Aggregator

maven tips

不安全
1 year ago
文章介绍了如何使用 Maven 下载指定包到特定路径以及查看插件的 Goals。通过 `mvn dependency:get` 命令下载包并指定本地仓库路径；使用 `mvn help:describe` 查看插件的详细信息及其 Goals。例如，`maven-dependency-plugin` 和 `spring-boot-maven-plugin` 的 Goals 包括构建镜像、生成构建信息、运行应用等操作。

Atomic macOS Info-Stealer Updated with New Backdoor for Persistent Access

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
1 year ago

The Atomic macOS Stealer (AMOS), a notorious piece of info-stealing malware targeting Apple users, has undergone a significant update, introducing an embedded backdoor for the first time. This development, reported by Moonlock a cybersecurity division of MacPaw marks a critical escalation in the malware’s capabilities, allowing attackers to maintain persistent access to compromised macOS systems. […]

The post Atomic macOS Info-Stealer Updated with New Backdoor for Persistent Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Aman Mishra

BaitTrap: Over 17,000 Fake News Websites Caught Fueling Investment Fraud Globally

The Hackers News
1 year ago
A newly released report by cybersecurity firm CTM360 reveals a large-scale scam operation utilizing fake news websites—known as Baiting News Sites (BNS)—to deceive users into online investment fraud across 50 countries. These BNS pages are made to look like real news outlets: CNN, BBC, CNBC, or regional media. They publish fake stories that feature public figures, central banks, or financial
The Hacker News

BaitTrap: Over 17,000 Fake News Websites Caught Fueling Investment Fraud Globally

不安全
1 year ago
网络安全公司CTM360报告称，诈骗团伙利用虚假新闻网站（BNS）模仿真实媒体机构发布假新闻，吸引用户点击并引导至欺诈投资平台。这些网站通过谷歌、Meta等平台投放广告，并使用诱骗性标题和官方元素增加可信度。受害者被诱导注册并支付小额押金后，会看到虚假收益模拟界面。骗子还收集敏感数据用于进一步诈骗。CTM360已追踪超1.7万个此类网站，并提供相关支持服务以应对这一威胁。

CVE-2023-48788

CVE Trends
1 year ago
Currently trending CVE - Hype Score: 11 - A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, FortiClientEMS 7.0.1 through 7.0.10 allows attacker to execute unauthorized code or commands via specially crafted packets.

Managed ad