Aggregator

Business email compromise is anything but awesome. According to the FBI, in 2020 cybercriminals cost US companies 2 billion through exploitation of business email systems. I started an Awesome list to try and compile all of the links that I had previously just kept in my head for reference when doing a BEC investigation. It’s […]

本文来自宽字节安全第一期学员zy投稿。第二期线下培训预计十一月底开班，欢迎咨询。0x01前期ｗｅｂ打点接到某

讲一讲代发现漏洞的白帽子申请 CVE ID 的过程

To begin with

本来没打算写陇剑的内容，线下的流量分析做的一般，patch部分也没有太多可写的，但借着分享的机会，对设

《SRC行业安全测试规范》增加处罚措施说明

Xcheck的C/C++检查引擎介绍与实际漏洞检测案例。

逛推特发现一个新的lolbin

前言

如果要想深入学习java安全，除了java必备的基础知识外，还有一些java高阶的知识需要了解，例如反射，类加载，RPC，动态代理等。这些概

For decades, Akamai has been focused on solving tough problems for our customers. We started by addressing the challenges of the ?World Wide Wait,? and quickly started to leverage our edge network?s scale, proximity to users, and expert operations staff to mitigate security threats for our customers. Today, Akamai has category-leading solutions including DDoS, web app and API protection, bot management, and Zero Trust Network Access. Given the incredible surge in ransomware attacks, we are excited to be adding Zero Trust segmentation to our portfolio through the acquisition of Guardicore.

Ransomware attacks continued to proliferate in Q3 as governments and law enforcement ratchet up the pressure of the cyber extortion economy

新鲜出炉，敬请期待！

阿里云安全团队向Oracle官方报告了MySQL JDBC XXE漏洞

使用文件 Hash 值作为 NPM 包版本号，无需维护每个文件的版本状态

Creating an encrypted HTTPS website depends on a lot more than simply throwing a digital certificate at it and hoping for the best. In fact, Transport Layer Security (TLS) and HTTPS misconfigurations are now so commonplace that in the 2021 OWASP Top 10, Cryptographic Failures now comes in second place....

前置要求

1. 已获得域管理权限
2. 有一台域下的计算机SYSTEM权限

相较于其他维

This post is part of a series about Offensive BPF to learn how BPFs use will impact offensive security, malware, and detection engineering. Click the “ebpf” tag to see all relevant posts. Building advanced BPF programs So far in this Offensive BPF series the focus was on bpftrace to build and run BPF programs. The next thing I wanted to investigate is what options are available to modify data structures during BPF execution.

这是Facebook创立以来最严重的一次网络访问事故，在这起故障中，我们又看到了BGP的身影

文章开始前，说点题外话，接上次转发的文章（端内钓鱼，反制蚁剑）后台反馈下来的消息看，大家普遍都没整明白这波是什么操作

Last year, Akamai released research on obfuscation techniques being used by cybercriminals to create malicious JavaScript. The code is unreadable, un-debuggable, and as a result, much more challenging to analyze and detect.

We caught up with George Brown, founder of PORGiESOFT, about his first few weeks in NCSC For Startups...