Aggregator

先知安全沙龙(上海站) - 红队武器开发之基于合法服务的隐蔽C2

先知安全沙龙(上海站) - 后渗透阶段主机关键信息自动化狩猎的实现与应用

2025 ciscn novel1详细解析

域渗透实战之HTB-Certified

PE文件代码注入

面向GPTs的提示词注入攻击分析

【CVE-2025-50379】利用cursor解读tomcat 条件竞争导致RCE漏洞

一次 house of force 练习：HTB pwn - Fancy names

记一次5000万资产的渗透测试

万字长文窥探信息收集真正的艺术

应急响应记录之水坑挂马事件分析与恢复

The Cybersecurity and Infrastructure Security Agency (CISA) has unveiled a proposed update to the National Cyber Incident Response Plan (NCIRP), inviting public feedback on the draft. This highly anticipated revision, outlined in a pre-decisional public comment draft released this month, aims to address the evolving cybersecurity landscape amidst increasing threats to critical infrastructure, national security, […]

The post CISA Proposes National Cyber Incident Response Plan appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A vulnerability was found in ChBg 1.5. It has been rated as very critical. Affected by this issue is the function simplify_path of the file config.c. The manipulation leads to memory corruption. This vulnerability is handled as CVE-2004-1264. The attack may be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

Один взлом оставил сотни тысяч врачей без важных систем, а пациентов – без своевременной помощи.

A vulnerability was found in Linux Kernel 2.6.16.9 and classified as critical. This issue affects some unknown processing. The manipulation leads to race condition. The identification of this vulnerability is CVE-2009-3547. Attacking locally is a requirement. Furthermore, there is an exploit available.

A vulnerability classified as problematic has been found in libvirt 0.5.1. This affects the function proxyReadClientSocket in the library proxy/libvirt_proxy.c. The manipulation leads to memory corruption. This vulnerability is uniquely identified as CVE-2009-0036. The attack needs to be approached locally. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

Fortinet has issued an advisory for a now-patched critical security flaw impacting Wireless LAN Manager (FortiWLM) that could lead to disclosure of sensitive information. The vulnerability, tracked as CVE-2023-34990, carries a CVSS score of 9.6 out of a maximum of 10.0. It was originally fixed by Fortinet back on August 18, 2023, but without a CVE designation. The list of supported FortiOS

12月18日下午，中央网信办在北京召开全国网络辟谣联动机制第二次全体会议。中央网信办副主任、国家网信办副主任杨建文出席会议并讲话。