Aggregator

摘要本文分析了CVE-2024-31317这个Android用户态通杀漏洞的起因，并分享了笔者的利用研究和方法

回复口令[加油]：“水波不兴”，获取今日最新情报！ tips强烈推荐[啤酒]：https://tix.qq.com - 高阶版免费体验：查询额度权益 - 每日最新封禁IOC获取 - 专家IP鉴定分析权限

VPNRanks предупреждает: цифровое насилие выходит из-под контроля.

A vulnerability classified as critical has been found in IBM OpenPages with Watson 8.3/9.0. This affects an unknown part of the component API. The manipulation leads to authentication bypass using alternate channel. This vulnerability is uniquely identified as CVE-2024-35151. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

Familiar ransomware develops an appetite for passwords to third-party sites

A vulnerability was found in IBM Sterling Connect Direct Web Services 6.0/6.1/6.2/6.3. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cleartext transmission of sensitive information. This vulnerability is handled as CVE-2024-39746. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

沃尔玛在递交到 SEC 的文件中披露，它出售了所持的全部京东股份。沃尔玛和京东 2016 年 6 月展开全面合作，沃尔玛将其的中国网络销售业务出售给京东，作为回报获得了京东股权。后来沃尔玛提高了持股比例，截至 2024年 3 月底，包括间接持股在内，沃尔玛共持有约 2.9 亿股京东股票，是京东的大股东。在出售股份之后，沃尔玛表示会继续与京东合作。在中国经济减速的情况下，消费者的节约意识增强，它的山姆会员店凭借实惠的价格赢得了消费者的青睐。京东 APP 用户可直接在应用上购买山姆商品。

Компания выступила против методов ООН по борьбе с киберпреступностью.

本文中的代码是将ollvm的flatten以插件形式移植到了llvm18 new pass中, 代码会略有不同, 但逻辑是一样的。

The donation websites of the UK’s seven major political parties are missing critical security features to protect the accounts of donors, according to DataDome

《网络安全威胁2024年中报告》分析总结了目前各类主流网络威胁。

用AI升级安全，把握网安产业的重大技术机遇。

分享近期值得关注的IOC

只有同时做到「省心」与「省力」，才称得上是无感。

ESET claims new NGate Android malware relays NFC data to steal card details for ATM cash-out

Как хакеры подняли $700 000 благодаря неожиданной рекламной кампании в Instagram.

What is Continuous Attack Surface Penetration Testing or CASPT? Continuous Penetration Testing or Continuous Attack Surface Penetration Testing (CASPT) is an advanced security practice that involves the continuous, automated, and ongoing penetration testing services of an organization's digital assets to identify and mitigate security vulnerabilities. CASPT is designed for enterprises with an

What is Continuous Attack Surface Penetration Testing or CASPT?Continuous Penetration Testing or C