Aggregator

New guidance to help organisations manage rogue devices and services within the enterprise.

1. 通告信息近日，安识科技A-Team团队监测到VMware Tanzu Application Serv

Learn how to combine identity and access control best practices with advanced detection and response capabilities to protect hybrid cloud environments.

The post 今や攻撃のターゲットはクラウドへ | ID とアクセス制御でハイブリッド環境の防御を強化する方法 appeared first on SentinelOne JP.

在上一篇《刀郎的格局不需要洗》的文章里，由于当时太着急忘记附上ChatGPT的截图了，这里补充一下（使用GP

架构视角看SOC

GreyNoise researchers have identified active exploitation for a remote code execution (RCE) vulnerability in Citrix ShareFile (CVE-2023-24489)

深蓝攻防实验室攻防专家/安全攻防研究员长期招聘

欢迎各位大佬入群交流，需要各种资料也可入群领取。二维码失效加好友进群！！！！！！！！！！！wx：kalith

恭喜《Web安全攻防：渗透测试实战指南》抽奖活动获奖的四位同学鼓掌！！没有中奖的小伙伴也不要伤心哦！！后期我

单文件分离免杀的另一个实现方式，提升静态查杀的对抗效果。相比传统文件分离马可实现单文件落地，且没有文件操作相关API的调用，消除可疑特征。针对仅有的可疑特征——内存分配相关的API调用，可使用动态加载+syscall的形式轻松隐藏

ChatGPT is vulnerable to data exfiltration via image markdown injections. This. is. pretty well known. As more features are added to ChatGPT the exfiltration angle becomes more likely to be abused. Recently OpenAI added Custom Instructions, which allow to have ChatGPT always automatically append instructions to every message exchange. An adversary can abuse this feature to install a data exfiltration backdoor that depends on, and only works because of the image markdown injection vulnerability.

在Hessian相关的反序列化场景下经常会看到这个链子，本文列举分析一些常见的利用，并且融入到WebShll场景。

A recent red team DNS exfiltration alert confirms that Akamai Secure Internet Access is an effective security tool for this type of detection and analysis.

Key findings and full report from the 6th year of the Active Cyber Defence (ACD) programme.

罗刹海市罗刹国向东两万六千里 （这个是聊斋反过来写的，聊斋里说距离中土大唐西边两万六千里有个大罗刹国，这里

一年一度的大型攻防演练季又到了，看看攻击方和防守方的战场都在哪？

SSH（Secure Shell）协议是一种用于远程登录和安全网络传输的协议，默认端口是22