Aggregator

创新沙盒比赛十强名单公布后，各家报道都纷纷加以分析，指出从榜单构成数目来看，应用安全和SaaS安全占据绝大多数。虽然赛事组织者不满固步自封，努力创新求变，套路明显发生改变也是正常的，但市场趋势真的是应用安全要占据半壁江山吗？

Financial services are a well-known target of attack, based on a range of motivations. F5 Labs' Preston Hogue writes for SecurityWeek, discussing financial institutions' unique security environment , and how the need to understand the entire organism is critical.

ingress-nginx auth-type basic annotation vulnerability

Guardicore’s Threat Intelligence Firewall blocks connections to malicious IPs, limiting security attack surface before reaching critical assets.

“后反序列化漏洞”指的是在反序列化操作之后可能出现的攻击面。反序列化漏洞是Java中最经典的一种，所以大家可能 […]

Earlier this year, Akamai's Enterprise team tackled the problem of DGA detection in the wild by using Neural Networks, essentially creating a state-of-the-art solution for near online detection of DGA communication....

一个非常值得一刷的靶场

汇聚共克时艰的网安力量，助力打赢疫情防控阻击战

汇聚共克时艰的网安力量，助力打赢疫情防控阻击战

汇聚共克时艰的网安力量，助力打赢疫情防控阻击战

汇聚共克时艰的网安力量，助力打赢疫情防控阻击战

汇聚共克时艰的网安力量，助力打赢疫情防控阻击战

汇聚共克时艰的网安力量，助力打赢疫情防控阻击战

汇聚共克时艰的网安力量，助力打赢疫情防控阻击战

本文将分享一个RocketMQ的漏洞从发现到自动化利用的实践过程，最后也将安利一个开源的神器Arthas(阿尔萨斯)。本文技术含金量不高，但也希望读者能从中有所收获。

本文将分享一个RocketMQ的漏洞从发现到自动化利用的实践过程，最后也将安利一个开源的神器Arthas(阿尔萨斯)。本文技术含金量不高，但也希望读者能从中有所收获。

本文将分享一个RocketMQ的漏洞从发现到自动化利用的实践过程，最后也将安利一个开源的神器Arthas(阿尔萨斯)。本文技术含金量不高，但也希望读者能从中有所收获。

自从聊天软件消息撤回功能问世后，对于撤回的消息，我们对它一直有种强烈的好奇感。“Ta刚撤回了什么？是骂我的话？还是说喜欢我？还是把发给其他人的消息误发给了我？好气呀，都看不到了...”这是我们看到消息被撤回后的内心独白。但是今天，看完了本篇文章你就可以说： 我们看一下效果图，撤回的消息被我们看到了，

Pass the Cookie made it into the latest 2600 magazine! Very excited about this!

I was just walking around Capitol Hill and stopped by Ada’s Technical Books on 15th Avenue - a great coffee shop with lots of technical books. Right after walking in to grab a cup of tea, I saw the latest Hacker Quarterly. A few months back I submitted an article about “Pass the Cookie”, so I had to check, and the article got indeed published!