Aggregator

迂回渗透非法资金盘，成功落地诈骗团伙IP。

中间件日志和webshell被删除的情况下，通过安全设备日志和全流量日志还原攻击过程。

github项目地址https://github.com/Y4er/openam-CVE-2021-3546

In early May 2021, the President of the United States issued an executive order on cybersecurity, and though it will take some time for executive branch agencies to develop formal rules, the order itself includes a lot of what I consider to be best practice in cybersecurity, including the use of multi-factor authentication (MFA) and Zero Trust, mentioned by name.

除了门罗币，这种不消耗CPU资源的虚拟货币可能成为黑产的新宠儿，提前预知，方能不乱阵脚。

0x00 漏洞挖掘新增两个CNVD近期，使用了Xcheck Java引擎对一些开源网站系统进行检查，最终发现

Examining three breach and compliance failure cases under the New York Department of Financial Services’ 23 NYCRR Part 500 cybersecurity regulation.

New details in the Indexsinas SMB worm, also dubbed NSABuffMiner.

一次 Shiro 到内网漫游横向渗透

6 月 28 日，收益聚合器 Merlin Lab 遭到黑客攻击。

最近几年，安全服务发生了一些显著变化。本文重点介绍MSS服务和MDR服务以及国内安全服务现状。

启动docker镜像

根据其官网

What is your recollection of May 2017? Emmanuel Macron won the French election. The Ringling Bros. and Barnum & Bailey Circus gave its final performance after a 146-year run. The U.S. FCC voted to overturn net neutrality rules. And the National Health Service in the United Kingdom was crippled by a massive ransomware attack that ended up costing over $120 million.

美国一家名为Premise Data Corp.的数据公司，通过三百万名兼职人员，以拍照、数据记录、填写问卷

宝，我今天发财了！发的什么财？诚聘英才！

QEMU仿真方式总结

​6 月 28 日，Polygon 生态中的算法稳定币项目 SafeDollar 遭到黑客攻击，该项目所发行的稳定币 SDO 从 1.07 美元趋于归零，攻击者拿走了价值 25 万美元的 USDC 和 USDT。

银针安全沙龙上海站开启报名！转发赢银针安全沙龙定制T恤~

新类型 cmdlinux，直连命令执行WebShell