Aggregator

How far away do sheds need to be located to significantly limit fire spread to homes? New research led by NIST has begun to provide important answers.

文末暗号

On May 31st, 2023 Progress issued a security notice to users of MOVEit Transfer regarding a vulnerability that allows for escalated privileges and potential unauthorized access to the environment. There is no CVE for tracking this vulnerability at this time.

On May 11, 2023, the MDPD and the NCST finished moving a portion of evidence retrieved from the Champlain Towers South building into a second warehouse.

简述

本文是insane难度的HTB absolute机器的域渗透部分，其中大量的Kerberos，ACL，KrbRelay，bloodhound，Shadow Credentials Attack，ldap enumeration，PTH，GROUPS权限修改，interactive session等域渗透只是细节是此box的特色，主要参考0xdf’s blog absolute walkthrough和HTB的absolute官方writeup paper记录这篇博客加深记忆和理解，及供后续做深入研究查阅，备忘。

内岗热招，欢迎来报

本文主要介绍了RTEMS系统的解密过程

文末暗号

文末暗号

文末暗号

If you are building ChatGPT plugins, LLM agents, tools or integrations this is a must read. This post explains how the first exploitable Cross Plugin Request Forgery was found in the wild and the fix which was applied. Indirect Prompt Injections Are Now A Reality With plugins and browsing support Indirect Prompt Injections are now a reality in the ChatGPT ecosystem. The real-world examples and demos provided by others and myself to raise awarness about this increasing problem have been mostly amusing and harmless, like making Bing Chat speak like a pirate, make ChatGPT add jokes at the end or having it do a Rickroll when reading YouTube transcripts.

文末暗号

将军赶路，不追小兔

1、收集数据 2、建立假设 3、工具分析 4、丰富威胁上下文 5、分析自动化

做安全的同学应该都有一个痛点（可能计算机技术相关的同学也有类似痛点）：最新的知识绝大多数是英文的，吸收很慢，国内的翻译或解读文档质量太低，这里的质量不是说深浅，而是对错，很多入门的小伙伴应该都有一个经历就是把错误的理解学了很久才发现是错的。

东软NetEye智能网联汽车信息安全解决方案已应用于国内外多家知名汽车厂商，实现了汽车信息安全真正的量产落地。