Aggregator

We will be making a small change to the Cobalt Strike infrastructure next week. This will not result in any downtime but will affect updates using old copies of the update application. TLS Certificate Update verify.cobaltstrike.com hosts a text file with SHA256 hashes for the licensed Cobalt Strike product and distribution packages for Windows, Linux [...]

Read More... from Cobalt Strike Infrastructure Maintenance – January 2024

The post Cobalt Strike Infrastructure Maintenance – January 2024 appeared first on Cobalt Strike.

近期，绿盟科技CERT陆续接到多个行业客户反馈遭受微信钓鱼攻击，具体表现为中招主机通过微信群自动群发传播税务相关主题的钓鱼链接，此类事件影响较为广泛，请相关用户提高警惕进行防范。

近期，启明星辰ADLab又观察到了一系列针对乌克兰国家卫生服务局、农业政策和粮食部、战略产业部、州议会等实体的网络攻击。攻击主要是投递远控木马remcosRAT和Poverty Stealer以实现对目标的完全控制。本文将详细阐述和分析。

错误 Loaded CoreSimulatorService is no longer valid for this process.  Simula […]

SecBench现已发布，旨在为大模型在安全领域的落地应用选择基座模型提供参考。

行业首发，弥补大模型在网络安全垂类领域评测空白

在最近的网络安全监测中，360高级威胁研究院发现APT-C-26组织对开源项目SumatraPDF进行了武器化处理，通过植入恶意代码，使其成为攻击工具

检测程序代码和文档中的错误

2024！惊喜三重奏，把你的年货带回家！

冲冲冲！《奇安信攻防社区·2023专刊》成刊啦！

线上报名：1月9日-1月24日

安全探索永无止境

Thinking of migrating to the cloud? Here are some key benefits, challenges, and methods for planning out a process that will work for your organization.

Threat Analysis Group sheds light on Russian threat COLDRIVER’s use of malware.

前言最近一直在研究edu漏洞的挖掘思路，首先很多人经常问到的问题就是为啥我感觉收集起来的资产真的很少，首先我们

A few weeks ago Amazon released the Preview of Amazon Q for Business, and after looking at it I found a data exfiltration angle via rendering markdown/hyperlinks and reported it to Amazon. Amazon reacted quickly and mitigated the problem. This post shares further details and how it was fixed. The Problem An Indirect Prompt Injection attack can cause the LLM to return markdown tags. This allows an adversary who’s data makes it into the chat context (e.

Java反序列化漏洞在实践中严重威胁。研究人员提出了静态分析解决方案来定位候选漏洞和模糊解决方案，以生成概念验证 (PoC) 序列化对象以触发它们。在本文中，我们提出了一种新的混合解决方案ODDFUZZ来有效地发现Java反序列化漏洞。

从零开始自定义安卓系统(1) 下载代码 前言 aosp 魔改教程已经有很多了, 但是都比较零碎或者太过古老. 出于记录的想法,写下这些. 本篇教程基于ubunt

基于图的漏洞定位