Aggregator

KoSpy通过伪装成实用应用程序（如‘文件管理器’‘软件更新工具’和‘Kakao安全’）来感染设备。

测试微信小程序跟web网站基本相同，抓包测试接口，逆向看小程序源码。

100 000 сайтов могут потерять свою советскую идентичность.

Introducing the next chapter of the NCSC research problem book, which aims to inspire research on the biggest impact topics in hardware cyber security.

Andrew A explains what's new in a significant update to the NCSC's flagship cloud guidance.

Headless Chrome bots powered by Puppeteer are a popular choice among bot developers. The Puppeteer API’s ease of use, combined with the lightweight nature of Headless Chrome, makes it a preferred tool over its full-browser counterpart. It is commonly used for web scraping, credential stuffing attacks, and the

The post How to detect Headless Chrome bots instrumented with Puppeteer? appeared first on Security Boulevard.

全美29州逾8.6万名医护人员信息因AWS S3存储桶配置错误遭泄露，包含敏感PII和医疗文件。

黑客利用微软Copilot发起高仿钓鱼攻击，通过伪造发票邮件和虚假登录页面窃取用户凭据，威胁企业安全。

Lindy Cameron, CEO, introduces changes to the NCSC’s cyber security resources specifically designed for board members.

A new white paper examines the rise of 'ransomware as a service' and extortion attacks.

New ‘Code of Practice for Software Vendors’ will ensure that security is fundamental to developing and distributing products and services.

How safe is it to scan that QR code in the pub? Or in that email?

先了解 SOC 如何随着时间的推移而演变，以及为什么说 3.0 为安全运营的新时代奠定了基础。

New advice on implementing high-risk and ‘break-glass’ accesses in cloud services.

Why small organisations need to manage their private branch exchange (PBX) telephone networks.

Non-email sending (parked) domains can be used to generate spam email, but they're easy to protect.

How operators of critical national infrastructure (CNI) can use NCSC guidance and blogs to secure their internet-facing services.

Why it's important to protect the interfaces used to manage your infrastructure, and some recommendations on how you might do this.

New guidance to protect your brand from being exploited online, and to help you choose alternate authentication models.

Explaining the forthcoming NCSC Technology Assurance Principles.