Aggregator

损坏的Word文件可以绕过微软安全防护？

A coordinated international operation involving law enforcement agencies from 40 countries led to the arrest of over 5,500 individuals linked to financial crimes and the confiscation of more than $400 million in virtual assets and government-backed currencies. Officers in Nigeria making an arrest (Source: INTERPOL) Operation HAECHI V details The five-month Operation HAECHI V (July – November 2024) targeted seven types of cyber-enabled frauds: voice phishing, romance scams, online sextortion, investment fraud, illegal online gambling, … More →

The post $400M seized, 5,500 arrested in global operation targeting cyber fraud appeared first on Help Net Security.

LLVM Pass转储类或结构的内存布局

A vulnerability was found in Intel VirusScan Enterprise Linux up to 2.0.3. It has been classified as critical. This affects an unknown part of the file NailsConfig.html of the component Cookie Handler. The manipulation leads to improper authentication. This vulnerability is uniquely identified as CVE-2016-8023. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

Amazon has taken a significant step forward to enhance the security of its cloud environment. The introduction of advanced AI/ML threat detection capabilities in Amazon GuardDuty marks a major milestone in securing applications, workloads, and data against modern threats. This new feature is designed to provide improved threat detection by leveraging AWS’s extensive cloud visibility […]

The post Amazon GuardDuty Enhanced With AI/ML Threat Detection Capabilities for Cloud Security appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

这篇文章偏基础的src漏洞挖掘，并且讲的内容还是偏向edusrc方面的。

A vulnerability was found in Intel VirusScan Enterprise Linux up to 2.0.3. It has been declared as problematic. This vulnerability affects unknown code of the file NailsConfig.html of the component HTTP Header Handler. The manipulation leads to http response splitting. This vulnerability was named CVE-2016-8024. The attack can be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

Bologna FC has revealed a ransomware attack, with data on players, fans and employees thought to have been stolen

准备迎战！豆包MarsCode 算法竞技赛启动报名！

速修复

速修复

只有贴胶布才靠谱：工程师通过关闭ThinkPad摄像头LED指示灯实现悄悄录像

微博客服务 Bluesky 网站的美国活跃用户数超过了 Meta 的 Threads，但应用活跃用户数 Threads 仍然领先。双方之间的日活跃用户数差距在缩小。根据 Similarwe 的数据，11 月 5 日前 Threads 的美国日活跃用户数比 Bluesky 多五倍，但现在缩小到了只多 1.5 倍。目前 Bluesky 的用户数接近 2400 万，比半个月前增加了 900 万。大量用户涌入也导致了假冒知名用户的现象，Bluesky 表示它大幅扩大了审核团队的规模，以更快的处理假冒账号问题。

Google Pixel gsc_gsa.c文件缓冲区溢出漏洞

国家信息安全漏洞共享平台（以下简称CNVD）本周共收集、整理信息安全漏洞325个，其中高危漏洞160个、中危漏洞149个、低危漏洞16个。

intigriti CTF 2024 部分WEB 复现

2024年数证杯服务器取证分析

2024 极客大挑战reverse部分题解

2024 SCTF Simpleshop 出题笔记以及对Thinkphp8任意命令执行的改造