Aggregator

高效团队、招人留人、目标管理、自我管理、沟通艺术、知行合一

《演化的高级威胁治理》介绍了从2014年至今，我所从事的高级威胁治理战略规划发展和演化的全部过程，从2021年5月到今天历时8个月时间陆续整理发布，就此暂告一段落，战略5.0也在2021年HVV结束之后逐渐孕育而成，假以时日再发布更新。

Ransomware as a service groups are shifting their tactics as enterprises become harder targets, and law enforcement pressure mounts.

Summary According to multiple reliable sources, Oiltanking Deutschland GmbH & Co., a German oil company, has suffered a cyber attack that severely degraded operations has been reported by several reliable sources. Threat Type Cyber Attack Overview A cyber attack on a German oil company has been reported by several news outlets. The attack is reminiscent of the Colonial Pipeline attack suffered last year. According to the German newspaper, Handelsblatt, an internal report from Oiltanking states: "systems wer

【HTB系列】shibboleth

Summary Critical vulnerabilities have been disclosed with Samba that require immediate attention. These vulnerabilities could have far reaching impact. Threat Type Vulnerabilities Overview A trio of vulnerabilities in Samba have been disclosed by Samba. The vulnerabilities have the potential for remote code execution, impersonation of arbitrary services, and information leak. The first vulnerability, CVE-2021-44141 , is an information leak via symlinks of existence of files or directories outside exported

Can your startup help counter the rise of malicious advertising?

大年初一，懒人给关注者们拜年了，祝虎年虎虎生威！我平时很懒，比较少更新本懒号。但相对会比较勤奋地出现在即刻、Twitter 里，如果你感兴趣我关注的黑客、安全、隐私等话题，可以在这两大平台上 follow 我。 即刻：余弦.jpg Twitter：evilcos 新春快乐！

吉牛勇退、福虎生威！

在过去的rwctf中，我们为FLAG（FreeRTOS+LwIP+ARM+GoAhead）这道题思考了很久，终于今天复现完成决定分享出来，也在这里祝大家新年快乐~

Hello, and welcome to our very first Developer Community update of 2022. In this new monthly series, we?ll share highlights of what is happening across the Akamai Developer Community. Since this is the first blog we?re posting, we will also catch up on news from October 2021 through today.

本篇文章介绍扫描端口，分为masscan原理分析以及重写改造两大部分。下篇文章介绍生产者消费者以及锁，无锁环

祝大家新春愉快，家庭幸福，平安喜乐，虎年冲冲冲！

技术管理点滴思考，修炼ing

继续来读代码。今天读ssh client。在这之前，让我们先了解一下ssh协议。SSH协议介绍如下：https://www.ssh.com/academy/ssh/protocolSSH协议是一个经典...

Managing online privacy is a balancing act for both users and security professionals. We can do better than simply following privacy regulations such as the GDPR and CPRA.

Universal Plug and Play (UPnP) is a widely used protocol with a decade-long history of flawed implementations across a wide range of consumer devices. In this paper, we will cover how these aws are still present on devices, how these vulnerabilities are actively being abused, and how a feature/vulnerability set that seems to be mostly forgotten could lead to continued problems in the future with DDoS, account takeover, and malware distribution.