Aggregator

结内存型 Webshell 的特征和原理, 构建内存型 Webshell 威胁模型, 定义了高对抗内存型 Webshell, 并提出一种基于RASP(运行时应用程序自我保护)的动静态结合的高对抗内存型 Webshell 检测技术。

How a recent data breach investigation led to one CISO facing criminal charges, and what your CISO must strive for to avoid the same fate.

Your fortnightly rundown of AppSec vulnerabilities, new hacking techniques, and other cybersecurity news

Perhaps you’ve been hearing about data analytics, which is being promoted as a way for even small businesses to analyze communications with customers, enhance customer experience, save money, and ultimately improve your brand. However, data analytics can have big privacy implications. You may think of managing privacy risk as protecting sensitive customer information, such as credit cards. As the Venn diagram to the right demonstrates, data security is certainly one aspect of privacy risk, but privacy risks can also arise by means unrelated to cybersecurity incidents. People can experience

Security vulnerability was one of Meta’s top bugs of 2022

0x00 前言 ​ 因为工作中遇到僵木蠕比较多，所以打算学习一下恶意代码、样本分析。最近在看《恶意代码分析实战 […]

Several applications were vulnerable to brute-force attacks; hundreds more could be at risk

Learn the differences between synthetic tests and real user monitoring, and discover 11 web performance metrics beyond the Core Web Vitals ? and how to use them.

More than 61,000 vulnerabilities patched and counting

Curating raw data into original insights, WatchTower's 2022 Review reflects on the previous year's top threats and trends.

The post WatchTower 脅威インテリジェンスサービス ｜2022 年のサイバーセキュリティのトレンドと重要ポイント appeared first on SentinelOne JP.

Recently I got the feedback to create more tutorials and videos, and I thought SSH Agent Hijacking on Linux and macOS (which I wrote about before here) would make a good one. The video tutorial is here. If you like this kind of content, then comment or like the video on YouTube and I’ll create more. Hope it’s useful to get a good basic understanding of this TTP, and help build detections for it.

Summary VMware has released a fix for two critical vulnerabilities in VMware Aria Operations for Logs. The vulnerabilities both have a CVSS score of 9.8. Threat Type Vulnerability Overview On Tuesday, January 25, VMware released updates/upgrades for two critical vulnerabilities in its vRealize Log Insight (now VMware Aria Operations for Logs) software that could allow attackers to gain remote access via non-upgraded appliances. Both CVE-2022-31704 and CVE-2022-31706 have CVSS scores of 9.8 indicating a high

Pre- and post-auth path to pwnage

Password vault vendor accused of making a hash of encryption

Akamai researchers have analyzed a critical vulnerability in Microsoft's CryptoAPI that would allow an attacker to masquerade as a legitimate entity.

旅行中的碎片记忆

旅行中的碎片记忆

旅行中的碎片记忆

旅行中的碎片记忆