Aggregator

精选了本周知识大陆公开发布的10条优质资源，让我们一起看看吧。

According to an updated advisory from the United States (US) Cybersecurity and Infrastructure Security Agency and the Federal Bureau of Investigation (FBI), the BlackSuit ransomware strain is known to have had demands totaling up to $500 million in payments. In this article, we’ll dive into the details of the ransomware attacks, determine who the key […]

The post BlackSuit Ransomware Threat Actors Demand Up To $500 Million appeared first on TuxCare.

The post BlackSuit Ransomware Threat Actors Demand Up To $500 Million appeared first on Security Boulevard.

山石网科WAF命令执行

在 2023 年底的时候，我开始准备记录自己每天的时间是怎么安排的。其实对于我自己来说，最大的驱动力来自记录自己的睡眠。毕竟作为「研究生」，平时也没有白天一定要做什么事情的需求（除了开会），生物钟

Lo dimostra la tiktoker @notkahnjunior, che nei suoi video rivela quanto sia facile risalire all'età

There are significant gaps in cyber resilience, despite growing confidence in organizational strategies, according to a Cohesity survey of 3,100 IT and security decision-makers across eight countries.

The post Cyber Resilience Lacking, Organizations Overconfident appeared first on Security Boulevard.

There are significant gaps in cyber resilience, despite growing confidence in organizational strate

许多时候，对于负责安全工作又不太擅长安全漏洞技术的人员而言，如何应对突发漏洞是工作中主要的难点，这里的突发漏

最近一个月的钓鱼攻击特点

A vulnerability was found in Ditty Plugin up to 3.1.45 on WordPress. It has been classified as problematic. This affects an unknown part. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2024-6715. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in WP Table Builder Plugin up to 1.5.0 on WordPress and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2024-3282. The attack may be launched remotely. There is no exploit available.

也门军火商在 X/Twitter 上公开出售卡拉什尼科夫冲锋枪（AK）、手枪、手榴弹和榴弹发射器。多个也门账号还带有蓝标认证标志。马斯克（Elon Musk）的 X 尚未对此置评。马斯克在收购 X 的前身 Twitter 后就裁掉了绝大部分负责内容审核的员工。一则账号发布广告宣称也门改装的 AK 是用户的最佳选择。

也门军火商在 X/Twitter 上公开出售卡拉什尼科夫冲锋枪（AK）、手枪、手榴弹和榴弹发射器。多个也门账号还带有蓝标认证标志。马斯克（Elon Musk）的 X 尚未对此置评。马斯克在

Невероятный путь от лабораторных животных к органам-на-чипе.

微软通过其 System configuration tools in Windows 支持页面透露它准备淘汰有 40 年历史的 Windows 控制面板，用设置应用取代它。微软还没有公布淘汰控制面板的时间表。微软称，控制面板提供了一个集中位置查看和操作系统设置和控件。通过一系列小应用程序（applets），用户可以调整各种选项，从系统时间和日期到硬件设置、网络配置等。控制面板即将被弃用，取而代之的是“设置（Settings）”应用，它提供了更现代、更简化的体验。微软推荐用户尽可能多的使用设置。

微软通过其 System configuration tools in Windows 支持页面透露它准备淘汰有 40 年历史的 Windows 控制面板，用设置应用取代它。微软还没有公布

该漏洞允许具有对GitHub Enterprise Server直接网络访问权限的攻击者伪造SAML响应。

主站 分类 漏洞 工具 极客

A vulnerability has been found in Rockwell ThinManager ThinServer and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to Local Privilege Escalation. This vulnerability is known as CVE-2024-7987. It is possible to launch the attack on the local host. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in Rockwell ThinManager ThinServer. Affected is an unknown function. The manipulation leads to path traversal. This vulnerability is traded as CVE-2024-7986. Attacking locally is a requirement. There is no exploit available. It is recommended to upgrade the affected component.