Aggregator

2024 年第三届国际网络安全挑战赛 by Avenger

更多最新文章，请访问SecWiki

As many as 77 banking institutions, cryptocurrency exchanges, and national organizations have become the target of a newly discovered Android remote access trojan (RAT) called DroidBot. "DroidBot is a modern RAT that combines hidden VNC and overlay attack techniques with spyware-like capabilities, such as keylogging and user interface monitoring," Cleafy researchers Simone Mattia, Alessandro

苹果终于推出官方版火狐浏览器iCloud密码扩展 可以在火狐浏览器上填充密码

China-linked APT Salt Typhoon has breached telcos in dozens of countries

Zscaler CEO抨击虚假SASE方案严重误导用户；思科发布紧急预警：10年前的ASA系统漏洞正遭黑客积极利用 | 牛览

《AI时代深度伪造和合成媒体的安全威胁与对策（2024版）》报告发布

A Threat Actor Claims to have Leaked the Data of Chambers Health

SOC analysts, vital to cybersecurity, face burnout due to exhausting workloads, risking their well-being and the effectiveness of organizational defenses. Security Operations Center (SOC) analyst burnout is a very real problem. These are some of the most important cybersecurity professionals out there, and many of them are being worked to exhaustion. Amidst an already overstretched […]

HowStuffWorks.com 创始人、北卡州立大学 Engineering Entrepreneurs Program 项目主任 Marshall Brain 于 11 月 20 日自杀身亡，年仅 63 岁。在去世前的凌晨 4:29，他给 30 多名同事发送了最后一封电子邮件，声称自己遭到了学校管理人员最不公正、最羞辱的对待。此前大学创新和创业项目执行董事 Stephen Markham 通知工作人员他将于 2024 年 12 月 31 日退休，而 Brain 称自己实际上是被解雇，退休是委婉说法。Marshall David Brain II 于 1998 年创办了 HowStuffWorks.com，这是一个百科全书类的网站，旨在以通俗易懂的方式介绍技术主题。网站取得了巨大成功，Discovery Communications 于 2007 年以 2.5 亿美元将其收购。他后来出版了图书《The Engineering Book》，主持了国家地理频道节目《Factory Floor with Marshall Brain》，参加过 《The Oprah Winfrey Show》和《Good Morning America》。他在 2003 年发表了《Robotic Nation》一文，预测到 2050 年，自动化和机器人技术的广泛使用将引发大规模劳动力危机，多达半数的美国工作岗位可能会消失，引发大规模失业和社会动荡。

新研究显示开源软件为全球96%的现代应用程序提供支持 但也存在着担忧

This is a light-hearted tribute to IT professionals and the hard work they execute for digital transformations. With apologies to Clement Clark Moore, we based it on his classic poem originally titled “A Visit from St. Nicholas” and now better known as “’ Twas the Night Before Christmas.” We hope you enjoy it, and...

Need help for catching a popular hacker in my country

Crypto.com，一家全球领先的加密货币平台，拥有超过1亿用户，近日宣布与HackerOne合作，对其漏洞赏金计划进行重大升级。这一举措加强了该公司在不断发展数字资产领域中，对安全和客户保护的承诺。 升级后的计划拥有创纪录的200万美元奖励池，使其成为HackerOne平台上所有行业中提供的最大赏金。这一前所未有的金额凸显了Crypto.com在发现和解决潜在漏洞方面的承诺，以防被恶意行为者利用。 Crypto.com首席执行官Kris Marszalek表示：“安全和合规是我们Crypto.com一切工作的基石。随着我们业务和行业的不断发展，我们必须要专注于我们的核心原则，而这个新的赏金计划正是通过设定新标准来做到这一点。” 通过激励安全研究人员识别和报告漏洞，Crypto.com旨在积极加强其平台的防御能力，并确保用户资产的安全。 HackerOne首席执行官Kara Sprague表示：“当你运营一个服务于超过1亿客户的全球应用程序时，在恶意行为者之前发现关键安全漏洞对于系统完整性和客户信任至关重要。” C rypto.com的首席信息安全官Jason Lau强调了公司在持续改进安全保证方面的承诺。Lau说：“我们一直尊重并与道德黑客社区合作，作为我们安全团队的一部分。通过这一里程碑深化与HackerOne的关系，并设立这一标志性的赏金，凸显了我们致力于增强保障和消费者保护的承诺。” Crypto.com在安全和合规方面的最新举措，建立在其已经令人印象深刻的业绩记录之上。该平台已获得包括SOC2 Type 2、PCI DSS 4.0、ISO 27017和ISO 27019在内的多项认证，展示了其遵循最高行业标准的承诺。 这个200万美元的漏洞赏金计划是Crypto.com主动安全方法的明确信号，表明其致力于为用户提供一个安全可靠的平台。通过与道德黑客社区的互动，该公司在建立一个更安全的加密货币生态系统方面迈出了重要一步。 要了解有关Crypto.com漏洞赏金计划的更多信息以及如何参与，请访问hackerone.com/crypto。     转自安全客，原文链接：https://www.anquanke.com/post/id/302482 封面来源于网络，如有侵权请联系删除

谷歌浏览器类型混淆漏洞让攻击者能够执行远程代码

Europol has supported the dismantling of a sophisticated criminal network responsible for facilitating large-scale online fraud. In an operation led by the Hanover Police Department (Polizeidirektion Hannover) and the Verden Public Prosecutor’s Office (Staatsanwaltschaft Verden) in Germany, and supported by law enforcement authorities from Austria, Czechia, Finland, Poland and the Netherlands, over 50 servers were seized, significant digital evidence was secured, and two key suspects were arrested. A central hub for cyber fraud The investigation … More →

The post Law enforcement shuts down Manson Market cybercrime marketplace appeared first on Help Net Security.

A Threat Actor Claims to be Selling Data from an Unidentified Hospital in USA

Recently, Palo Alto Networks identified and patched a critical zero-day vulnerability in their next-generation firewalls (NGFWs). This vulnerability, tracked as CVE-2024-0012, allowed attackers to execute code on vulnerable devices remotely. This vulnerability has been actively exploited in attacks dubbed "Operation Lunar Peek."

The post Why Zero-Day Attacks Bypass Traditional Firewall Security: Defending Against Zero-Day’s like Palo Alto Networks CVE-2024-0012 appeared first on Security Boulevard.