Aggregator
jrasp如何定制web插件
2 years 9 months ago
JRASP 部署容易、接入便捷和安全插件面向开源社区等特点,得到越来越多的企业用户青睐,本文以 Un
挖掘iframe通信安全漏洞
2 years 9 months ago
挖掘iframe通信安全漏洞 原理 跨域通信一般是直接ajax,用限定请求域名的方法来保证安全.但是也具有其中的局限性,只能读取服务器数据.而不
关于BIS的《信息安全控制:网络安全条目》的解读及影响分析
2 years 9 months ago
本文主要是对美国商务部工业和安全局(BIS)于2022年5月26日发布的《Information Security Controls: Cybersecurity Items》的详细解读及该细则发布后对中国政府和企业的影响分析。
Nine cars, twenty-five horses and beyond
2 years 9 months ago
TL, DR
黑灰产站点打击的类型及方法
2 years 9 months ago
黑灰产案件打击的方式方法总结
以太坊标准——EIP712
2 years 9 months ago
以太坊标准——EIP712
双倍积分+额外奖励加码,不来看看?
2 years 9 months ago
周末正式开始冲刺
安恒高级安全威胁情报周报(2022.6.3~6.10)
2 years 9 months ago
1.恶意活动:《大规模网络钓鱼活动影响数百万Facebook用户》;2.金融行业:《针对西班牙银行客户的恶意软件攻击活动》;3.高级威胁:《SideWinder组织模仿巴基斯坦政府合法域发起攻击》
What Is DNSSEC, and How Does It Work?
2 years 9 months ago
DNSSEC are cryptographic signatures that get added to DNS records to secure data transmitted over IP networks. Read on to learn how they work.
Sam Preston
走进区块链的第一步:mev浅析
2 years 9 months ago
走进区块链的第一步:mev浅析
Microsoft Office MSDT远程代码执行漏洞(CVE-2022-30190)分析
2 years 9 months ago
在分析漏洞的过程中,陆陆续续看到许多师傅的分析文章,于是参考之后结合自己的分析总结了一下。
Transform
2 years 9 months ago
“When you come out of the storm, you won’t be the same person who walked in. That’s what this storm’s all about.”
Confluence CVE-2022-26134 解析
2 years 9 months ago
许久没有写博客了,还是要好好学习。
Sariel.D
优化博客的累计布局偏移(CLS)问题
2 years 9 months ago
距离上一篇文章发布已有四个月了,是时候写几篇文章给博客除草了。上一次我介绍了我如何迁移、重构了我的博客的架构,这次我想来谈谈我在重构中优化和打磨访客体验时解决的一个问题。 我的博客优化之旅
Sukka
农夫故事会
2 years 9 months ago
关于农夫的故事~
SEECTF 2022 - Writeup
2 years 9 months ago
SEECTF 2022 - Writeup
Atlassian Confluence RCE Vulnerability
2 years 9 months ago
Summary
***UPDATED***
IBM X-Force is tracking the disclosure of a remote code execution vulnerability in Confluence Server and Data Center. This vulnerability, if exploited, could lead to the execution of arbitrary code on the victim device. Atlassian has released updates to its product line to address the issue. Details can be found below.
Threat Type
Vulnerability
Overview
***UPDATE #3, June 6, 2022***
According to multiple reputable sources, Proof of Concept code for this vulnerability was released on
10 Years Since World IPv6 Launch
2 years 9 months ago
A decade past World IPv6 Launch and we are well through the migration away from legacy IPv4, but still have a long way to go.
Erik Nygren
Akamai: Protecting Life Online with Secure Internet Access
2 years 9 months ago
Easily deliver value-added security services to families and businesses with Akamai Secure Internet Access services for ISPs and MNOs.
Jim Black