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49.
【漏洞通告】Geoserver远程代码执行漏洞(CVE-2024-36401)
4 months ago
GeoServer 存在安全漏洞,该漏洞源于不安全地将属性名称解析为 XPath 表达式,可能导致远程代码执行。
No room for error: Don’t get stung by these common Booking.com scams
4 months ago
From sending phishing emails to posting fake listings, here’s how fraudsters hunt for victims while you’re booking your well-earned vacation
威胁猎人黑产交易风险监测模块正式上线,限时开放内测名额
4 months ago
企业自身的哪些数据/营销资产正在被交易?
转发抽奖!InForSec2024夏令营报名倒计时,席位有限,欲报从速!
4 months ago
InForSec将于2024年7月14-23日在中国科学技术大学举办“InForSec 2024年大学生夏令营”。报名正在进行中,转发本文赢取精美礼品。
HW蓝队高级值守金手指
4 months ago
梦回净土抵万侵!!!
网络安全信息与动态周报2024年第26期(6月24日-6月30日)
4 months ago
本周,互联网网络安全态势整体评价为良。
AsiaCCS 2024 论文录用列表
4 months ago
Off-by-One Conference 2024议题:经典目标中被遗忘的宝藏
4 months ago
OFF-BY-ONE Conference在新加坡举行,我们有幸发表了题,介绍Linux kernel 漏洞挖掘Fuzz方面的一些技巧
【已复现】GeoServer远程代码执行漏洞(CVE-2024-36401)安全风险通告
4 months ago
致力于第一时间为企业级用户提供权威漏洞情报和有效解决方案。
ZDI-CAN-24557: Trend Micro
4 months ago
A CVSS score 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Anonymous' was reported to the affected vendor on: 2024-07-03, 44 days ago. The vendor is given until 2024-10-31 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
ZDI-CAN-24550: PDF-XChange
4 months ago
A CVSS score 3.3 AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N severity vulnerability discovered by 'Rocco Calvi (@TecR0c) with TecSecurity' was reported to the affected vendor on: 2024-07-03, 44 days ago. The vendor is given until 2024-10-31 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.