Aggregator

Cobalt Strike 4.10 is now available. This release introduces BeaconGate, the Postex Kit, and Sleepmask-VS. In addition, we have overhauled the Sleepmask API, refreshed the Jobs UI, added new BOF APIs, added support for hot swapping C2 hosts, and more. This has been a longer release cycle than in previous releases to allow us to [...]

Read More... from Cobalt Strike 4.10: Through the BeaconGate

The post Cobalt Strike 4.10: Through the BeaconGate appeared first on Cobalt Strike.

又踩坑了

情报分析方式

我叫乔纳森·威利斯。我就是那张著名的照片中的警官，照片上有两名狙击手在特朗普集会的屋顶上。我来这里是想告诉公众，我已经瞄准了刺客至少 3 分钟，但特勤局局长拒绝下令干掉罪犯。在刺客向特朗普总统开枪之前，高层 100% 阻止了我杀死他。

Cloudflare is adding support for end-to-end private traffic flows to our local traffic management (LTM) load balancing solution, and allowing for the replacement of hardware load balancers

Government directed shutdowns and cable cuts were both significant sources of Internet outages in Q2 2024. This post explores these disruptions, as well as others caused by power outages, maintenance, technical problems, military action, and unknown causes

Learn how Akamai Client-Side Protection & Compliance helps organizations meet the latest payment security updates and clarifications outlined in PCI DSS v4.0.1.

Distributed denial-of-service (DDoS) attacks are a major risk for enterprise virtual private network (VPN) concentrators. Protecting these servers is paramount for business operations and continuity. Without a secure VPN, remote workers lose access to enterprise network resources, applications, and data, impacting...

Unveiling the rise of Hacktivism in a tense global climate.

Unveiling the rise of Hacktivism in a tense global climate.

Unveiling the rise of Hacktivism in a tense global climate.

360携手病毒中心战略签约，共建“无死角”城市安全防御体系

译者：知道创宇404实验室翻译组 原文链接：A Chrome/Edge RCE via V8 WASM Type Confusion 1 介绍 本文介绍了 V8 JavaScript 和 WebAssembly 引擎中的一个漏洞，该漏洞允许在“渲染器”进程中执行任意的 shellcode。尽管代码执行仍受基于进程隔离的浏览器沙箱限制（除非浏览器使用 --no-sandbox 标志运行），...

勒索攻击损失加剧，但攻击成本在进一步降低。

奇安信威胁情报中心和猎鹰运营团队在运营过程中观察到在2024年6月份时多个境外友商发布与GrimResource新型攻击技术有关的在野攻击活动，第一时间对该技术进行了研究并持续进行监控，于2024年7月中旬在政企终端中发现第一例攻击事件。