Aggregator

Cybersecurity Myths That Are Harming Your Business

F5 Labs
5 years 6 months ago
Cybersecurity experts are falling prey to seven myths in the effort to protect their business. Shape's Daniel Woods writes for Forbes, explaining where these myths have led us astray, and how to keep the useful bits while discarding the chaff.

Taking a Human Approach to a Global Crisis

The Akamai Blog
5 years 6 months ago
Since March, the COVID crisis has caused massive disruption to every area of life and work. It has tested us, as individuals and as a business. Akamai has taken a very human-centric approach during the pandemic. Our guiding principle has been to do what is right for the health and safety of employees, customers and partners. I feel proud of this, because when I think about what I'm grateful for, it really does come down to people. I'm grateful to be working for a company that is keeping people connected to the world through technology. I'm grateful to be among smart, immensely resilient colleagues. And I'm grateful to have friends and family who are sticking together. Ultimately, it's the humanity that matters.
Prasad Mandava

Blast from the past: Cross Site Scripting on the AWS Console

Embrace The Red
5 years 6 months ago
Amazon Bug Bounty!

Great news: Amazon is now offering bounties via a security vulnerabiltiy research program

Bad news: AWS is out of scope!

When I read this I remembered that a few years ago I found persistent Cross-Site-Scripting on the AWS Console.

This post is a write up on how I found the XSS back then, techniques I used and how they evolved over the years and Amazon’s response.

AWS Console and Cross Site Scripting

The story is that I had just created an AWS account and started using the service.

TCTF 2020 Web Writeup partial

xmsec(陌小生)
5 years 6 months ago
To begin with

今年 TCTF Web 题目比原来要多，但还是那么强（做不出来

easyphp

这道题被非预期了，正确解法也是在看到一叶飘零的

xmsec

TCTF/0CTF 2020 Writeup

rmb122's notebook
5 years 6 months ago

又是一年 0CTF, 这次一个人一队单刷一次, 做出了两题 WEB, 可惜只输出了一天, 第二天还要赶 ddl, 还是太蔡了 orz

【新书推荐】互联网安全建设从0到1

安全小飞侠
5 years 6 months ago
这是一本适合从安全小白到企业安全负责人阅读的安全书籍，作者将自己多年丰富的安全经验融入此书，通俗易懂，雅俗共赏，既可作为安全工程师的工具手册，解决各类常见的安全问题，也可以指导安全负责人如何从0到1系统地建设企业安全体系，非常值得推荐！

【新书推荐】互联网安全建设从0到1

安全小飞侠
5 years 6 months ago
这是一本适合从安全小白到企业安全负责人阅读的安全书籍，作者将自己多年丰富的安全经验融入此书，通俗易懂，雅俗共赏，既可作为安全工程师的工具手册，解决各类常见的安全问题，也可以指导安全负责人如何从0到1系统地建设企业安全体系，非常值得推荐！

Hack The Box - Postman Writeup - Linux

童话
5 years 6 months ago
0x00 前言

懒了，原本要保证每个月至少输出一篇blog，翻了翻做的笔记，不是不能拿出来讲的就是片段化的知识点，要

TonghuaRoot

Managed ad