Aggregator

关键词网络攻击外国势力尤其是美国情报机构通过网络攻击，针对中国大型科技企业实施的窃取商业秘密和知识产权的行为。针对这些网络攻击事件，国家互联网应急中心（CNCERT）已经成功发现并处置了两起重大事件。

关键词安全漏洞据Cyber Security News消息，安全研究人员在流行的开源 Web 服务器 Apache Tomcat和servlet 容器中发现了两个严重漏洞，可能允许攻击者执行远程代码并

关键词网络攻击一项新的社会工程活动显示，大量攻击者利用微软Teams作为部署已知恶意软件DarkGate的手段。Trend Micro研究人员Catherine Loveria、Jovit Saman

Sharp4RemoveLog：一款通过调用wevtutil进程实现痕迹清理的工具

先知安全沙龙(上海站) - 大模型基础设施安全攻防

先知安全沙龙(上海站) - 终端安全对抗及防护

先知安全沙龙(上海站) - Linux沙箱技术(权限机制、资源隔离与安全防御)

先知安全沙龙(上海站) - 红队武器开发之基于合法服务的隐蔽C2

先知安全沙龙(上海站) - 后渗透阶段主机关键信息自动化狩猎的实现与应用

2025 ciscn novel1详细解析

域渗透实战之HTB-Certified

PE文件代码注入

面向GPTs的提示词注入攻击分析

【CVE-2025-50379】利用cursor解读tomcat 条件竞争导致RCE漏洞

一次 house of force 练习：HTB pwn - Fancy names

记一次5000万资产的渗透测试

万字长文窥探信息收集真正的艺术

应急响应记录之水坑挂马事件分析与恢复

The Cybersecurity and Infrastructure Security Agency (CISA) has unveiled a proposed update to the National Cyber Incident Response Plan (NCIRP), inviting public feedback on the draft. This highly anticipated revision, outlined in a pre-decisional public comment draft released this month, aims to address the evolving cybersecurity landscape amidst increasing threats to critical infrastructure, national security, […]

The post CISA Proposes National Cyber Incident Response Plan appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A vulnerability was found in ChBg 1.5. It has been rated as very critical. Affected by this issue is the function simplify_path of the file config.c. The manipulation leads to memory corruption. This vulnerability is handled as CVE-2004-1264. The attack may be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.