PWA phishing on Android and iOS – Week in security with Tony Anscombe
Phishing using PWAs? ESET Research's latest discovery might just ruin some users' assumptions about their preferred platform's security
Aggregator
微软工程师薪水泄露
8 months ago
根据一份泄露的电子表格，微软软件工程师的平均薪酬从 148,436 美元到 1,230,000 美元不等，对应职位级别从 Level 59 到 Level 69。薪酬数据是由数百名美国微软员工自愿分享的，包含了工资、绩效加薪、晋升和奖金等信息。薪酬最高的工程师属于新成立的 Microsoft AI 部门，平均薪酬 377,611 美元。Cloud and AI 部门薪酬 255,126 美元，Experiences and Devices 部门 242,723 美元，Azure 部门 251,464 美元。
The Trouble with Procurement Departments, Resellers and Stripe
8 months ago
It should be so simple: you're a customer who wants to purchase something so you whip out the credit card and buy it. I must have done this thousands of times, and it's easy! I've bought stuff with plastic credit cards, stuff with Apple
Troy Hunt
FreeBuf 周报 | 网易云音乐崩上热搜；丰田再发数据泄露事件
8 months ago
总结推荐本周的热点资讯、安全事件、一周好文和省心工具，保证大家不错过本周的每一个重点！
抽3人送《黑神话：悟空》豪华版！
8 months ago
抽《黑神话：悟空》，速来！
抽3人送《黑神话：悟空》豪华版！
8 months ago
主站 分类 漏洞 工具 极客
Загадочная смола возрастом 50000 лет раскрывает тайны древних мореплавателей
8 months ago
Наши предки покорили Тихий океан на тысячи лет раньше, чем мы думали.
Шантаж и обвинения: белые хакеры борются с Kraken за $3 млн
8 months ago
Одна уязвимость поделила криптосообщество на две стороны спора.
New malware Cthulhu Stealer targets Apple macOS users
8 months ago
Cato Security found a new info stealer, called Cthulhu Stealer, that targets Apple macOS and steals a wide range of information. Cado Security researchers have discovered a malware-as-a-service (MaaS) targeting macOS users dubbed Cthulhu Stealer. Cthulhu Stealer targets macOS users via an Apple disk image (DMG) that disguises itself as legitimate software. The researchers spotted […]
Pierluigi Paganini
New malware Cthulhu Stealer targets Apple macOS users
8 months ago
New malware Cthulhu Stealer targets Apple macOS usersCato Security found a new info stealer, c
【火绒安全周报】男子伪造死亡证明逃避子女抚养费/丰田再次出现数据泄露
8 months ago
CVE-2024-8112 | thinkgem JeeSite 5.3 Cookie /js/a/login skinName cross site scripting (IAKGTV)
8 months ago
A vulnerability was found in thinkgem JeeSite 5.3. It has been rated as problematic. This issue affects some unknown processing of the file /js/a/login of the component Cookie Handler. The manipulation of the argument skinName leads to cross site scripting.
The identification of this vulnerability is CVE-2024-8112. The attack may be initiated remotely. Furthermore, there is an exploit available.
vuldb.com
CVE-2024-43105 | Mattermost Plugin Channel Export up to 1.0.0 /export resource consumption
8 months ago
A vulnerability was found in Mattermost Plugin Channel Export up to 1.0.0. It has been declared as problematic. This vulnerability affects unknown code of the file /export. The manipulation leads to resource consumption.
This vulnerability was named CVE-2024-43105. The attack can be initiated remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
“蓝屏事件”阴魂不散，微软安全更新导致Linux系统无法启动
8 months ago
最近，众多Linux用户报告称他们的设备在尝试启动时，收到了一条神秘的错误消息：“系统出了严重问题。
GitHub Actions 工件在热门项目中被发现泄露身份验证令牌
8 months ago
近期，包括谷歌、微软、AWS 和 Red Hat 在内的多个知名开源项目被发现在 CI/CD 工作流中通过 GitHub Actions 工件泄露 GitHub 身份验证令牌。
Litespeed曝高速缓存漏洞，威胁数百万WordPress网站
8 months ago
近日，有研究人员在插件的用户模拟功能中发现了未经身份验证的权限升级漏洞，该漏洞是由 LiteSpeed Cache 6.3.0.1 及以下版本中的弱散列检查引起的。
美国知名军工芯片厂商因网络攻击生产能力受损
8 months ago
美国重要国防承包商被黑，最坏的情况可能是什么呢？
五眼+日韩等多国网络安全机构发布新的事件日志记录和威胁检测最佳实践指南
8 months ago
当地时间8月21日，以澳大利亚、美国为首的多家全球网络安全机构发布了新的日志记录标准指南，以应对日益严重的网络威胁。
大模型安全风险、防护治理与法治建设
8 months ago
随着人工智能技术的迅猛发展，大模型在人工智能领域取得了显著的技术进步。
The Risks of Running an End Of Life OS – And How To Manage It
8 months ago
EOL operating systems no longer receive critical security updates, leaving them highly vulnerable to evolving cybersecurity threats. End-of-life OSs often struggle to run modern software and hardware, resulting in compatibility issues, reduced performance, and lower productivity. Organizations using EOL systems face increased legal and financial risks due to non-compliance with regulations and the high costs […]
The post The Risks of Running an End Of Life OS – And How To Manage It appeared first on TuxCare.
The post The Risks of Running an End Of Life OS – And How To Manage It appeared first on Security Boulevard.
Rohan Timalsina