Aggregator

​希望能成为产品owner与创业者们的灵感之源。

In 2021, Ivanti patched a vulnerability that they called “code injection”. Rumors say it was a backdoor in an open source project. Let’s find out what actually happened!

U.S. and U.K. authorities have seized the darknet websites run by LockBit, a prolific and destructive ransomware group that has claimed more than 2,000 victims worldwide and extorted over $120 million in payments. Instead of listing data stolen from ransomware victims who didn't pay, LockBit's victim shaming website now offers free recovery tools, as well as news about arrests and criminal charges involving LockBit affiliates.

HomuWitch is a ransomware strain that initially emerged in July 2023. Unlike the majority of current ransomware strains, HomuWitch targets end-users - individuals - rather than institutions and companies.

The post Decrypted: HomuWitch Ransomware appeared first on Avast Threat Labs.

黑产组织攻击样本的一些对抗技术

2023年已经过去了，原本按照惯例会在元旦或者跨年夜的时候将一整年的想法进行总结然后输出成文字，不过由于一些自

Why and how are we subjected to so much disinformation nowadays, and is there a way to spot the fakes?

2023 可能是持续的数字安全战争的关键一年

前言现在安全攻防演练趋于常态化，本文主要介绍了HVV演练中常用的攻破工控系统的思路。

所议即所得，还能赢取遥遥领先等豪华周边！

More IoT Targeting, plus a bunch of new CVEs! See what attackers went after in January 2024.

补充介绍一下商业公司的测信号流量检测能力

伪装成花旗银行对帐单的窃密攻击活动

TscanPlus一款综合性网络安全检测和运维工具，新增网络空间测绘功能、密码生成、密码查询等功能。

NSA发现任何接近电传打字机的人，只要能读到它的电磁辐射，就有可能破译它的秘密，这个秘密直到1980年代才被公开。

0# 概述注：本文原创首发自T00ls论坛，文章链接：https://www.t00ls.com/thread-71282-1-1.html最近刷了刷公众号，偶然看到吾爱破解论坛官方公众号发布了...

美国网络安全与基础设施安全局（CISA）在 2023 年度都做了哪些重点工作？一起来回顾一下！

针对某免杀CS样本的详细分析

今年的 0CTF 一共有三道 web 題，其中一道題目是 client-side 的，我就只解這題而已，順利拿到 first blood，這篇簡單記錄一下心得。

關鍵字列表：

1. CSS injection
2. CSS exfiltration