Aggregator

欢迎订阅《中国信息安全》杂志！

NIST выпускает первые в мире стандарты постквантового шифрования.

NetSPI discovered that Microsoft Outlook is vulnerable to authenticated remote code execution (CVE-2024-21378) due to improper validation of synchronized form objects.  By manipulating a configuration file, attackers can automatically register and instantiate a custom form, specifying a malicious executable as the form server, which bypasses Outlook‘s faulty allow-listing mechanism, enabling remote code execution on the […]

The post 0-Click Outlook RCE Vulnerability Triggered When Email is Clicked – Technical Analysis appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Российские видеосервисы, такие как «VK Видео», начали активно набирать аудиторию за счет сбоя.

聚焦证券期货业软件供应链安全管理

新闻速览 •日本拟升级重组国家网络安全战略总部，由首相担任总部长 •英国将建立国家级网络欺骗证据库 •一女子因 […]

Adobe has released patches for 72 security vulnerabilities across its popular software products. This effort, spearheaded by Adobe’s Product Security Incident Response Team (PSIRT), underscores its commitment to safeguarding its users against potential cyber threats. Comprehensive Security Measures Adobe’s PSIRT is crucial to the company’s vulnerability disclosure program. It provides a single point of contact […]

The post Adobe Patches 72 Security Vulnerabilities Across Multiple Products appeared first on Cyber Security News.

Huawei готовит неприятный «сюрприз» американскому конкуренту.

The UK’s National Cyber Security Centre wants to test the effectiveness of cyber-deception tactics

POC 无了！

近期国外安全厂商披露了一起巴基斯坦新威胁组织针对南亚某国防机构的移动端攻击活动，基于报告中提到的信息，经过360安全大模型进行关联后，我们挖掘到了更多相关样本

7月15-16日， 2024年InForSec网络空间安全大学生夏令营“导师面对面”专题学术活动在中国科学技术大学高新校区成功召开。南开大学教授，国家优青获得者汪定发表题为《定向口令猜测》的报告。

从「走一万步」到「跑马拉松」，这既是过去十年人们运动习惯的改变，也是 Keep 发展道路的象征隐喻。

Today’s malware is complex, and often comes with a wide assortment of evasion methods.   Many families got so good at evading automated sandboxes, that traditional methods often fall short in detecting them. This is where interactive malware sandboxes like ANY.RUN come into play — it offers a powerful tool for cybersecurity professionals to engage directly […]

The post What is an Interactive Malware Sandbox? appeared first on ANY.RUN's Cybersecurity Blog.

Специалисты раскрывают основные векторы атак и ключевые группы вымогателей.

Хакеры развязали беспощадную войну против Мадуро.