Aggregator

在Evernote应用中发现的关键性漏洞，该漏洞可以通过嵌入恶意PDF文件到笔记中，利用PDF.js的字体注入进行JavaScript代码执行，进而通过ipcRenderer和BrokerBridge实现跨进程通信，最终达到远程代码执行

在Evernote应用中发现的关键性漏洞，该漏洞可以通过嵌入恶意PDF文件到笔记中，利用PDF.js的字体注入进行JavaScript代码执行，进而通过ipcRenderer和BrokerBridge实现跨进程通信，最终达到远程代码执行

In 2023, the cryptocurrency industry faced a significant increase in illicit activities, including money laundering, fraud, and ransomware attacks. Ransomware attacks were especially prevalent and profitable for attackers. However, other forms of criminal activity also saw a rise.

Akamai researchers have observed numerous exploit attempts for the PHP vulnerability CVE-2024-4577 as early as one day after disclosure.

The Russia-based cybercrime group dubbed "Fin7," known for phishing and malware attacks that have cost victim organizations an estimated $3 billion in losses since 2013, was declared dead last year by U.S. authorities. But experts say Fin7 has roared back to life in 2024 -- setting up thousands of websites mimicking a range of media and technology companies -- with the help of Stark Industries Solutions, a sprawling hosting provider is a persistent source of cyberattacks against enemies of Russia.

The Russia-based cybercrime group dubbed "Fin7," known for phishing and malware attacks that have cost victim organizations an estimated $3 billion in losses since 2013, was declared dead last year by U.S. authorities. But experts say Fin7 has roared back to life in 2024 -- setting up thousands of websites mimicking a range of media and technology companies -- with the help of Stark Industries Solutions, a sprawling hosting provider is a persistent source of cyberattacks against enemies of Russia.

漏洞挖掘第一篇文章复现CVE-2019-0708，含学习路线推荐，希望您喜欢！

携手斯元，共同出海。

7月15-16日，合肥中科大，InForSec网络安全大学生夏令营导师面对面活动即将盛大开幕。

We are thrilled to announce Cloudflare Zaraz support for server-side rendering of embeds from X and Instagram. This allows for secure, privacy-preserving, and performant embedding without third-party JavaScript or cookies, enhancing security, privacy, and performance on your website

大家望眼欲穿地等待的2024 Let's GoSSIP 暑期学校活动日程发布了！

成果一作为团队实习生。

In June, Sygnia, was named a Representative Vendor in the 2024 Gartner® Market Guide for Digital Forensics and Incident Response Retainer Services (DFIR).

The post Sygnia Recognized for the Third Consecutive Year in The Gartner 2024 Market Guide for Digital Forensics and Incident Response Retainer Services appeared first on Sygnia.

具备前瞻性、可落地性的工业网络安全防御解决方案。

360入选信通院全景图多项细分领域

划重点：亿级礼包 限时免费 仅此一次

2024年7月10日（北京时间），微软发布了2024 年 7月安全更新，共发布了141个CVE的补丁程序，同比上月增加了83个。