Aggregator

Исследование: 71% нарушений ИБ-политик совершают женщины.

近年来，工控安全漏洞数量快速增长，工业企业因漏洞利用而遭受攻击的风险不断攀升，新型攻击威胁如勒索软件等持续加剧。因此，强化工控安全漏洞管理，提升工业领域网络安全防护水平已成为各国竞相关注的重要议题。

作为威胁情报的重要组成部分，漏洞情报是安全团队制定防护策略、验证安全措施有效性的基础依据。因此，如何充分利用漏洞情报来增强主动防御的能力，已经成为企业安全运营中一个越来越受关注的议题。

本周，CrowdStrike引发的Windows蓝屏事件影响了超过850万台PC和服务器，造成广泛服务中断。本文详细解析事件的发生经过、严重性及其对网络安全行业的影响，并提供几条重要启示，帮助防范类似事件的再次发生。

Application security testing is a critical component of modern software development, ensuring that applications are robust and resilient against malicious attacks. As cyber threats continue to evolve in complexity and frequency, the need to integrate comprehensive security measures throughout the SDLC has never been more essential. Traditional pentesting provides a crucial snapshot of an

本期我们将以 TRON 钱包为例，讲解多签钓鱼的相关知识。

包括访问令牌、API密钥、密钥、银行账号等敏感信息。

The rather old CVE-2017-9841, an RCE in PHPUnit, suddenly jumps to the top of our list, with an increase of nearly 400% since last month. We dig into the scanning infrastructure.

每日更新当天鲜活情报和热点漏洞

凯歌而行，不以山海为远；乘势而上，不以日月为限。随着2024年上半年的结束，我们迎来了回顾与总结的时刻！

每逢“佳节”倍思亲，思的什么亲？蓝队的父老乡亲！

Meta Platforms on Wednesday said it took steps to remove around 63,000 Instagram accounts in Nigeria that were found to target people with financial sextortion scams. "These included a smaller coordinated network of around 2,500 accounts that we were able to link to a group of around 20 individuals," the company said. "They targeted primarily adult men in the U.S. and used fake accounts to mask

The browser is the nerve center of the modern workspace. Ironically, however, the browser is also one of the least protected threat surfaces of the modern enterprise. Traditional security tools provide little protection against browser-based threats, leaving organizations exposed. Modern cybersecurity requires a new approach based on the protection of the browser itself, which offers both

3月10日起，每周日13点～18点直播授课

CrowdStrike的首席安全官Shawn Henry表示：“我们多年来在点滴中建立的信心在几个小时内就消失得无影无踪，这是一次沉重的打击。”

看雪论坛作者ID：touful

[握手]回复口令：“一草一木皆是兵”，获取今日最新情报！ [太阳]tips强烈推荐 ：https://tix.qq.com - 高阶版免费体验：查询额度权益 - 每日最新封禁IOC获取 - 专家IP鉴定分析权限

[握手]回复口令：“一草一木皆是兵”，获取今日最新情报！ [太阳]tips强烈推荐 ：https://tix.qq.com - 高阶版免费体验：查询额度权益 - 每日最新封建IOC获取 - 专家IP鉴定分析权限