Aggregator

Summary Cisco has published thirteen Security Advisories. Of the advisories, five are rated as High and eight are rated as Medium. Threat Type Vulnerability Overview Cisco has published thirteen Security Advisories. Of the advisories, five are rated as High and eight are rated as Medium. For all advisories listed below, it is noted that Cisco's Product Security Incident Response Team (PSIRT) is "not aware of any public announcements or malicious use of the vulnerabilities" that are described in the advisori

颜色家族再添一员

Latin America’s cyberattack landscape saw continued focus on port 5900 and the targeting of common web vulnerabilities.

介绍Xcheck团队如何在企业内部落地SAST应用，以及取得的效果

大家好，我是BaCde，上周临时组队参与了HackTheBox组织的Cyber Apocalyps 2021的CTF比赛。今天主要写一下Web的Artillery，这是一道3星题（最难为4星），这是一道关于XXE利用的题，做出来的人相对很少，也花了不少时间，有些收获，这里写出来与大家分享。本文不介绍基础知识，如果要学习基础可以查看后面的推荐文章。

收集信息

此次的CTF题大部分都提供源代码，并提供有Dockerfile文件，可通过docker build构建并运行。通过源码可知源代码为Java语言。openjdk 1.8.181版本，Web Server为Tomcat10。

4月25日在上海参加了ArchSummit全球架构师峰会，分享了一些我对计算的看法，演讲全文如下。各位嘉宾

Reflecting on the cybersecurity threat landscape in 2020, we can't overlook the massive changes that landed on us. Global security attacks increased at a significant pace between 2019 and 2020, and the COVID-19 pandemic only deepened these troubling conditions.

While those of us in places like the U.S. are experiencing some relief with access to the COVID-19 vaccine, it has been heartbreaking to see surges in infection, hospitalization, and death across the globe, including the dire situation in India.

目录: 一、背景与应用场景介绍 二、企业APP面临的问题 三、个人面临的问题 四、解决方案 五、未来展望与总结 一、背景与应用场景介绍 1.1、国家对个人隐私保护越来越重视 2019年初，中央网信办、工信部、公安部及市场监管总局四部门联合发布了《关于开展App违法违规收集使用个人信息专项治理的公告》

当地时间4月27日，美国华盛顿特区大都会警察局发布声明表示，其内部系统遭到黑客入侵，部分数据文件被窃，并且黑

Summary Google has released an update to its Chrome web browser for Windows, Mac, and Linux that provides fixes for nine vulnerabilities. Of the seven CVE-numbered vulnerabilities noted in the advisory, Google has three of them rated as High, three as Medium, and one as Low. Threat Type Vulnerability Overview Google has released an update, version 90.0.4430.93, to its Chrome web browser for Windows, Mac, and Linux that provides fixes for nine vulnerabilities. Of the seven CVE-numbered vulnerabilities noted

中央网信办、工信部、公安部及市场监管总局四部门联合发布了《关于开展App违法违规收集使用个人信息专项治理的公告》，预示着我国在APP隐私层面的治理进入了一个新的高度，期间部分APP采集隐私数据受到了严重处罚。用户权益保护越来越被重视。

Ransomware attacks continued to proliferate in Q1 2021 as several common but unpatched software vulnerabilities created a fresh supply of compromised network access to ransomware affiliates.

本篇文章将分享如何通过MCU的调试接口提取固件

据华盛顿邮报和美联社报道，隶属于美国国防部的一个部门Defense Digita

背景软件供应链（Software Supply Chain）指的是软件从软件供应商到用户使用的整个过程中，从设计软件、编写代码到生成软件的开发环节，再到分发软件和用户下载的交付环节，最终到用户使...

（本文比较偏产品，不涉及技术细节）上一篇文章说到，企业安全建设后期都会有各种各样的平台，比如 WAF、HIDS、SOC、SIEM、SOAR、SDL 等，在大部分互联网公司里，这些平台都是独立的，...