[每日信息流] 2024-02-14

[BruceFeIix]

每日安全资讯（2024-02-14）

• HackerOne Hacker Activity
  • [ ] CVE-2018-6389 exploitation - using scripts loader
• Verne in GitHub
  • [ ] 我购买了一张免月租的英国手机卡 GiffGaff
• 90Sec - 最新话题
  • [ ] Looking for hackers to buy Webshell hackers please contact me telegram :sky10086111
• Trustwave Blog
  • [ ] CRN Recognizes Trustwave as 2024 Top 100 Security MSP
• InfoSec Write-ups - Medium
  • [ ] How to navigate MITRE ATT&CK®
• Security Boulevard
  • [ ] Declining Ransomware Payments: Shift in Hacker Tactics?
  • [ ] Improving Software Quality with the OWASP BOM Maturity Model
  • [ ] Qmulos Launches Q-Compliance Core for Businesses in Need of a Modern Compliance Approach
  • [ ] USENIX Security ’23 – Chenghong Wang, David Pujol, Kartik Nayak, Ashwin Machanavajjhal – Private Proof-of-Stake Blockchains using Differentially-Private Stake Distortion
  • [ ] Exploiting Kubernetes through Operator Injection
  • [ ] News alert: Kiteworks named as a founding member of NIST’s new AI safety consortium – ‘AISIC’
  • [ ] ‘Incompetent’ FCC Fiddles With Data Breach Rules
  • [ ] Comic Agilé – Mikkel Noe-Nygaard, Luxshan Ratnaravi – #278 – The Non-Senior Consultant
  • [ ] Reshaping Trust and Security for the Realities of 2024
  • [ ] Use of ‘Hunter-Killer’ Malware on the Rise, Study Finds
• Recent Commits to cve:main
  • [ ] Update Tue Feb 13 18:11:02 UTC 2024
  • [ ] Update Tue Feb 13 10:16:29 UTC 2024
  • [ ] Update Tue Feb 13 02:03:54 UTC 2024
• Tenable Blog
  • [ ] Microsoft’s February 2024 Patch Tuesday Addresses 73 CVEs (CVE-2024-21351, CVE-2024-21412)
  • [ ] How a Serverless Architecture Can Help You Secure Cloud-Native Applications
• Sploitus.com Exploits RSS Feed
  • [ ] Online Nurse Hiring System 1.0 - Time-Based SQL Injection Vulnerability exploit
  • [ ] VIMESA VHF/FM Transmitter Blue Plus 9.7.1 (doreboot) - Remote Denial Of Service exploit
  • [ ] ManageEngine ADManager Plus Build < 7183 - Recovery Password Disclosure exploit
  • [ ] VIMESA VHF/FM Transmitter Blue Plus 9.7.1 (doreboot) - Denial Of Service Exploit exploit
  • [ ] Splunk 9.0.4 - Information Disclosure Vulnerability exploit
  • [ ] Lost and Found Information System v1.0 - ( IDOR ) leads to Account Take over Exploit exploit
  • [ ] ManageEngine ADManager Plus Build < 7183 - Recovery Password Disclosure Exploit exploit
  • [ ] Lost and Found Information System v1.0 - ( IDOR ) leads to Account Take over exploit
  • [ ] ManageEngine ADManager Plus Recovery Password Disclosure exploit
  • [ ] XoopsCore25 2.5.11 Cross Site Scripting exploit
  • [ ] Splunk 9.0.4 - Information Disclosure exploit
  • [ ] Splunk 9.0.4 Information Disclosure exploit
  • [ ] Base64 Command Encoder exploit
• Files ≈ Packet Storm
  • [ ] Ubuntu Security Notice USN-6633-1
  • [ ] Ubuntu Security Notice USN-6632-1
  • [ ] Falco 0.37.1
  • [ ] XoopsCore25 2.5.11 Cross Site Scripting
  • [ ] Red Hat Security Advisory 2024-0797-03
  • [ ] Red Hat Security Advisory 2024-0796-03
  • [ ] Red Hat Security Advisory 2024-0793-03
  • [ ] Red Hat Security Advisory 2024-0792-03
  • [ ] Red Hat Security Advisory 2024-0791-03
  • [ ] Red Hat Security Advisory 2024-0790-03
  • [ ] Red Hat Security Advisory 2024-0789-03
  • [ ] Red Hat Security Advisory 2024-0786-03
  • [ ] Red Hat Security Advisory 2024-0785-03
  • [ ] Red Hat Security Advisory 2024-0778-03
  • [ ] Red Hat Security Advisory 2024-0777-03
  • [ ] Red Hat Security Advisory 2024-0776-03
  • [ ] Red Hat Security Advisory 2024-0775-03
  • [ ] Red Hat Security Advisory 2024-0774-03
  • [ ] ManageEngine ADManager Plus Recovery Password Disclosure
  • [ ] Splunk 9.0.4 Information Disclosure
• Vulnerabilities and Threat Research – Qualys Security Blog
  • [ ] Microsoft Patch Tuesday, February 2024 Security Update Review
• Sucuri Blog
  • [ ] What is DDoSing
• Chromium Blog
  • [ ] Optimizing Safe Browsing checks in Chrome
• Doonsec's feed
  • [ ] 大年初五迎财神，亚信安全祝大家龙行大运，财源滚滚
  • [ ] 年初五 │ 福龙生财
  • [ ] 身份欺诈的里程碑报告
  • [ ] 【免费资源】《一个广告人的自白》及读后感——樊登读书推荐书籍
  • [ ] 【LSP专享】大艺术嘉助眠视频1V
  • [ ] 2024年扫地机器人选购攻略|各大旗舰款扫地机实测对比分析|自费购买实拍实测！看完这篇不踩坑
  • [ ] Sqlmap tamper解读及使用方法
  • [ ] 2023全球网络安全领域十大并购案例
  • [ ] 初五 | 财神到
  • [ ] 月薪超6w？数据人新出路！真心建议大家冲一冲行业新兴领域，工资高前景好
  • [ ] 通过汉字反查双拼
  • [ ] 分享图片
  • [ ] 免杀专题基础(1)
  • [ ] 重大网络攻击回顾：2024 年 1 月
  • [ ] 2024央视春晚刘谦魔术模拟破解 (Python实现)
  • [ ] 用友时空KSOA-TaskRequestServlet-SQL注入
  • [ ] 实战|记录对某网站漏洞挖掘
  • [ ] 秦安：我们过年，但世界发生了几件不得不关心的事情，与中国相关
  • [ ] 2024年，AI元年，送大家一份新年礼物！！！
  • [ ] 成功破解：韩国研究人员发布Rhysida勒索软件解密工具
  • [ ] 2023泰晤士世界大学声誉排名发布
  • [ ] 企业常见的欺诈威胁及防御措施
  • [ ] 揭秘美国中央情报局的精神控制计划内幕
  • [ ] 情报学院知识分享社群春节持续更新中！
  • [ ] 攻防|记一次省护红队的经历
  • [ ] 谷歌浏览器零日PoC代码CVE-2022-4262发布
  • [ ] 天府杯 2023”Chrome WebAudio 错误条目中的释放后使用漏洞 （CVE-2023-5996 [1497859]）
  • [ ] Python写获取本机公网ip地址工具
  • [ ] 以太网接口
  • [ ] 汽车整车及零部件试验项目大全
  • [ ] 内核驱动高级班：独创“算法+内核+安全”三位一体的教学模式
  • [ ] CVE-2023-38902的详细研究
  • [ ] 一些可能有用的模型图和结构图
  • [ ] 2023年世界前沿科技发展态势总结及趋势展望——生物领域
  • [ ] 最新免杀34个查杀引擎的Webshell
  • [ ] 某日志管理系统审计
  • [ ] 删除“其它程序正在使用”的文件 方法
  • [ ] 国内开发者的网络超时日常
  • [ ] 三仙归洞
  • [ ] 所有单身的朋友们，幸亏你们没有对象
  • [ ] 热烈庆祝 BTC 破5W$+，币圈冲呀！
  • [ ] “5”止境 | 国控生物：工业互联网标识助力医药行业实现冷链医药追溯
  • [ ] 人工智能如何彻底改变身份欺诈
  • [ ] 快看！比KaliLinux更炫酷的鹦鹉OS系统！！
  • [ ] RDMA 协议中的王者：RoCE v2网络，低延迟、高吞吐量！
  • [ ] CVE-2023-4450
  • [ ] 【2024春节】解题领红包活动排行榜（初四 2/13）
  • [ ] 龙火添福迎灶神，三餐四季福泽厚
  • [ ] 海康威视综合安防管理平台任意文件读取漏洞
  • [ ] 有没有可能，利用过年的时间它们干了点啥
  • [ ] 记一次逻辑漏洞挖掘
  • [ ] 漏洞挖掘 | 编辑器漏洞之kindeditor
  • [ ] 到哪里都是保卫一方平安
  • [ ] 智能网联汽车信息安全技术&市场报告
  • [ ] 2024年3月 在线证书课程-自动驾驶汽车仿真
  • [ ] 虚拟网络安全实验室构建
  • [ ] 大年初四｜四季平安
  • [ ]
  • [ ] 使用 C++ 实现规避 ETW检测
  • [ ] Wireshark & Packetdrill | TCP 三次握手之 SYN 超时重传
  • [ ] 初四｜四季平安 幸福美满
  • [ ] 浅谈云安全之各aksk特征
  • [ ] Mongo Express 未授权访问
  • [ ] 统一云防御，新春保平安！
  • [ ] 初四：万事兴龙 龙年大吉
  • [ ] 大年初四 | 龙年呈国瑞 春日溢华光
  • [ ] AI治理基本问题与监管及标准化基本思路之初探
  • [ ] 今日推荐 - 2024-02-13
  • [ ] 大年初四｜龙腾瑞气吉星照
  • [ ] 精华回顾 | .NET WebShell 免杀系列之Unicode编码
  • [ ] [限时福利] 大年初四，星球优惠大放送！
  • [ ] 正月初四 财源广进
  • [ ] 钓鱼邮件便捷发送工具（GUI）
  • [ ] Kasseika勒索软件部署BYOVD攻击，滥用PsExec和利用Martini驱动程序
  • [ ] 江森自控遭勒索攻击，大部分IT系统宕机，损失上亿
  • [ ] 如何使用ProcessStomping在可执行程序的字段部分执行Shellcode
  • [ ] 美国清洁用品巨头高乐氏因网络攻击损失 4900 万美元
  • [ ] Pwn3更新Sonarqube企业破解版（源代码审计工具）
  • [ ] 大年初四丨盛邦安全祝您龙年大吉，安康顺遂！
  • [ ] 大年初四｜接五路 迎灶王！
  • [ ] 沙特一家非营利组织成为秘密网络间谍活动的目标，隐形网络间谍活动两年未被发现
  • [ ] 正月初四 | 前程似锦，黄金万两！
  • [ ] 最常见的八种云安全错误
  • [ ] 一款自动化提权工具
  • [ ] 某cms模板渲染导致rce漏洞分析
  • [ ] 春节所到之处的流量，别乱“蹭”;|黑客揭露空客EFB应用漏洞，飞行数据面临风险
  • [ ] CSP认证优秀高校代表组团大拜年
  • [ ] 郝克刚：回忆西北大学计算机专业的早期经历 | “难以计算的贡献”访谈
  • [ ] 2024年网络安全十大发展趋势
  • [ ] 大年初四·迎灶神
  • [ ] 利用Android WebView漏洞
  • [ ] 聊聊攻防渗透中的一些技巧和打法（一）
  • [ ] 【大年初四】龙腾四海祈心愿
• Articles on Podalirius
  • [ ] AD Attacks - ASRepRoasting
  • [ ] AD Attacks - KerbeRoasting
• Sandfly Security Blog RSS Feed
  • [ ] Sandfly 5.0 - Agentless Drift Detection, New UI, and Wider Linux Coverage
• Malwarebytes
  • [ ] TheTruthSpy stalkerware, still insecure, still leaking data
  • [ ] Remote Monitoring & Management software used in phishing attacks
  • [ ] Patch now! Roundcube mail servers are being actively exploited
  • [ ] Warzone RAT infrastructure seized
• MalwareTech
  • [ ] Bypassing EDRs With EDR-Preloading
• Reverse Engineering
  • [ ] Dissecting Shape Security's Virtual Machine
  • [ ] I bypassed the CD Key Requirement on my Delta Force (1998) PC Game!
  • [ ] Technical analysis of WinRAR zero-day malware and C2 protocol emulation
  • [ ] Unpack RedLine stealer using dnSpyEx - Part 3 - Securityinbits
• blog.avast.com EN
  • [ ] Show your digital devices some love this Valentine’s Day
• Intigriti
  • [ ] Navigating the PSTI Act: a guide for security professionals
• Webroot Blog
  • [ ] Navigating the Web of Romance Scams: A Guide for Businesses and Consumers
• Exploit-DB.com RSS Feed
  • [ ] [webapps] Lost and Found Information System v1.0 - ( IDOR ) leads to Account Take over
  • [ ] [webapps] ManageEngine ADManager Plus Build < 7183 - Recovery Password Disclosure
  • [ ] [dos] VIMESA VHF/FM Transmitter Blue Plus 9.7.1 (doreboot) - Remote Denial Of Service
  • [ ] [webapps] Splunk 9.0.4 - Information Disclosure
• Hex Rays
  • [ ] Plugin focus: Frinet
• Blog | Praetorian
  • [ ] Exploiting Kubernetes through Operator Injection
• 吾爱破解论坛
  • [ ] 【2024春节】解题领红包活动排行榜（初四 2/13）
• 有价值炮灰
  • [ ] 国内开发者的网络超时日常
• 看雪学苑
  • [ ] CVE-2023-38902的详细研究
  • [ ] 内核驱动高级班：独创“算法+内核+安全”三位一体的教学模式
• 皮相
  • [ ] 三仙归洞
• 奇客Solidot–传递最新科技情报
  • [ ] 微软正在为 Windows 11 开发类似 DLSS 的上采样技术
  • [ ] FreeBSD 未来计划停止支持 32 位架构
• 极客公园
  • [ ] 余承东：开问界 M9 回深圳，全程 1314 公里无接管；AI 提振，ARM 股价暴涨一倍；星舰将启动第三次试飞 | 极客早知道
  • [ ] 曾打败 YouTube 的「美国虎牙」，如何在游戏视频领域落败？
• 网安寻路人
  • [ ] AI治理基本问题与监管及标准化基本思路之初探
• dotNet安全矩阵
  • [ ] [限时福利] 大年初四，星球优惠大放送！
  • [ ] 精华回顾 | .NET WebShell 免杀系列之Unicode编码
• 迪哥讲事
  • [ ] 实战|记录对某网站漏洞挖掘
• 360数字安全
  • [ ] 大年初四｜龙腾瑞气吉星照
• Cybersecurity Blog | CrowdStrike
  • [ ] Key Findings from CrowdStrike’s 2024 State of Application Security Report
• Krypt3ia
  • [ ] War Gaming Disinformation and Misinformation Campaigns In 2024 Using A.I.
• Securityinfo.it
  • [ ] Rhysida è stato crackato: disponibile un decryptor per il ransomware
  • [ ] Un attacco ransomware ha messo in ginocchio 21 ospedali rumeni
• TrustedSec
  • [ ] Offensive Lab Environments (Without the Suck)
• Over Security - Cybersecurity news aggregator
  • [ ] Prudential Financial breached in data theft cyberattack
  • [ ] Fat Patch Tuesday, February 2024 Edition
  • [ ] New Jersey law enforcement officers sue 118 data brokers for not removing personal info
  • [ ] What is DDoSing
  • [ ] Hospitals offline across Romania following ransomware attack on IT platform
  • [ ] Hackers used new Windows Defender zero-day to drop DarkMe malware
  • [ ] Broker sold Planned Parenthood visitor location data to pro-life group, senator says
  • [ ] Microsoft February 2024 Patch Tuesday fixes 2 zero-days, 73 flaws
  • [ ] Windows 10 KB5034763 update released with new fixes, changes
  • [ ] 200,000 Facebook Marketplace user records leaked on hacking forum
  • [ ] Integris Health says data breach impacts 2.4 million patients
  • [ ] Microsoft February 2024 Patch Tuesday fixes 2 zero-days, 74 flaws
  • [ ] First Microsoft Patch Tuesday zero-day of 2024 disclosed as part of group of 75 vulnerabilities
  • [ ] Windows 11 KB5034765 update released with Start Menu fixes
  • [ ] Hackers steal $290 million in crypto from PlayDapp gaming platform
  • [ ] Introducing Video Game Module Powered by Raspberry Pi
  • [ ] Boise State pilot program aims to boost cybersecurity by pairing students with local institutions
  • [ ] Ransomware attack forces 100 Romanian hospitals to go offline
  • [ ] Bumblebee malware attacks are back after 4-month break
  • [ ] Fertility tracker Glow fixes bug that exposed users’ personal data
  • [ ] Vulnerabilità Zoom (AL04/240213/CSIRT-ITA)
  • [ ] 5 Steps to Improve Your Security Posture in Microsoft Teams
  • [ ] Identità nel mirino: tipologie di attacco e tecniche di prevenzione
  • [ ] Il Cyber Resilience Act si aggiorna: ecco i nuovi requisiti fondamentali e i prodotti coinvolti
  • [ ] Rhysida è stato crackato: disponibile un decryptor per il ransomware
  • [ ] Vulnerabilità in prodotti Schneider Electric (AL03/240213/CSIRT-ITA)
  • [ ] More than Data: Ransomware Groups are Now Selling Network Access Directly
  • [ ] Aggiornamenti per prodotti Siemens (AL02/240213/CSIRT-ITA)
  • [ ] 1-15 December 2023 Cyber Attacks Timeline
  • [ ] Ransomware attack forces 25 Romanian hospitals to go offline
  • [ ] Insieme per la compliance integrata: i controlli congiunti di DPO e OdV
  • [ ] Ransomware attack forces over 25 Romanian hospitals to go offline
  • [ ] Hybrid cloud, sfide e accorgimenti per garantirne la sicurezza informatica
  • [ ] Un attacco ransomware ha messo in ginocchio 21 ospedali rumeni
  • [ ] Rilevato sfruttamento in rete della CVE-2023-43770 relativa a Roundcube (AL01/240213/CSIRT-ITA
  • [ ] Il phishing sfrutta il cloud Azure per colpire responsabili aziendali: come difendersi
  • [ ] NetHunter Hacker XIII: Overall guide to MITM framework
• NetSPI
  • [ ] Annual Pentest? Done. How Proactive Security Covers the Other 50 Weeks in a Year
• SANS Internet Storm Center, InfoCON: green
  • [ ] Microsoft February 2024 Patch Tuesday, (Tue, Feb 13th)
  • [ ] ISC Stormcast For Tuesday, February 13th, 2024 https://isc.sans.edu/podcastdetail/8850, (Tue, Feb 13th)
• Schneier on Security
  • [ ] A Hacker’s Mind is Out in Paperback
  • [ ] Molly White Reviews Blockchain Book
• netsecstudents: Subreddit for students studying Network Security and its related subjects
  • [ ] CyberOwlGPT: Open Source AI-Powered Summaries of Security Advisories and Alerts
  • [ ] How to Protect Sensitive Data in M&A
  • [ ] How to gain technical Knowledge!
• The Hacker News
  • [ ] Glupteba Botnet Evades Detection with Undocumented UEFI Bootkit
  • [ ] PikaBot Resurfaces with Streamlined Code and Deceptive Tactics
  • [ ] Midnight Blizzard and Cloudflare-Atlassian Cybersecurity Incidents: What to Know
  • [ ] Ivanti Vulnerability Exploited to Install 'DSLog' Backdoor on 670+ IT Infrastructures
  • [ ] Alert: CISA Warns of Active 'Roundcube' Email Attacks - Patch Now
• Computer Forensics
  • [ ] Cellebrite Extraction larger than phone
  • [ ] Whatsapp Messages
  • [ ] Finding metainfo about a file on a Windows XP Image
• Security Affairs
  • [ ] A ransomware attack took 100 Romanian hospitals down
  • [ ] Bank of America customer data compromised after a third-party services provider data breach
  • [ ] Ransomfeed – Third Quarter Report 2023 is out!
  • [ ] Global Malicious Activity Targeting Elections is Skyrocketing
• Technical Information Security Content & Discussion
  • [ ] Azure Devops Zero-Click CI/CD Vulnerability
  • [ ] Security Review Of Okta's TOP-10 Security Posture Features to prevent the next breach
  • [ ] Unpack RedLine stealer using dnSpyEx - Part 3 - Securityinbits
  • [ ] Overview: Evidence Collection of Ivanti Connected Secure Appliances
  • [ ] Google chronicle - query by subnet
• Krebs on Security
  • [ ] Fat Patch Tuesday, February 2024 Edition
• Your Open Hacker Community
  • [ ] How to decrypt text
  • [ ] C program always crashes at the first instruction of the shellcode (Linux)
  • [ ] Problems with Metasploit and Windows XP sp0.
  • [ ] Nmap - UFW and Port Status
• Social Engineering
  • [ ] What topics would you avoid having disagreements if you don’t want to harm the relationship?
  • [ ] Book about the dynamics in conversation.
• Information Security
  • [ ] Help with Security Assessment on the Internal App
• Security Weekly Podcast Network (Audio)
  • [ ] Creating Code Security Through Better Visibility - Christien Rioux - ASW #273
  • [ ] Angry mobs, Azure, Avanti, Rhysida, Warzone, Flipper Zero, Josh Marpet, and More - SWN #362

[Elias01756]

please Help me with STOP/DJVU Ransomware decryption tool, extension type "CDCC"