Aggregator

理论上将适合任何架构，任何系统的linux网络拓扑

Preparing for open enrollment is a key part of running efficient healthcare organizations, but it's difficult to know where to start. Learn which steps to take.

实现简易版用户态TCP

Red Team 及相关研发，北上广深成

ie CVE-2020-1380是2020年抓到的一个在野利用的0 day，且此漏洞目前在野外利用不少。

JavaScript is everywhere, and when malicious can be hugely detrimental. In this blog, learn about the types of malicious JavaScript and how Akamai's SWG product helps keep you more secure from it.

Zyxel USG FLEX handler 远程命令执行漏洞 CVE-2022-30525

Summary ***UPDATED, May 12, 2022*** The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an advisory regarding the critical vulnerability. ***UPDATED, May 9, 2022*** New Proofs-of-Concept have been released by two leading offensive attack teams as reported by The Daily Swig. ***Original Summary*** A critical vulnerability in BIG-IP can allow for Remote Code Execution (RCE) that could allow an attacker to take control over an affected system. The Hacker News and F5 have both reported

The joint security solution from Akamai Guardicore Segmentation and Armis supports PCI compliance requirements to protect consumer data across entire networks.

Andrew A explains what's new in a significant update to the NCSC's flagship cloud guidance.

Elkeid 企业版溯源能力介绍

Covering the ‘Product development', 'Design and functionality' and ‘Though-life’ aspects of product assurance.

Spring4Shell (CVE-2022-22965) is a remote code execution vulnerability in Spring Framework named after the critical Log4Shell bug disclosed in 2021.

概述 本文聚焦于云上重点资产的扫描攻击、云服务器总体攻击情况分析、热门漏洞及恶意程序的攻击威胁。

• 360高级

秘籍在手，数据不愁

Patching and bug hunting is a cyclical process. See part two of our Patch Tuesday RPC Runtime research, updated for May 2022.

Assessing the cyber security threat to UK organisations using Enterprise Connected Devices.

Vcenter人送外号小域控，Vcenter拿下之后，不单单只是获取一台服务器的权限【因为Vcenter的管理端中必然会有其他的虚拟机存在】，拿下Vcenter的价值不亚于域控的价值。

全球首个自适应支持Windows家庭版的远程桌面软件

这是 Exchange 反序列化漏洞分析系列的第一篇。这篇文章先来分析一下 CVE-2021-42321，为下一篇 CVE-2022-23277 做铺垫。