PPT来啦 |攻击面管理和漏洞治理干货
千呼万唤，沙龙ppt、回放来啦
Aggregator
【招募】运营合伙人
7 months ago
运营伙伴招募
注意喚起: Operation Blotless攻撃キャンペーンに関する注意喚起 (公開)
7 months ago
Playing Games with PCI Compliance Deadlines
7 months ago
<p>The new version 4.0 of the PCI DSS standard that applies to organizations that handle payment cards is now mandatory as of April 01, 2024. As a QSA, I’ve heard rumblings about organizations that moved their annual PCI…</p>
Chris Camejo
Microsoft向左，Apple向右｜数据安全与AI PC的生态和未来
7 months ago
重塑我们的生活和工作方式
上周关注度较高的产品安全漏洞(20240617-20240623)
7 months ago
CNVD漏洞周报2024年第25期
7 months ago
8220挖矿团伙的新玩具：k4spreader
7 months ago
XLab的大网威胁感知系统会对当前活跃的主流DDoS僵尸网络家族进行持续跟踪和监控，最近3个月，这套系统观察到CatDDoS系团伙持续活跃，利用的漏洞数量达80+，攻击目标数量最大峰值300+/d，我们整理了一份近期的各种数据分享给社区。
「AI安全」| 京麒沙龙第十四期
7 months ago
聚焦时下最热的AI安全话题！
6月27日 下午2点直播间等你~
Omdia Report: Trend Disclosed 60% of Vulnerabilities
7 months ago
The latest Omdia Vulnerability Report shows Trend MicroTM Zero Day InitiativeTM (ZDI) spearheaded 60% of 2023 disclosures, underscoring its role in cybersecurity threat prevention.
Dustin Childs
Как измерить результативность решения по управлению уязвимостями?!
7 months ago
CIS Benchmarks Community Volunteer Spotlight: Rob VandenBrink
7 months ago
CIS Benchmarks volunteers undertake a significant role in establishing high-level security measures throughout the industry. Hear Rob VandenBrink's story.
Hacking8安全信息流停止运营
7 months ago
由于一些原因Hacking8安全信息流将停止运营。这个决定并不容易做,但考虑到各种因素,我们觉得这是最好的选择。
关于安全信息流
The Kaspersky Software Ban—What You Need to Know to Stay Safe Online
7 months ago
Citing national security concerns, the U.S. Department of Commerce has issued a ban on the sale of all Kaspersky online...
The post The Kaspersky Software Ban—What You Need to Know to Stay Safe Online appeared first on McAfee Blog.
McAfee
Adventures in Shellcode Obfuscation! Part 2: Hail Caesar!
7 months ago
by Mike Saunders, Principal Security Consultant This blog is the second in a series of blogs on obfuscation techniques for hiding shellcode. You can find the rest of the series […]
Red Siege
Helping keep customers safe with leaked password notification
7 months ago
To help protect against account compromise via credential stuffing attacks, Cloudflare will notify dashboard users when we detect that a password was found in an external data breach
Garrett Galow
CVE-2023-52251 and CVE-2024-32030 Exploit PoCs: Apache Kafka Remote Code Execution Vulnerability > 0.7.2
7 months ago
CVE-2023-52251 (8.8 - High) was publicly disclosed in Jan 2024 and was fixed in Apache Kafka version 0.7.2. CVE-2024-32030 (8.1 - High) was found in November 2023 and was also fixed in Apache Kafka version 0.7.2. Both of these vulnerabilities were associated with remote code execution on an API call to an endpoint.
Hacker Hunter
Top Hurdles for MSSPs and One Shining Solution
7 months ago
As one of many MSSPs, you're aware of challenges that make your work difficult. Learn how the CIS Controls Accreditation can help.
The State of Data Breaches
7 months ago
I've been harbouring some thoughts about the state of data breaches over recent months, and I feel they've finally manifested themselves into a cohesive enough story to write down. Parts of this story relate to very sensitive incidents and parts to criminal activity, not just on
Troy Hunt
先锋马上线后渗透-dll注入上线
7 months ago
前言：前面跟各位师傅提到过先锋马制作上线思路，那么我们在先锋马上线后如何进一步去做呢？本文会逐一为各位师傅讲述。