Aggregator

不得不忍受低于零度的环境

Research by: Antonis Terefos (@Tera0017) Key Points Introduction Threat actors continually evolve their tactics to stay ahead of detection. Traditional methods of malware distribution via emails containing malicious attachments are heavily monitored, and the general public has become more aware of these tactics. Recently, Check Point Research observed threat actors using GitHub to achieve initial […]

The post Stargazers Ghost Network appeared first on Check Point Research.

每日更新当天鲜活情报和热点漏洞

分享近期值得关注的IOC

速修复

CrowdStrike坚称是逻辑错误，安全专家怎么说？

作者：CataLpa 原文链接：https://wzt.ac.cn/2023/12/14/protobuf/ 1 Protobuf Protobuf 是 Google 推出的一款开源跨平台的序列化数据结构的协议，它在执行效率、兼容性等方面比较优秀，在 Google 内部以及很多大型项目中被广泛使用。 Protobuf 的基础是 proto 文件以及 protoc 编译器，开发者把想要进...

感谢您的支持和理解~

Windows下shellcode的通用流程是

1. 通过PEB遍历获取DLL模块的地址
2. 搜索DLL模块的导出表获取需要的API
3. 通过API实现特定的功能

早期很多教程借助汇编来实现，但现在

There is one simple driver behind the modern explosion in SaaS adoption: productivity. We have reached an era where purpose-built tools exist for almost every aspect of modern business and it’s incredibly easy (and tempting) for your workforce to adopt these tools without going through the formal IT approval and procurement process. But this trend has also increased the attack surface—and with

The threat actor known as Patchwork has been linked to a cyber attack targeting entities with ties to Bhutan to deliver the Brute Ratel C4 framework and an updated version of a backdoor called PGoShell. The development marks the first time the adversary has been observed using the red teaming software, the Knownsec 404 Team said in an analysis published last week. The activity cluster, also

感谢大家一直以来对阿里云先知的支持！

结合典型案例，客观展现当前信贷欺诈黑灰产作恶流程及行为模式

这篇文章笔者将带领大家一起入门学习V8，pwn方向中，v8也是一个比较有趣的方向！

Cybersecurity firm CrowdStrike on Wednesday blamed an issue in its validation system for causing millions of Windows devices to crash as part of a widespread outage late last week. "On Friday, July 19, 2024 at 04:09 UTC, as part of regular operations, CrowdStrike released a content configuration update for the Windows sensor to gather telemetry on possible novel threat techniques," the company

浩鲸科技电信运营商实践

附已确认攻击IP

常态化攻防演练，斗象APTP助力攻击面暴露面识别，急速排查资产血缘关系，预防丢分可能性，悟空亲测好用！

A now-patched security flaw in the Microsoft Defender SmartScreen has been exploited as part of a new campaign designed to deliver information stealers such as ACR Stealer, Lumma, and Meduza. Fortinet FortiGuard Labs said it detected the stealer campaign targeting Spain, Thailand, and the U.S. using booby-trapped files that exploit CVE-2024-21412 (CVSS score: 8.1). The high-severity