Aggregator

OAuth 2.0 有 4 种认证流程： 授权码模式（authorization code） 简化模式（implicit） 密码模式（resource owner password credentials） 客户端模式（client credentials） 下面以微信为例介绍最常见的也是最安全的

新年新气象 ：）

在众多业务模式中，安全运营商成为一些头部厂商竞相选择的方向。安全运营商一词在业内由来已久，但何谓安全运营商，如何成为安全运营商，大家谁都没见过，更不知如何实践，故写此文以探讨。

一、UEBA场景是什么 腾讯御见UEBA（用户实体行为分析）使用一系列分析方法（统计学习、机器学习等）通过

当今的安全团队面临着前所未有的复杂性。IT 环境正在快速变化和扩展，导致数据激增，为了保持企业内部庞大的结构体系与业务的正常运行，从而购置了越来越多的工具。随着大量工具的配备，会出现大量警报，导致安全操作团队产生不可避免的警报疲劳

Having previously decided we need to make a new hire onto our team, part 1 of this series examined how to meet the needs of our team going into the future, instead of just adding surface visible technical skills.

We're proud of the progress Akamai has made in environmental, social, and governance (ESG) performance.

New improvements to Guardicore Centra make it the fastest and simplest solution to protect against ransomware and meet the needs of zero trust.

蚂蚁集团网商银行信息安全部，守护网商银行用户信息和数字资产安全，助力科技金融业务发展，致力于建设全球最安全可信的银行，引领金融行业安全。

开发的两个关于suricata的小工具，便于编写规则和进行告警使用。

宁静在遥远处波动

The tale of The Three Little Pigs can teach us more than you think about cybersecurity risk.

See how doxxing victims are distributed across industries, company sizes, and revenue tiers. Find Coveware’s data and analysis on doxxing trends in Q4.

A recent piece of malware from a known crypto mining botnet campaign has started leveraging Bitcoin blockchain transactions in order to hide its backup C2 IP address. It's a simple, yet effective, way to defeat takedown attempts.

Ios13增加了判断对象是否属于zone的安全检查，这将导致以前通过伪造内核对象的漏洞利用手段变得困难了

漏洞管理Vulnerability Management就像淘金，攻击者要在扫描报告众多的漏洞中淘出一击即中的金子，防守方要在里面淘出一堆正中要害的。且看小而美的创业公司如何在这个细分领域淘金。

How charities can erase personal data from donated laptops, phones and tablets, before passing them on.

亲身经历，现身说法