Aggregator

Shifting to DevSecOps Is as Much About Culture as Technology and Methodology

6 years 7 months ago

F5 Labs' Preston Hogue writes for Security Week, discussing how the shift to DevSecOps brings a massive shift in the application landscape with real cultural impact on security teams.

震惊! 破译了 “真有"韭菜"排队...”的一个常用密码

全闲话

6 years 7 months ago

本期，公开本人耗尽心力才破译的一个密码含义...

RCTF2019 baby_crypto & baby_aes

rmb122's notebook

6 years 7 months ago

密码学只做出来两题 baby, 暗示我还是学密码学的 baby (逃

Lyrebird - Hack the hacker (and take a picture)

Embrace The Red

6 years 7 months ago

The idea for Lyrebird came from observing that sometimes when someone forgets lock their workstation, someone else might mess with their computer. Since I wanted to learn more on how to program a webcam and take pictures - I figured why not create a little tool that takes a screenshot and uses the webcam to take pictures of anyone that interacts with the computer while I’m gone.

The way this work is simple, start Lyrebird. It will take a screenshot of the current desktop and then enter its observation mode.

4 Areas Where Infosec Facts and Fiction Clash: Mind the Gap Pt. 3

F5 Labs

6 years 7 months ago

There are gaps in security programs between what we think is going on, and what’s really going on. In this final part in our trilogy, we examine the possible causes for this—and solutions to close these gaps.

4 Areas Where Infosec Facts and Fiction Clash: Mind the Gap Pt. 3

F5 Labs

6 years 7 months ago

远程桌面远程代码执行漏洞（CVE-2019-0708）Poc - PaperPen

博客园_PaperPen's Blog

6 years 7 months ago

本文介绍了如何检测目标主机是否含有CVE-2019-0708漏洞

PaperPen

16Shop: Commercial Phishing Kit Has A Hidden Backdoor

The Akamai Blog

6 years 7 months ago

Additional research by Or Katz When it comes to targeting Apple users and their personal and financial data, 16Shop has emerged as a go to kit for those who can afford it. While 16Shop is sold to criminals looking to...

Amiram Cohen

Preventing the Top Data Center Breaches

The Akamai Blog

6 years 7 months ago

Data center breaches can seem impossible to avoid, but good data center security can seriously reduce your risk. We look at famous breaches Equifax, Yahoo, & more.

Dave Klein

Application Protection Report 2019, Episode 3: Web Injection Attacks Get Meaner

F5 Labs

6 years 7 months ago

Web injection represents an even greater risk than it did previously, thanks to the growth of third-party content and increasingly complex attack surfaces.

Application Protection Report 2019, Episode 3: Web Injection Attacks Get Meaner

F5 Labs

6 years 7 months ago

Web injection represents an even greater risk than it did previously, thanks to the growth of third-party content and increasingly complex attack surfaces.

嵌入式设备的漏洞利用框架-RouterSploit初使用（路由器）

Poacher's Blog

6 years 7 months ago

### Github RouterSploit Git地址：https://github.com/threat9/routersploit ### 介绍 RouterSploit是一个开源的嵌...

Poacher

嵌入式设备的漏洞利用框架-RouterSploit初使用（路由器）

Poacher's Blog

6 years 7 months ago

### Github RouterSploit Git地址：https://github.com/threat9/routersploit ### 介绍 RouterSploit是一个开源的嵌...

Poacher

浅谈威胁诱捕（威胁感知）技术在网络安全保障与蓝队防御过程中的重要应用

灯塔实验室

6 years 7 months ago

目前，针对国家重大事件、活动的网络安全保障屡见不鲜，同时也是保障各应用、系统、网络、企业、行业在特殊时期安全、…

Z-0ne

Bots Tampering with TLS to Avoid Detection

The Akamai Blog

6 years 7 months ago

Researchers at Akamai observed attackers using a novel approach for evading detection. This new technique - which we call Cipher Stunting - has become a growing threat, with its roots tracing back to early-2018. By using advanced methods, attackers are...

Security Intelligence Response Team

Containers vs Virtual Machines – Your Cheat Sheet to Know the Differences

The Akamai Blog

6 years 7 months ago

Containers vs virtual machines is an ongoing debate in many IT shops around the world. Learn what makes each unique, their common use cases, and how to keep both secure.

Igor Livshitz

记一次渗透实战 - 淚笑

淚笑

6 years 7 months ago

信息收集用dirsearch扫了一波目录没有发现什么东西直接用主站域名解析的ip访问发现主站是挂有cdn的 subDomainsBrute 扫描子域名其中一个子域没挂CDN，由此找到网站的真实ip 得到真实ip后nmap扫描发现8099端口有个未知应用访问发现是个WEB服务，一个登陆界面漏

淚笑

Vulnerabilities, Exploits, and Malware Driving Attack Campaigns in April 2019

F5 Labs

6 years 7 months ago

In April, threat actors focused on targeting vulnerabilities that had the highest impact: this month it was a recently released deserialization vulnerability in Oracle WebLogic Server.

Vulnerabilities, Exploits, and Malware Driving Attack Campaigns in April 2019

F5 Labs

6 years 7 months ago

In April, threat actors focused on targeting vulnerabilities that had the highest impact: this month it was a recently released deserialization vulnerability in Oracle WebLogic Server.

May 2019 Security Update Release

Update Tuesday on Microsoft Security Response Center

6 years 7 months ago

Today, we released security updates to provide additional protections against malicious attackers. As a best practice, we encourage customers to turn on automatic updates. More information about this month’s security updates can be found on the Security Update Guide.

Aggregator

Managed ad