Aggregator

NOW I SEE YOU 👁

Summary An emergency directive (ED) from CISA directs U.S. government agencies update VMWare products in response to critical vulnerabilities that could affect those agencies. Threat Type Vulnerability Overview Be advised that X-Force Incident Command is tracking Cybersecurity Directive ED 22-03 and an advisory issued by CISA in response to multiple vulnerabilities in VMware products. The Cybersecurity & Infrastructure Security Agency has issued an emergency directive regarding critical vulnerabilities in t

本文为报告部分精彩内容，内附完整版下载方式

1.汽车行业：《针对德国汽车经销商和制造商的信息窃取活动》;2.勒索专题：《加拿大战斗机培训公司遭LockBit勒索软件攻击》;3.高级威胁：《Lazarus组织利用Log4Shell漏洞针对韩国目标》

机器学习已合并到在线查杀https://n.shellpub.com的正式环境

Meet Mike Schiessl to learn more about his career path, how companies can support a DevOps to DevSecOps transition, and the future of security and business.

无论从网络安全的攻击或是防护视角，信息的采集和甄别都至关重要，其中主机的系统类型是关键出发点。在以往经验中，根据操作系统类型往往能够大致判断其存在的风险点及风险类型，因此，识别主机操作系统类型对系统网络安全防护具有极其重要的意义。

去繁从简高效应聘，公开透明广阔平台

广州，业务安全、蓝军、研发、客户端安全

河马ShellPub更新（内含福利）

Why trying to avoid trusting the KMS doesn't make sense (and other common misconceptions).

理论上将适合任何架构，任何系统的linux网络拓扑

Preparing for open enrollment is a key part of running efficient healthcare organizations, but it's difficult to know where to start. Learn which steps to take.

实现简易版用户态TCP

Red Team 及相关研发，北上广深成

ie CVE-2020-1380是2020年抓到的一个在野利用的0 day，且此漏洞目前在野外利用不少。

JavaScript is everywhere, and when malicious can be hugely detrimental. In this blog, learn about the types of malicious JavaScript and how Akamai's SWG product helps keep you more secure from it.

Zyxel USG FLEX handler 远程命令执行漏洞 CVE-2022-30525

Summary ***UPDATED, May 12, 2022*** The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an advisory regarding the critical vulnerability. ***UPDATED, May 9, 2022*** New Proofs-of-Concept have been released by two leading offensive attack teams as reported by The Daily Swig. ***Original Summary*** A critical vulnerability in BIG-IP can allow for Remote Code Execution (RCE) that could allow an attacker to take control over an affected system. The Hacker News and F5 have both reported