Aggregator

Что такое дендриколлоиды и чем они лучше кремниевых чипов?

XCon组委会

Discover why Escape is a better API security solution.

The post Escape vs Rapid7 appeared first on Security Boulevard.

Phishing using PWAs? ESET Research's latest discovery might just ruin some users' assumptions about their preferred platform's security

根据一份泄露的电子表格，微软软件工程师的平均薪酬从 148,436 美元到 1,230,000 美元不等，对应职位级别从 Level 59 到 Level 69。薪酬数据是由数百名美国微软员工自愿分享的，包含了工资、绩效加薪、晋升和奖金等信息。薪酬最高的工程师属于新成立的 Microsoft AI 部门，平均薪酬 377,611 美元。Cloud and AI 部门薪酬 255,126 美元，Experiences and Devices 部门 242,723 美元，Azure 部门 251,464 美元。

总结推荐本周的热点资讯、安全事件、一周好文和省心工具，保证大家不错过本周的每一个重点！

抽《黑神话：悟空》，速来！

主站 分类 漏洞 工具 极客

Наши предки покорили Тихий океан на тысячи лет раньше, чем мы думали.

Одна уязвимость поделила криптосообщество на две стороны спора.

Cato Security found a new info stealer, called Cthulhu Stealer, that targets Apple macOS and steals a wide range of information. Cado Security researchers have discovered a malware-as-a-service (MaaS) targeting macOS users dubbed Cthulhu Stealer. Cthulhu Stealer targets macOS users via an Apple disk image (DMG) that disguises itself as legitimate software. The researchers spotted […]

New malware Cthulhu Stealer targets Apple macOS usersCato Security found a new info stealer, c

A vulnerability was found in thinkgem JeeSite 5.3. It has been rated as problematic. This issue affects some unknown processing of the file /js/a/login of the component Cookie Handler. The manipulation of the argument skinName leads to cross site scripting. The identification of this vulnerability is CVE-2024-8112. The attack may be initiated remotely. Furthermore, there is an exploit available.

A vulnerability was found in Mattermost Plugin Channel Export up to 1.0.0. It has been declared as problematic. This vulnerability affects unknown code of the file /export. The manipulation leads to resource consumption. This vulnerability was named CVE-2024-43105. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

最近，众多Linux用户报告称他们的设备在尝试启动时，收到了一条神秘的错误消息：“系统出了严重问题。

近期，包括谷歌、微软、AWS 和 Red Hat 在内的多个知名开源项目被发现在 CI/CD 工作流中通过 GitHub Actions 工件泄露 GitHub 身份验证令牌。

近日，有研究人员在插件的用户模拟功能中发现了未经身份验证的权限升级漏洞，该漏洞是由 LiteSpeed Cache 6.3.0.1 及以下版本中的弱散列检查引起的。

美国重要国防承包商被黑，最坏的情况可能是什么呢？