Aggregator

XSS扫描器成长记自动化获得微软漏洞赏金的经历.md根据公众号以前文章的思想，做了一款名为“xscan”的程

The new OWASP Top 10 for API Security release candidate is a fantastic step in an API-specific direction, emphasizing the distinct nature of API threats.

静态代码扫描结合GPT，本文分享了一种利用GPT技术结合静态代码扫描的自动化漏洞挖掘思路，让人工智能工具能够实际应用在生活、工作中。

How I teamed up with ChatGPT, an AI language model, to identify and analyze a critical security vulnerability in a JPEG2000 decoder.

Hacking8信息流收录了历届安全大会Blackhat、Defcon等PDF资料。这些资料都是英文的，如果

记得上一次去北京还是2016年，那一年参加乌云峰会，那一年北京天还没有这么蓝，那一年我还是一个人。整理资料发现 […]

GPT是基于神经网络的自然语言处理技术，通过大规模预训练，使模型从海量文本中学习语言模式，提高文本生成效率和质量。它为自然语言处理领域带来了巨大进展，为各种应用场景提供了可靠高效的文本生成技术。

A deep dive into a sustained attack by reseller bots aimed at snatching every available PlayStation 5 during the console's big launch at a large US retailer.

Take advantage of multicloud flexibility to reduce risk, match spend to your current needs, and increase the pace of innovation.

这是一篇AI生成的文章。

Why it's important to protect the interfaces used to manage your infrastructure, and some recommendations on how you might do this.

信息安全部岗位在招！快来看看~

SOAR，安全运营的必备之物！

预言机——黑暗森林中的神谕or神罚？

目前该攻击类型的主要受害者是tg中文用户，固然tg中的坏人含量相当高，但是对于像金融、贸易、区块链等这些带有跨境业务性质的甲方安全来说，个人认为这是一个不容忽视的风险点。

GreyNoise researchers explain the process of gaining a foothold in firmware or a physical device for vulnerability research and achieving a debuggable interface. While existing Proof-Of-Concept code for (yet another) D-Link vulnerability CVE-2022-1262 is utilized within this document, as well as strong hints at suspect areas of code, don’t expect to find any new ready-to-fire exploits buried in the contents below.

The rise of publicly-accessible Al models like ChatGPT has produced some interesting attempts to create malware. How seriously should defenders take them?

The post BlackMamba ChatGPT ポリモーフィック マルウェア｜スケアウェアか、それともサイバーセキュリティへの警鐘か? appeared first on SentinelOne JP.