Aggregator

以前做内核之类的源代码审计挖洞的时候会想，如果分析环境是一个3D环绕全景可操作、缩放的函数调用图和调用树，那该多方便。不知道Vision Pro能不能实现这个理想？ 似乎是一个新的软件商机，说不定以后Hacker人手一套，就是成本有点高。 Image by ChatGPT/DallE

This bulletin includes coordinated influence operation campaigns terminated on our platforms in Q4 2023. It was last updated on January 19, 2024.OctoberWe terminated 8 Y…

2023 was a year full of efforts to help support you in meeting your secure cloud goals. Here's a look back at just a few of them.

We will be making a small change to the Cobalt Strike infrastructure next week. This will not result in any downtime but will affect updates using old copies of the update application. TLS Certificate Update verify.cobaltstrike.com hosts a text file with SHA256 hashes for the licensed Cobalt Strike product and distribution packages for Windows, Linux [...]

Read More... from Cobalt Strike Infrastructure Maintenance – January 2024

The post Cobalt Strike Infrastructure Maintenance – January 2024 appeared first on Cobalt Strike.

近期，绿盟科技CERT陆续接到多个行业客户反馈遭受微信钓鱼攻击，具体表现为中招主机通过微信群自动群发传播税务相关主题的钓鱼链接，此类事件影响较为广泛，请相关用户提高警惕进行防范。

近期，启明星辰ADLab又观察到了一系列针对乌克兰国家卫生服务局、农业政策和粮食部、战略产业部、州议会等实体的网络攻击。攻击主要是投递远控木马remcosRAT和Poverty Stealer以实现对目标的完全控制。本文将详细阐述和分析。

错误 Loaded CoreSimulatorService is no longer valid for this process.  Simula […]

SecBench现已发布，旨在为大模型在安全领域的落地应用选择基座模型提供参考。

行业首发，弥补大模型在网络安全垂类领域评测空白

在最近的网络安全监测中，360高级威胁研究院发现APT-C-26组织对开源项目SumatraPDF进行了武器化处理，通过植入恶意代码，使其成为攻击工具

检测程序代码和文档中的错误

2024！惊喜三重奏，把你的年货带回家！

冲冲冲！《奇安信攻防社区·2023专刊》成刊啦！

线上报名：1月9日-1月24日

安全探索永无止境

Thinking of migrating to the cloud? Here are some key benefits, challenges, and methods for planning out a process that will work for your organization.

Threat Analysis Group sheds light on Russian threat COLDRIVER’s use of malware.

前言最近一直在研究edu漏洞的挖掘思路，首先很多人经常问到的问题就是为啥我感觉收集起来的资产真的很少，首先我们

A few weeks ago Amazon released the Preview of Amazon Q for Business, and after looking at it I found a data exfiltration angle via rendering markdown/hyperlinks and reported it to Amazon. Amazon reacted quickly and mitigated the problem. This post shares further details and how it was fixed. The Problem An Indirect Prompt Injection attack can cause the LLM to return markdown tags. This allows an adversary who’s data makes it into the chat context (e.