Aggregator

原创 | Spring Framework RCE CVE-2022-22965 漏洞分析

SecIN技术平台

2 years 6 months ago

【安全通告】致远OA前台任意用户密码修改漏洞

绿盟科技CERT

2 years 6 months ago

近日，绿盟科技CERT监测到致远OA前台任意用户密码修改漏洞，由于用户在修改密码时短信验证码认证存在缺陷，攻击者可以通过构造恶意数据修改任意用户密码，导致任意用户登录，进一步利用可实现远程代码执行。

【安全通告】Google Chrome堆缓冲区溢出漏洞（CVE-2023-4863）

绿盟科技CERT

2 years 6 months ago

近日，绿盟科技CERT监测发现Google官方修复了一个堆缓冲区溢出漏洞（CVE-2023-4863），攻击者通过诱导用户访问恶意网站触发该漏洞，最终导致在目标系统上任意执行代码。目前已监测到该漏洞存在在野利用。

Revisiting the User-Defined Reflective Loader Part 2: Obfuscation and Masking

Cobalt Strike Blog

2 years 6 months ago

This is the second installment in a series revisiting the User-Defined Reflective Loader (UDRL). In part one, we aimed to simplify the development and debugging of custom loaders and introduced the User-Defined Reflective Loader Visual Studio (UDRL-VS) template. In this installment, we’ll build upon the original UDRL-VS loader and explore how to apply our own [...]

The post Revisiting the User-Defined Reflective Loader Part 2: Obfuscation and Masking appeared first on Cobalt Strike.

Robert Bearsby

Choose Your Own Adventure — A Chat About the Future of Edge Computing

The Akamai Blog

2 years 6 months ago

AJ Johnson

Hands-On Learning Experiences Encourage Cybersecurity Career Discovery

NIST | Cybersecurity Insights

2 years 6 months ago

With a mention in the new National Cyber Workforce and Education Strategy and even a dedicated state law , K–12 cybersecurity education clearly has the eye of policymakers. However, despite public attention and new opportunities for high school students to pursue cybersecurity coursework, high schools often struggle to provide students with a clear understanding of what cybersecurity careers actually look like. Hands-on learning experiences, like those we’ve had at our schools and during our internship with NICE at NIST, can help bring cybersecurity education and career pathways into focus for

Asher Cronin , Stephen Langelier