Aggregator

转眼间 2021 年已经过去将近三分之一了，然而作者的 2020 年年终总结还没有写，本来已经把这件事情抛在

Summary A security advisory has been published for Xen. The vulnerability addressed in the advisory could potentially allow an attacker to cause a denial of service condition on the host system. Threat Type Vulnerability Overview A security advisory has been published for Xen. The vulnerability addressed in the advisory could potentially allow an attacker to cause a denial of service condition on the host system. Further details are available from the advisories linked below. Xen Security Advisory CVE-2021-

Summary VMWare published a security advisory, VMSA-2021-0004, that addresses two vulnerabilities in vRealize Operations, Cloud Foundation, and vRealize Suite Lifecycle Manager. Threat Type Vulnerability Overview VMWare published a security advisory, VMSA-2021-0004, that addresses two vulnerabilities in vRealize Operations, Cloud Foundation, and vRealize Suite Lifecycle Manager. The first vulnerability (CVE-2021-21975) is caused by a failure to properly validate user-provided input. An unauthenticated, remot

Summary Google has released an update to its Chrome web browser for Windows, Mac, and Linux that provides fixes for eight vulnerabilities. Of the six CVE numbered vulnerabilities noted in the advisory, Google has rated all of them as High. Threat Type Vulnerability Overview Google has released an update, version 89.0.4389.114, to its Chrome web browser for Windows, Mac, and Linux that provides fixes for eight vulnerabilities. Of the six CVE numbered vulnerabilities noted in the advisory, Google has rated al

都柏林大学三一学院的道格拉斯·莱思教授进行了一项学术研究，调查了现代iOS和Android设备发送回Appl

In our 2020 DDoS retrospective, we highlighted the twists and turns of a very, very active threat landscape. As a quick refresher, we mitigated some of the largest attacks ever seen (1.44 Tbps and 809 Mpps);

Summary Zimperium zLabs researchers discovered a new advanced android malware package posing as "System Update". The malware exfiltrates a wide range of data using methods to limit the amount of bandwidth used in order to avoid detection. The spyware mobile app is not found on the Google Play Store. Threat Type Malware, Infostealer, Spyware, RAT Overview Zimperium zLabs researchers discovered a new advanced android malware package posing as "System Update". The malware ex-filtrates a wide range of data usin

俄罗斯黑客可以访问属于前（访问的时候还不是“前”）国土安全部部长（DHS）的电子邮件帐户以及网络安全人员的电

目前部署 Hexo 的操作比较麻烦，先在本地执行 hexo clean && hexo d 生成博客静态文件并发布到 GitHub 上，然后通过 XShell 登录到服务器，切换到博客站点目录下 git pull 拉取最新的代码，最近网络

Check up on Your Virtual Safety: Tips for Telehealth Protection In a poll conducted by the Canadian Medical Association, nearly...

The post Check up on Your Virtual Safety: Tips for Telehealth Protection appeared first on McAfee Blog.

供应链攻击

谈谈扩展 Kubernetes 的几种策略，CNI、CSI、CRI、设备插件、调度框架和准入控制等

本题的核心考点是利用 HPACK 在同一个 connection 的不同的 stream 中使用相同的 Indexing Tables 这一特性导致的 Header 字段重用。

首发于 https://xz.aliyun.com/t/9276 概述 Fortify是一款商业级的源码扫描工具，其工作原理和codeql类似，甚至一些规则编写的语法都很相似，其工作示意图如下： 首先Fortify对源码进行分析（需要编译），然后提取出相关信息保存到某个位置，然后加载规则进行扫描，扫

文章首发于 https://xz.aliyun.com/t/9277 概述 和 codeql，Fortify 相比 Joern不需要编译源码即可进行扫描，适用场景和环境搭建方面更加简单。 环境搭建 首先安装 jdk ，然后从github下载压缩包解压即可 https://github.com/Shi

首发于 https://xz.aliyun.com/t/9275 概述 codeql 是一个静态源码扫描工具，支持 c, python, java 等语言，用户可以使用 ql 语言编写自定义规则识别软件中的漏洞，也可以使用ql自带的规则进行扫描。 环境搭建 codeql的工作方式是首先使用codeq

随机UA, JSP升级,返回包加密

Summary Palo Alto's Unit 42 revisits the phishing trends they observed over the past year, gaining deeper insight into the various COVID-related topics that attackers might try to exploit. Attackers continued to change their tactics to adapt to the latest pandemic trends. Threat Type Phishing Overview Palo Alto's Unit 42 revisits the phishing trends they observed over the past year, gaining deeper insight into the various COVID-related topics that attackers might try to exploit.Attackers continued to change

Summary Four new vulnerabilities for SolarWinds' Orion platform have been disclosed. One vulnerability is rated as Critical, two are rated as High, and one is rated as medium. Threat Type Vulnerability Overview SolarWinds released details on four new disclosed vulnerabilities. The first vulnerability, rated as critical, if successfully exploited could allow for remote code execution. This vulnerability requires an authenticated user in order to exploit this vulnerability. The second and third vulnerabilitie