Aggregator

Pear

Dark Feed IO
12 hours 6 minutes ago

You must login to view this content

cohenido

3 SOC Process Fixes That Unlock Tier 1 Productivity

The Hackers News
12 hours 11 minutes ago
What is really slowing Tier 1 down: the threat itself or the process around it? In many SOCs, the biggest delays do not come from the threat alone. They come from fragmented workflows, manual triage steps, and limited visibility early in the investigation. Fixing those process gaps can help Tier 1 move faster, reduce unnecessary escalations, and improve how the entire SOC responds under pressure
The Hacker News

自动化解密 .NET XORStringsNet 混淆器

先知技术社区
12 hours 13 minutes ago
针对在 Agent Tesla 等知名 .NET 恶意软件中泛滥的 XORStringsNet 混淆器，本文详细记录了分析师如何抛弃繁琐的传统手动逆向分析，开发出一款高效、全自动的 Python 批量解密工具的实战全过程。

SandboxJS 连环沙箱逃逸漏洞深度解析（CVE-2026-26954）

先知技术社区
12 hours 13 minutes ago
漏洞来源一个评分十分的严重漏洞漏洞描述SandboxJS 是一个 JavaScript 沙箱库。在 0.8.34 版本之前，可以获取包含 Function 数组，从而导致沙箱逃逸。如果拥有包含 Function 的数组和 Object.fromEntries，就可以构造 {[p]: Function}，其中 p 是任何可构造的属。此漏洞已在 0.8.34 版本中修复漏洞原理CVE-2026-269

30th March – Threat Intelligence Report

Check Point Research
12 hours 18 minutes ago

For the latest discoveries in cyber research for the week of 30th March, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Iranian state-affiliated threat group Handala Hack has breached FBI director’s Patel’s personal Gmail account and leaked many personal photos and documents. This follows the FBI’s seizure of domains related to Handala Hack’s […]

The post 30th March – Threat Intelligence Report appeared first on Check Point Research.

urias

HackMyVM-Gitdwn 靶机WP

先知技术社区
12 hours 19 minutes ago
Gitdwn靶机贴近真实生产环境，融合了多种常见的安全漏洞与配置隐患，涵盖前端加密逻辑、XML外部实体（XXE）、内网服务暴露、Git版本控制信息泄露等多个核心考点，既考验渗透测试人员的基础操作能力（如端口扫描、目录枚举、密码爆破），也要求具备一定的代码逆向、漏洞组合利用与细节挖掘思维。

提示词注入视角下的 AI Webshell 检测绕过技术研究

先知技术社区
12 hours 27 minutes ago
引言随着大型语言模型（LLM）和深度学习技术在安全领域的广泛应用，传统的基于特征码、抽象语法树（AST）或沙箱行为分析的 Webshell 检测手段正逐渐向基于 AI 的语义分析演进。AI 模型能够理解代码的逻辑意图，从而识别出经过复杂混淆的恶意脚本。然而，AI 模型本身存在一个本质性的弱点：它们在处理代码时，往往将代码逻辑与注释、元数据等“非执行内容”置于同一语义空间进行推理。这就为提示词注入（

Stored XSS Bug in Jira Work Management Could Lead to Full Organization Takeover

Cyber Security News
12 hours 29 minutes ago

A popular collaboration tool within the Atlassian ecosystem is widely used by organizations to track projects, manage approvals, and manage daily tasks. Recently, security researchers at Snapsec uncovered a critical Stored Cross-Site Scripting (XSS) vulnerability within the platform. By exploiting a seemingly low-risk configuration field, the team demonstrated how a low-privileged user could achieve a full […]

The post Stored XSS Bug in Jira Work Management Could Lead to Full Organization Takeover appeared first on Cyber Security News.

Abinaya

CanisterWorm Malware Attacking Docker/K8s/Redis to Gain Access and Steal Secrets

Cyber Security News
12 hours 42 minutes ago

A financially motivated cybercrime group has been quietly compromising cloud environments since late 2025, and its activities are now drawing serious concern across the security community. The group, known as TeamPCP, operates a self-propagating worm called CanisterWorm that hunts for poorly secured Docker APIs, Kubernetes clusters, Redis servers, and systems vulnerable to the React2Shell flaw. […]

The post CanisterWorm Malware Attacking Docker/K8s/Redis to Gain Access and Steal Secrets appeared first on Cyber Security News.

Tushar Subhra Dutta

Critical Fortinet FortiClient EMS bug under active attack (CVE-2026-21643)

Help Net Security
12 hours 52 minutes ago

A critical SQL injection vulnerability (CVE-2026-21643) in Fortinet FortiClient Endpoint Management Server (EMS), a management server for FortiClient endpoint agents on various platforms, is under active exploitation. The warning comes from Defused Cyber, which helps organizations deploy honeypots/fake assets, and uses them as well to capture real attack attempts and exploits and provide early warning threat intelligence. “Currently marked as not exploited on CISA and other Known Exploited Vulnerabilities (KEV) lists, [CVE-2026-21643] has seen first … More →

The post Critical Fortinet FortiClient EMS bug under active attack (CVE-2026-21643) appeared first on Help Net Security.

Zeljka Zorz

Managed ad