Aggregator

Summary Google has released an update to its Chrome web browser for Windows, Mac, and Linux that provides fixes for thirty-seven vulnerabilities. Of the nineteen CVE-numbered vulnerabilities noted in the advisory, Google has six of them rated as High, ten as Moderate, and three as Low. Threat Type Vulnerability Overview Google has released an update, version 90.0.4430.72, to its Chrome web browser for Windows, Mac, and Linux that provides fixes for thirty-seven vulnerabilities. Of the nineteen CVE-numbered

当年的微博

同一条命令运行一个游戏

strace

利用strace记录进程的syscall,需要root权限

• -e tr

最近研究了一下PHP的代码审计，为了更快速审计php代码，实现一个静态审计工具。

1. 实现了对PHP的opcode解析
2. 基于1实现了对函数以及参数的分析
3. 基于1实现了对变量和函数参数是否静态的分析

谈谈 Kubernetes 在多集群管理和一些应用场景中的局限性，大集群、联邦集群、应用分发、批处理调度和多租户等

展望RSA Conference 2021创新沙盒竞赛，在应用安全开发领域有Apiiro和WABBI两家公司入选，本文主要介绍这两家公司的特点。

Akamai has been named a Gartner Peer Insights Customers' Choice for Web Application Firewalls (for the second time).

在基础安全领域中，通过实体画像技术可以从多维度对检测对象进行描绘。这些描绘的成果将成为复杂安全检测，与复杂网络攻击调研的数据基础。

先粘一段来自 MDN 的解释： HTTP 消息是服务器和客户端之间交换数据的方式。有两种类型的消息︰ 请求（requests）--由客户端发送用来触发一个服务器上的动作；

最近 Google Chrome 浏览器被爆出存在远程代码执行漏洞（CNVD-2021-27989），攻击者只需要构造一个恶意的 html 页面诱导用户点击访问，就能实现对浏览器的远程代码执行攻击。

When paired with our new EdgeKV distributed key-value database, the Akamai EdgeWorkers serverless platform gives you the ability to do powerful things at the CDN level.

Summary Zscaler has identified a threat actor spreading malicious android apps via WhatsApp and SMS. The apps are specifically targeting JIO telecom users in India. Those targeted are tricked into thinking that TikTok is available again in India or that they are installing an app to register to receive a free Lenovo laptop, courtesy of the Government of India. Threat Type Malware, Phishing, Smishing Overview An unnamed threat actor has been identified as actively operating since as early as March 20, 2020.

Metasploit最新资讯！！新模块*4，功能更新*1，BUG修复*7~

Summary In its April 2021 security updates, Microsoft list 108 CVE numbered vulnerabilities in various Microsoft products. Of those, nineteen are rated as Critical, eighty-eight rated as Important, and one as Moderate. One of the vulnerabilities is reported to have been exploited in the wild. Six vulnerabilities in Microsoft's Chromium based browser, Edge, were addressed in a prior update. Microsoft rated these vulnerabilities as Unknown. Threat Type Vulnerability Overview In its April 2021 security updates

InScan 内网自动化横向渗透工具使用教程

Summary Adobe has released four security updates. The updates are for Photoshop, Digital Editions, Bridge, and RoboHelp. Three of the updates address at least one vulnerability rated by Adobe as Critical and one is rated Important. Threat Type Vulnerability Overview Adobe has released four security updates. The updates are for Photoshop, Digital Editions, Bridge, and RoboHelp. Three of the updates address at least one vulnerability rated by Adobe as Critical and one is rated Important. The potential impact

SolarWinds供应链攻击事件对美国造成非常大的影响，抛开多家科技巨头被入侵不说，就连美国国土安全部门的

这世界也许本来就是一个F(x)

Awesome-Forwarder开发实战~

2021年1月到2月，有黑客组织使用Microsoft Exchange邮件服务器软件中的0day漏洞利用链