[每日信息流] 2023-06-19

[chainreactorbot]

每日安全资讯（2023-06-19）

• HackerOne Hacker Activity
  • [ ] Error in Booking an appointment reveals the full path of the website
• Sec-News 安全文摘
  • [ ] CVE-2022-42475 FortiGate SSLVPN HeapOverflow
• SecWiki News
  • [ ] SecWiki News 2023-06-18 Review
• Twitter @Nicolas Krassas
  • [ ] Three attacks against geth-based Ethereum clients: "Speculative Denial-of-Service Attacks in Ethereum" https://www.reddit.com/r/netsec/comments/14che5...
  • [ ] LSMS - Linux Security And Monitoring Scripts http://www.kitploit.com/2023/06/lsms-linux-security-and-monitoring.html
  • [ ] PoC Released for Windows SysInternals Sysmon Privilege Escalation (CVE-2023-29343) Bug https://securityonline.info/poc-released-for-windows-sysinterna...
  • [ ] New Mystic Stealer malware increasingly used in attacks https://www.bleepingcomputer.com/news/security/new-mystic-stealer-malware-increasingly-used-in...
  • [ ] BlackCat ransomware gang behind Reddit breach from February https://www.bleepingcomputer.com/news/security/blackcat-ransomware-gang-behind-reddit-brea...
  • [ ] Microsoft confirms Azure, Outlook outages caused by DDoS attacks https://www.bleepingcomputer.com/news/microsoft/microsoft-confirms-azure-outlook-outa...
  • [ ] An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface. https://github.com/nicocha30/ligolo-ng
  • [ ] Mystic Stealer The New Kid on the Block https://www.zscaler.com/blogs/security-research/mystic-stealer
  • [ ] Doom running in the NT kernel https://github.com/NSG650/NtDOOM
  • [ ] Black Angel is a Windows 11/10 x64 kernel mode rootkit. Rootkit can be loaded with enabled DSE while maintaining its full functionality. https://githu...
  • [ ] Firefly - Black Box Fuzzer For Web Applications http://www.kitploit.com/2023/06/firefly-black-box-fuzzer-for-web.html
  • [ ] US govt offers $10 million bounty for info on Clop ransomware https://www.bleepingcomputer.com/news/security/us-govt-offers-10-million-bounty-for-info...
• unSafe.sh - 不安全
  • [ ] Reddit也是黑客的真爱！要挟Reddit撤回API定价变更否则泄露其数据
  • [ ] BlackCat 声称入侵了 Reddit 窃取了数据
  • [ ] 微软称UWP版邮件将在2024年9月关停并被WebView版Outlook替代
  • [ ] CVE-2022-42475 FortiGate SSLVPN HeapOverflow
  • [ ] IT管理员请注意：微软最新发布的补丁可能会破坏Windows 10/11内核
  • [ ] Celebrating Fathers of SentinelOne
  • [ ] LSMS - Linux Security And Monitoring Scripts
  • [ ] Google账号被封-申诉
  • [ ] Cybersecurity Burnout: How to Prioritize Your Mental Health - Uptycs
  • [ ] Bandizip专业版（压缩工具）
  • [ ] Midjourney 视频版
  • [ ] GPT-4 生成的商业计划书更受投资者青睐
  • [ ] Windows 11 更新导致 Chrome 无法启动
  • [ ] 简繁自由切换 – 为网页添加拼音、简繁转换[油猴脚本]，支持自动将 yyds 转换回正经中文
  • [ ] [限时特惠] 免费 macOS 剪贴板 + AI 新玩法：效率启动器 HapiGo 更新
• Security Boulevard
  • [ ] BSidesSF 2023 – Adnan Khan – Securing The Pipeline: Protecting Self-Hosted GitHub Runners
  • [ ] Multi Cloud Security and Compliance Management | anecdotes
• CXSECURITY Database RSS Feed - CXSecurity.com
  • [ ] TP-Link Archer AX10(EU)_V1.2_230220 Buffer Overflow
  • [ ] BlogMagz 1.0 - Stored XSS
• ongoing by Tim Bray
  • [ ] No Man’s Sky and Apple Silicon
• Sploitus.com Exploits RSS Feed
  • [ ] Exploit for CVE-2023-20178 exploit
  • [ ] Exploit for Path Traversal in Igniterealtime Openfire exploit
• Recent Commits to cve:main
  • [ ] Update Sun Jun 18 00:08:42 UTC 2023
• 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com
  • [ ] 出于经济利益，Void Rabisu使用RomCom后门在地缘冲突中获利
  • [ ] 大规模网络钓鱼活动利用6000个网站，冒充100个知名品牌
• Dancho Danchev's Offensive Warfare 2.0 – The Web's Primary Cybercrime Research OSINT And Threat Intelligence Central Clearing House
  • [ ] Profiling a Domain Portfolio Operated by the Scareware Distributor Innovative Marketing
  • [ ] Profiling a URL List of Iran-based Web Sites Belonging to Hacking Groups
  • [ ] A List of Personally Identifiable Information and Domain Portfolio Operated by EncroChat
  • [ ] A List of Personally Identifiable Email Address Accounts Belonging to Bulgarian Hackers
  • [ ] A List of Personally Identifiable Information on Anonymous Greece
• SAP Blogs
  • [ ] Handling Images in SAP Build Apps
  • [ ] Role Specific Responsibilities and Tasks for Project Management in Focused Build
  • [ ] How to create a CSR and import the certificate response in STRUST
  • [ ] CAP Typescript + Fiori Typescript + live reload Initial app setup
  • [ ] USD Currency as Local Currency for Singapore Company Code in S/4HANA Cloud?
  • [ ] Quick Guide to SAP BW/4HANA Migration
• SentinelOne
  • [ ] Celebrating Fathers of SentinelOne
• Reverse Engineering
  • [ ] Sharing my most recent project: stm32f1-picopwner - Dump readout-protected STM32F1's with a Pi Pico
• Private Feed for M09Ic
  • [ ] spf13 starred richardwilkes/unison
  • [ ] CHYbeta started following irsl
  • [ ] WangYihang starred xtekky/gpt4free
  • [ ] WangYihang starred offen/docker-volume-backup
  • [ ] Mr-xn created a repository Mr-xn/burpsuite_pro_for_mac
  • [ ] phith0n forked phith0n/openfire-fastpath-plugin from igniterealtime/openfire-fastpath-plugin
  • [ ] WangYihang starred remcohaszing/pywakeonlan
  • [ ] WangYihang starred sabhiram/go-wol
  • [ ] Rvn0xsy starred HavocFramework/Havoc
• 奇客Solidot–传递最新科技情报
  • [ ] BlackCat 声称入侵了 Reddit 窃取了数据
  • [ ] GPT-4 生成的商业计划书更受投资者青睐
  • [ ] Windows 11 更新导致 Chrome 无法启动
• 君哥的体历
  • [ ] WAF类串联安全设备规则升级，如何验证对业务应用的影响？ | 总第195周
• 看雪学苑
  • [ ] 记一次有趣的手游加固脱壳与修复——从GNU Hash说起
  • [ ] IDA特训营
• 黑海洋 - WIKI
  • [ ] Google账号被封-申诉
  • [ ] Bandizip专业版（压缩工具）
  • [ ] Midjourney 视频版
• 我的安全视界观
  • [ ] 安全事件运营SOP：接收漏洞事件
• 黑奇士
  • [ ] 投资大佬朱啸虎被“拘留”？扒一下谣言的传播路径
• KitPloit - PenTest & Hacking Tools
  • [ ] LSMS - Linux Security And Monitoring Scripts
• 数世咨询
  • [ ] 数据孤岛：安全运维面临的最大挑战
• 漏洞战争
  • [ ] 网络安全学术顶会——CCS '22 议题清单、摘要与总结（上）
  • [ ] 网络安全学术顶会——CCS '22 议题清单、摘要与总结（中）
  • [ ] 网络安全学术顶会——CCS '22 议题清单、摘要与总结（下）
• 渗透测试网络安全
  • [ ] 【工具篇】应急响应-火绒剑(HRSword)单文件提取版 仅3M
  • [ ] 自动化资产深度递归收集联动fofa,鹰图查询工具
• 安全研究GoSSIP
  • [ ] 【周末分享】Pwn.college 连载来啦 36-38集
• 极客公园
  • [ ] 理想：「大模型上车」，年底发50万以上最好电车
  • [ ] 理想曝 50 万纯电车，车载助手上GPT；马斯克：今年脑机接口做人体试验；国产芯片公司拿 30 亿 D 轮融资 | 极客早知道
• 安全圈
  • [ ] 【安全圈】全球最大加密货币交易所币安又遭重锤！法国指控其有严重洗钱行为
  • [ ] 【安全圈】测试长达7年、上线1年后谷歌域名注册服务就凉了
  • [ ] 【安全圈】Reddit网友爆吧抗议API问题，网站暂时下线！
  • [ ] 【安全圈】勒索软件成员在美国被逮捕，年仅20岁来自车臣共和国
• Over Security - Cybersecurity news aggregator
  • [ ] NahamCon 2023 CTF: 94/2626
  • [ ] Reddit hackers threaten to leak data stolen in February breach
  • [ ] BlackCat ransomware gang behind Reddit breach from February
  • [ ] New Mystic Stealer malware increasingly used in attacks
  • [ ] Microsoft confirms Azure, Outlook outages caused by DDoS attacks
• Il Disinformatico
  • [ ] Antibufala: Repubblica e lo spostamento dell’asse terrestre causato dall’estrazione umana dell‘acqua. Spoiler: è di 78 centimetri in 17 anni
• Troy Hunt's Blog
  • [ ] Weekly Update 352
• SANS Internet Storm Center, InfoCON: green
  • [ ] Brute-Force ZIP Password Cracking with zipdump.py, (Sun, Jun 18th)
• TorrentFreak
  • [ ] Netflix and Amazon DMCA Notices Target Legal Streaming Options
• IT Service Management News
  • [ ] Gli uomini possono fare tutto (Giugno 2023)
  • [ ] Regolamento DORA
  • [ ] Bozza dell'Artificial intelligence Act approvata dal Parlamento UE
• KitPloit - PenTest Tools!
  • [ ] LSMS - Linux Security And Monitoring Scripts
• Security Affairs
  • [ ] Microsoft: June Outlook and cloud platform outages were caused by DDoS
  • [ ] Reddit Files: BlackCat/ALPHV ransomware gang claims to have stolen 80GB of data from Reddit
  • [ ] US govt offers $10 million bounty for info linking Clop ransomware gang to a foreign government.
  • [ ] Security Affairs newsletter Round 424 by Pierluigi Paganini – International edition
• Deep Web
  • [ ] Pathetic DEA
  • [ ] How bad is Java script?
  • [ ] Has anyone ever used a marketplace just curious
• Technical Information Security Content & Discussion
  • [ ] Three attacks against geth-based Ethereum clients: "Speculative Denial-of-Service Attacks in Ethereum"
  • [ ] Explainer: Dominion vulnerabilities reported by Halderman
  • [ ] How to create an hacking lab on apple silicon
• Your Hacking Tutorial by Zempirians
  • [ ] [Metasploit: Exploitation][Task 6 - Msfvenom] Exploit completed, but no session was created.
  • [ ] What are some websites to gather Intel on people with as little information as possible?
  • [ ] Basic MP3 Player Hacking Help
  • [ ] Is my ip hidden?
• 吴鲁加
  • [ ] 软件产品出海
• Blackhat Library: Hacking techniques and research
  • [ ] Easiest Way to learn the WinAPI for Malware (Embedding Shellcode)
• Computer Forensics
  • [ ] Certification Suggestions
  • [ ] Encrypted SanDisk X300 disk
  • [ ] What are good entry level certifications?
  • [ ] List of deleted file on Axiom
  • [ ] Can Computers be located by Law Enforcement Agencies using MAC addresses and/or serial numbers?
• Social Engineering
  • [ ] Need help with a hired worker
  • [ ] How can I provoke my narcissistic mother so that I can finally be allowed to leave?

[github-actions[bot]]

This issue was closed because it has been inactive for 14 days since being marked as stale.