Aggregator

最近看到一个查找子域名的平台https://rapiddns.io/ 数据来源于opendata.rap

探索性分析1999-2020年CVE数据，得到几点推论。

激荡三十年

激荡三十年

激荡三十年

激荡三十年

激荡三十年

TTPS是Tactics（战术）, Techniques（技术）, Procedures（程序或者过程、步骤）的缩写。TTP最初用于反恐，根据世界范围内所有恐怖分子或组织实施袭击分析和研究，恐怖分子的攻击可以用TTP的方式描述。

文章第二次删了，原因在里面。

文章第二次删了，原因在里面。

文章第二次删了，原因在里面。

文章第二次删了，原因在里面。

文章第二次删了，原因在里面。

文章第二次删了，原因在里面。

The results of phishing campaigns are often not comparable with each other over time. Various security vendors and red teams use different tooling and techniques - which is totally fine.

However, I recommend requiring tracking a minimum set of metrics to be able to compare results over time.

Funny side facts: At times employees are messing with the red team, entering invalid creds for CISO or CEO and things along those lines. Some employees (often engineers) are curious and open the link in isolated VMs to debug and explore the phishing site.

黑客李泉倾情打造

黑客李泉倾情打造

黑客李泉倾情打造

Telecom touches everything that everyone does, and the insertion points are nearly limitless. F5 Labs' Preston Hogue writes for SecurityWeek, discussing the specific prevention measures telecom providers can take to protect themselves and their customers.

The three most effective steps you can take in under an hour to guard against identity theft.