Aggregator

前言随着RASP技术的发展，普通webshell已经很难有用武之地，甚至是各种内存马也逐渐捉襟见肘

两周前受钛资本之邀分享了有关数据安全的一些个人看法，这里把主要观点抽取出来，抛砖引玉，欢迎大家共同探讨。"数

canvas 导出的图片如果只在本地使用，无需使用 toDataURL 方法，直接在原始数据前加上 BMP 文件头即可使用。

支付宝安全招聘实习生，欢迎加入我们

A vulnerability in enterprise collaboration suite MiCollab by telecommunications company Mitel has been abused for distributed denial-of-service (DDoS) attacks with record-breaking amplification potential.

Distributed denial-of-service attacks soared in complexity and size during 2021.

这个号...终于更新了哈...哈哈哈

windows部署，体验一下canvas6.45历史版本的操作手感.

访问网页即可获取你手机号，多用来网站营销等。例如搜索xxx病后，点击推广广告

We are excited to be named a Leader in The Forrester New Wave?: Microsegmentation, Q1 2022. We were evaluated alongside eight other vendors in the microsegmentation space and ranked in 10 criteria, including product vision, interface and reporting, host agents, agentless aspect, product, and services support.

本文介绍CVE-2022-21882漏洞，以及它如何绕过2021年2月修补的CVE-2021-1732的补丁

Summary A post from Veeam details vulnerabilities in its backup and replication solution. The vulnerability could lead to remote code execution (RCE) in versions 9.5, 10, and 11. Threat Type Vulnerability Overview Vulnerabilities in Veeam's backup and replication software have the potential to be used for RCE and eventual gaining control over the target system. Scoring 9.8 on the CVSS v3 scale, these vulnerabilities are critical. Patches have been issued for versions 10 and 11. Version 9.5 is no longer sup

震惊！看完这篇《如何设定合理的安全工作指标》后，80%的安全人员惊呼：后悔知道的太迟了！

#今日读书笔记# 如何在业务侧通晒“负面数据”是安全TL必修课

在即将春暖花开的日子，祝福每一位朋友都能守护好自己和家人，远离疫情。

攻击者知识图谱作为一个数据中心，当数据累积到一定量级，可能完成数据、情报中心向决策中心的进化。

“备周则意怠；常见则不疑。阴在阳之内，不在阳之对。” 《三十六计·瞒天过海》 0x00 前言 关于这篇文章其实源自逛先知的一次经历，看到@4ra1n师傅写的一篇《从一个被Tomcat拒绝的漏洞到特殊内存马》，原文链接是：https://xz.aliyun.com/t/10577。看完之后顿时就提起了