Aggregator

The Myth of the Perfect CISO: A Multitalented Master of All

Ransomware DataBreachToday.com
1 year 1 month ago
Ellis of YL Ventures on How Modern CISOs Must Lead, Not Master Every Discipline
There were never many 'do everything' CISOs. Today there are even fewer. But with a specialist area, strong overview and ability to channel expertise, CISOs can align with business goals, embrace the business enabler role, demonstrate quick wins, and ensure their organization makes better risk decisions.

Ascension Notifying Patients About Rash of Third-Party Hacks

Ransomware DataBreachToday.com
1 year 1 month ago
4 Breaches Appear to Potentially Affect Hundreds of Thousands Across Several States
Catholic hospital chain Ascension Health is notifying hundreds of thousands of individuals across several states of at least four hacking incidents in recent months involving third-parties. Ascension reported one of the breaches this week, another in mid-April and the others in March and February.

Planned CISA Cuts Face Political Delays and Growing Backlash

Ransomware DataBreachToday.com
1 year 1 month ago
CISA Staff Told to Prepare for Cuts and Crowded Work Locations Amid Growing Turmoil
Top officials at the nation's cyber defense agency want to give President Donald Trump's pick to lead the agency time to assess major restructuring plans - a move that is reportedly delaying the timeline for reductions in force while causing growing concerns for job stability among staffers.

Scattered Spider Linked to Marks & Spencer Hack

Ransomware DataBreachToday.com
1 year 1 month ago
Retailer Continues to Recover From Ransomware Incident
British retailer Marks & Spencer was reportedly targeted by financial crime group Scattered Spider, who deployed ransomware on the company's VMware ESXi server. The retailer continues to recover from a cyber incident that disrupted operations in its online and offline stores.

xAI Dev Leaks API Key for Private SpaceX, Tesla LLMs

Krebs on Security
1 year 1 month ago
A employee at Elon Musk's artificial intelligence company xAI leaked a private key on GitHub that for the past two months could have allowed anyone to query private xAI large language models (LLMs) which appear to have been custom made for working with internal data from Musk's companies, including SpaceX, Tesla and Twitter/X, KrebsOnSecurity has learned.
BrianKrebs

r00tk1t init

rutk1t0r's blog
1 year 1 month ago

参考:
http://www.freebuf.com/articles/system/54263.html
https://chirath02.wordpress.com/tag/asmlinkage/
r00tk1t基础实验
https://memset.wordpress.com/2010/12/28/syscall-hijacking-simple-rootkit-kernel-2-6-x/
https://memset.wordpress.com/2011/01/20/syscall-hijacking-dynamically-obtain-syscall-table-address-kernel-2-6-x/
http://www.mallocfree.com/data/compile-linux-kernel-mallocfree.com.pdf
https://ruinedsec.wordpress.com/2013/04/04/modifying-system-calls-dispatching-linux/

rutk1t0r

端到端加密IM预想

rutk1t0r's blog
1 year 1 month ago

从古代烽火通信到二战电台破译，从ARPANET被研发出来至目前互联网，消息加解密会是永恒的主题。近期Google宣布SHA-1发现碰撞，后斯诺登时代信息泄露事件仍在不断发生。一直想学习相关技术并应用于实践，在此进行大致预想。

rutk1t0r

Managed ad