Aggregator

1.Bianlian勒索团伙公布新的受害公司 2.Play团伙公布新的受害公司 3.Abyss勒索团伙公布了新的受害公司

vArmor借助 Linux 内核的 LSM（AppArmor & BPF）和 Seccomp 技术对容器进行沙箱加固，从而增强容器隔离性、减少内核攻击面、增加容器逃逸和横向移动的难度与成本。

n.eko 是一款多合一的浏览器工具，可以本地运行，也可以在 Do

从CVE-2021-3156 sudoheap-overflow 漏洞开始练就二进制0day猎人

使用Flutter进行项目开发加载H5页面时，打开H5页面需要使用WebView组件。同时，为了和H5页面进行数据交换，有时候还需要借助JSBridge来实现客 […]

Janusec Application Gateway Janusec Application Gateway is an application security solution that provides WAF (Web Application Firewall), CC attack defense, a unified web administration portal, private key protection, web routing, and scalable load balancing....

The post janusec: Golang based application security solutions appeared first on Penetration Testing Tools.

CyberChef The Cyber Swiss Army Knife CyberChef is a simple, intuitive web app for carrying out all manner of “cyber” operations within a web browser. These operations include simple encoding like XOR or Base64,...

The post CyberChef: web app for encryption, encoding, compression and data analysis appeared first on Penetration Testing Tools.

Aleph Aleph is a tool for indexing large amounts of both documents (PDF, Word, HTML) and structured (CSV, XLS, SQL) data for easy browsing and search. It is built with investigative reporting as a primary...

The post aleph: find the people and companies you look for appeared first on Penetration Testing Tools.

软件供应链安全是确保信息技术产品和服务在整个生命周期中免受威胁的关键。CrowdStrike“蓝屏”事件的发生，凸显了软件供应链中存在的安全漏洞和风险管理不足。

小米 CFO ：公司目前愿牺牲利润来换取电动汽车规模；OpenAI 公开反对美国加州人工智能安全法案；微软推出单手可用的 Xbox 无障碍操纵杆

Group Claims a NY Surgical Center and a Nevada Medical Center Among Recent Victims
U.S. authorities are warning healthcare sector entities of incidents involving Everest, a Russian-speaking ransomware group and initial access broker, which claims to have stolen sensitive patient information in recent attacks, including on two medical care providers in New York and Nevada.

Logging Best Practices Guidance Aims to Enhance Global Detection and Response
The Australian Signals Directorate's Australian Cyber Security Center released joint guidance with a cohort of international cyber agencies that aims to provide baseline standards for event logging and threat detection, amid a wave of high-profile attacks employing "living off the land" techniques.

Kimsuky, or a Related Group, Deploys XenoRAT Variant
A North Korean hacking team hastily pivoted from using publicly available cloud computing storage to its own infrastructure after security researchers unmasked a malware campaign. The group shifted from using cloud service including Google Drive, OneDrive, and Dropbox to systems under its control.

Also: Dangers of Malicious Code Embedded in ML Models; Is Ransomware in Decline?
AI's influence on social engineering and election security has become a focal point at Black Hat. ISMG editors discuss how advanced technologies are making it easier to manipulate people and compromise security systems and offer key insights on machine learning vulnerabilities.