[每日信息流] 2023-06-28

[chainreactorbot]

每日安全资讯（2023-06-28）

• HackerOne Hacker Activity
  • [ ] User scoped external storage can be used to gather credentials of other users
• SecWiki News
  • [ ] SecWiki News 2023-06-27 Review
• unSafe.sh - 不安全
  • [ ] WordPress Vulnerability & Patch Roundup June 2023
  • [ ] How to know if your Silabs CP2102 is fake?
  • [ ] 你的名字到底有几种写法？——聊聊 Windows 和 macOS 的版本号
  • [ ] GitHub Proxy 图片、raw、gist文件加速下载
  • [ ] Wireless Pentesting Cheat Sheet
  • [ ] Cloudflare Zaraz supports JSONata
  • [ ] Looking Within | Strategies for Detecting and Mitigating Insider Threats
  • [ ] Putting Zero Trust into Action with Forrester’s Heath Mullins
  • [ ] 开发者将 ChatGPT 移植到 Windows 3.1
  • [ ] FreeBuf 早报 | 暴雪娱乐遭DDoS攻击；美国军人频频收到神秘智能手表
  • [ ] 解读备忘录&语音备忘录：发现简洁之下的强大
  • [ ] Google开发者账号被封丨谷歌上架关联下架，问题到底出在哪？
  • [ ] 英国试验粪便移植治疗肝病
  • [ ] AI 在杀死旧 Web？
• Tenable Blog
  • [ ] A Practical Way To Reduce Risk on the Shop Floor
• Recent Commits to cve:main
  • [ ] Update Tue Jun 27 00:18:11 UTC 2023
• 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com
  • [ ] 告别脚本小子系列丨JAVA安全(8)——反序列化利用链（下）
  • [ ] 《安全编排自动化与响应（SOAR）市场研究报告》发布会即将召开
  • [ ] 微软承认6月发生了针对Outlook和OneDrive的黑客攻击事件
• Files ≈ Packet Storm
  • [ ] Debian Security Advisory 5439-1
  • [ ] Rocket LMS 1.7 Cross Site Scripting
  • [ ] WordPress LearnDash LMS 4.6.0 Insecure Direct Object Reference
  • [ ] Apache Druid JNDI Injection Remote Code Execution
  • [ ] Red Hat Security Advisory 2023-3615-01
  • [ ] ONEST CRM 1.0 Cross Site Scripting
  • [ ] Red Hat Security Advisory 2023-3796-01
  • [ ] Office Suite Premium 10.9.1.42602 Local File Inclusion
  • [ ] Office Suite Premium 10.9.1.42602 Path Traversal
  • [ ] Office Suite Premium 10.9.1.42602 Cross Site Scripting
  • [ ] MagicAI 1.55R Cross Site Scripting
  • [ ] Proxmark3 4.16717 Custom Firmware
  • [ ] Red Hat Security Advisory 2023-3781-01
  • [ ] Microsoft 365 MSO 2305 Build 16.0.16501.20074 Remote Code Execution
  • [ ] MyBB Favicon 1.0 Cross Site Scripting
  • [ ] Job Board 1.0 Shell Upload
  • [ ] Red Hat Security Advisory 2023-3625-01
  • [ ] PrestaShop Winbiz Payment Improper Limitation
  • [ ] Microsoft Windows 11 22h2 Kernel Privilege Escalation
  • [ ] Azure Apache Ambari 2302250400 Spoofing
  • [ ] Xenforo 2.2.13 Cross Site Scripting
  • [ ] MCL-Net 4.3.5.8788 Information Disclosure
  • [ ] Chrome Internal JavaScript Object Access Via Origin Trials
  • [ ] Active eCommerce CMS 6.5.0 Cross Site Scripting
  • [ ] Microsoft SharePoint Enterprise Server 2016 Spoofing
• Sploitus.com Exploits RSS Feed
  • [ ] ONEST CRM 1.0 Cross Site Scripting exploit
  • [ ] Microsoft SharePoint Enterprise Server 2016 Spoofing exploit
  • [ ] MyBB Favicon 1.0 Cross Site Scripting exploit
  • [ ] Microsoft Windows 11 22h2 Kernel Privilege Escalation exploit
  • [ ] Microsoft 365 MSO 2305 Build 16.0.16501.20074 Remote Code Execution exploit
  • [ ] MagicAI 1.55R Cross Site Scripting exploit
  • [ ] PrestaShop Winbiz Payment Improper Limitation exploit
  • [ ] Microsoft Excel / 365 MSO Remote Code Execution exploit
  • [ ] Office Suite Premium 10.9.1.42602 Cross Site Scripting exploit
  • [ ] Apache Druid JNDI Injection Remote Code Execution exploit
  • [ ] Office Suite Premium 10.9.1.42602 Path Traversal exploit
  • [ ] Job Board 1.0 Shell Upload exploit
  • [ ] Xenforo 2.2.13 Cross Site Scripting exploit
  • [ ] Office Suite Premium 10.9.1.42602 Local File Inclusion exploit
  • [ ] Active eCommerce CMS 6.5.0 Cross Site Scripting exploit
  • [ ] Azure Apache Ambari 2302250400 Spoofing exploit
  • [ ] WordPress LearnDash LMS 4.6.0 Insecure Direct Object Reference exploit
  • [ ] Rocket LMS 1.7 Cross Site Scripting exploit
  • [ ] MCL-Net 4.3.5.8788 Information Disclosure exploit
  • [ ] Chrome Internal JavaScript Object Access Via Origin Trials exploit
  • [ ] Office Suite Premium 10.9.1.42602 Path Traversal Vulnerability exploit
  • [ ] Office Suite Premium 10.9.1.42602 Cross Site Scripting Vulnerability exploit
  • [ ] WordPress LearnDash LMS 4.6.0 Insecure Direct Object Reference Vulnerability exploit
  • [ ] Apache Druid JNDI Injection Remote Code Execution Exploit exploit
  • [ ] Exploit for Path Traversal in Microsoft exploit
  • [ ] Exploit for Code Injection in Apache Commons Text exploit
• 先知安全技术社区
  • [ ] CC链汇总
  • [ ] IO leak
  • [ ] Servlet内存马利用分析
  • [ ] FreeMarker入门到简要分析模版注入
  • [ ] 反序列化基础之反射机制
  • [ ] Jackson反序列化
  • [ ] 一文带你理解AST Injection
  • [ ] Proxynotshell 反序列化及 CVE-2023-21707 漏洞研究
• Trustwave Blog
  • [ ] Part 2: Preparing the Board of Directors for the SEC's Upcoming Cybersecurity Compliance Regulations
• Security Boulevard
  • [ ] U.K. Cyber Thug “PlugwalkJoe” Gets 5 Years in Prison
  • [ ] Microsoft Teams Phishing Exploit
  • [ ] How the “two-man rule” elevates mobile security
  • [ ] BSidesSF 2023 – Rojan Rijal – Placeholder for Dayzzz
  • [ ] Hackers breached UPS data for SMS phish spree
  • [ ] Randall Munroe’s XKCD ‘Alphabet Notes’
  • [ ] Stepping Up Cybersecurity: An In-depth Look at SCA and SAST
  • [ ] A Double Supply Chain Attack and The Importance of TPRM
  • [ ] Achieving Zero Trust That Works
  • [ ] 3 ways to use Common Attack Patterns to abuse an API
• • [ ] WordPress Vulnerability & Patch Roundup June 2023
• 安全脉搏
  • [ ] LangChain 任意命令执行（CVE-2023-34541）
  • [ ] Java 反序列化之 XStream 反序列化
• Twitter @Nicolas Krassas
  • [ ] The Philosopher of Palo Alto https://blog.dshr.org/2023/06/the-philosopher-of-palo-alto.html
  • [ ] ParaForge: A BurpSuite extension to create a custom word-list of endpoint and parameters for enumeration and fuzzing https://www.reddit.com/r/netsec/c...
  • [ ] Gas Stations Impacted By Cyberattack On Canadian Energy Giant https://packetstormsecurity.com/news/view/34755/Gas-Stations-Impacted-By-Cyberattack-On-...
  • [ ] American And Southwest Airlines Pilot Candidate Data Exposed https://packetstormsecurity.com/news/view/34758/American-And-Southwest-Airlines-Pilot-Can...
  • [ ] Seizure of EncroChat Enables Police Access to 115 Million Conversations https://www.hackread.com/encrochat-seizure-police-access-conversations/
  • [ ] Experts found hundreds of devices within federal networks having internet-exposed management interfaces https://securityaffairs.com/147876/hacking/fce...
  • [ ] Siemens Energy confirms data breach after MOVEit data-theft attack https://www.bleepingcomputer.com/news/security/siemens-energy-confirms-data-breach-...
  • [ ] Ongoing outage affects Outlook for the web users across America https://www.bleepingcomputer.com/news/microsoft/ongoing-outage-affects-outlook-for-the...
  • [ ] New Ongoing Campaign Targets npm Ecosystem with Unique Execution Chain https://thehackernews.com/2023/06/new-ongoing-campaign-targets-npm.html
  • [ ] New Mockingjay process injection technique evades EDR detection https://www.bleepingcomputer.com/news/security/new-mockingjay-process-injection-techni...
  • [ ] EncroChat Bust Leads to 6,558 Criminals' Arrests and €900 Million Seizure https://thehackernews.com/2023/06/encrochat-bust-leads-to-6558-criminals.ht...
  • [ ] Anatsa Banking Trojan Targeting Users in US, UK, Germany, Austria, and Switzerland https://thehackernews.com/2023/06/anatsa-banking-trojan-targeting-u...
  • [ ] Schneider Electric and Siemens Energy are two more victims of a MOVEit attack https://securityaffairs.com/147865/data-breach/schneider-electric-siemen...
  • [ ] For Science! - Using an Unimpressive Bug in EDK II to Do Some Fun Exploitation https://www.reddit.com/r/netsec/comments/14k85o8/for_science_using_an_u...
  • [ ] JOKERSPY used to target a cryptocurrency exchange in Japan https://securityaffairs.com/147840/hacking/jokerspy-attack-japanese-cryptocurrency-exchange...
  • [ ] OpenResume is a powerful open-source resume builder and resume parser. https://open-resume.com/ https://github.com/afwu/open-resume
  • [ ] VBoxCloak: hide VirtualBox Windows VM’s from malware https://securityonline.info/vboxcloak-hide-virtualbox-windows-vms-from-malware/
  • [ ] Genworth Financial Reports Data Breach Leaking SSNs Belonging to 2.7M Policyholders and Customers https://www.darkreading.com/attacks-breaches/genwort...
  • [ ] Fake Super Mario 3 Installers Drop Crypto Miner, Data Stealer https://www.hackread.com/super-mario-3-installers-cryptominer-data-stealer/
• SkullSecurity Blog
  • [ ] How-to: Reversing and debugging ISAPI modules
• Twitter @bytehx
  • [ ] RT Dhiyaneshwaran: GenieACS - Default JWT Secret - [High] ⚡️ @pdnuclei Template - https://github.com/projectdiscovery/nuclei-templates/blob/main/htt...
  • [ ] RT Nicolas Krassas: OpenResume is a powerful open-source resume builder and resume parser. https://open-resume.com/ https://github.com/afwu/open-resum...
• Forcepoint
  • [ ] Putting Zero Trust into Action with Forrester’s Heath Mullins
• SAP Blogs
  • [ ] Significance of Movement types 103, 105, 107 and 109
  • [ ] Quick Financial Plan – The new planning tool of CPM
  • [ ] A modern workflow for SAP Cloud Integration with CAP and Azure DevOps
  • [ ] Restrict pay component amount value via range or valid input values
  • [ ] SAP on Azure: Quick guide for deploying SAP workloads across Azure Availability Zones
  • [ ] My 5 favorite SAP Activate community blog posts from this summer (so far)
  • [ ] Newbie Nuggets: Capturing Data via a Standard Pop-Up Data Retrieval FM
  • [ ] Exploring benefits with Ariba Guided Buying and SAP S/4 Sourcing and Procurement
  • [ ] Shared Responsibility, Shared Fate, and Shared Faith: An Evolution in Trust in Cloud Services
  • [ ] SAP BTP SDK for Android 7.0 is now available
• Securelist
  • [ ] How cybercrime is impacting SMBs in 2023
• SentinelOne
  • [ ] Looking Within | Strategies for Detecting and Mitigating Insider Threats
• Application Security Blog
  • [ ] Creating a well-rounded Microsoft 365 security program
• SpiderLabs Blog from Trustwave
  • [ ] SNAPPY: Detecting Rogue and Fake 802.11 Wireless Access Points Through Fingerprinting Beacon Management Frames
• Malwarebytes Labs
  • [ ] Understanding ransomware reinfection: An MDR case study
  • [ ] Company finds lost SSD—and confidential data—for sale on eBay
  • [ ] Software company accused of illegally profiling millions of mobile phone users
  • [ ] 81% concerned about ChatGPT security and safety risks, Malwarebytes survey shows
  • [ ] SupremeBot and Mario cross the finish line together
• Blog - Praetorian
  • [ ] Announcing Gato Version 1.5!
• 安全牛
  • [ ] CDR（云威胁检测和响应）技术应用五步曲
  • [ ] 简析电力系统网络靶场建设的价值、挑战与趋势
  • [ ] 直播预告 | CISSP认证介绍
• Malware-Traffic-Analysis.net - Blog Entries
  • [ ] 2023-06-27 - 30 days of Formbook: Day 23, Tuesday 2023-06-27 - "FGH2"
  • [ ] 2023-06-26 - 30 days of Formbook: Day 22, Monday 2023-06-26 - "G0E8"
  • [ ] 2023-06-25 - 30 days of Formbook: Day 21, Sunday 2023-06-25 - "CX01"
  • [ ] 2023-06-24 - 30 days of Formbook: Day 20, Saturday 2023-06-24 - version 3.8 "AK"
• Private Feed for M09Ic
  • [ ] BeichenDream starred wheybags/glibc_version_header
  • [ ] panjf2000 starred XingangPan/DragGAN
  • [ ] panjf2000 starred TencentARC/GFPGAN
  • [ ] WangYihang starred anaskhan96/soup
  • [ ] zer0yu starred teamssix/awesome-cloud-security
  • [ ] WangYihang starred jpillora/go-tld
  • [ ] LoRexxar starred hwchase17/langchain
  • [ ] LoRexxar starred imClumsyPanda/langchain-ChatGLM
  • [ ] LoRexxar starred yanqiangmiffy/Chinese-LangChain
  • [ ] LoRexxar starred LoRexxar/Kunlun-M
  • [ ] Mr-xn starred superBiuBiuMan/wechatMiniAppReverse
  • [ ] Ascotbe starred wyzxxz/aksk_tool
  • [ ] theLSA starred GopeedLab/gopeed
  • [ ] theLSA starred fengzhouc/FuzzPayloadGennerator
  • [ ] theLSA starred colind0pe/AV-Bypass-Learning
  • [ ] theLSA starred m3n0sd0n4ld/GooFuzz
  • [ ] theLSA starred frkngksl/NimExec
  • [ ] theLSA starred hueristiq/xurlfind3r
• HackerNews
  • [ ] 微软发出警告，俄罗斯黑客正进行大范围的凭证窃取攻击
  • [ ] Anatsa 安卓木马正在窃取美国、英国用户的银行账户信息！
  • [ ] Suncor Energy遭遇网络攻击，致使加拿大石油系统全面瘫痪！
  • [ ] 暴雪娱乐遭DDoS攻击，影响《暗黑破坏神》多款游戏
  • [ ] 美国政府如何管控供应商数据安全？以国土安全领域为例
• 博客园 - 郑瀚Andrew
  • [ ] 关于在大模型战略资源储备的不同阶段，B端开发者的行动策略的一些思考 - 郑瀚Andrew
• vivo千镜
  • [ ] vivo发布《千镜可信引擎产品手册》，广邀生态伙伴合作
• 雷神众测
  • [ ] CVE-2023-32315 Openfire管理控制台认证绕过漏洞分析
• Black Hills Information Security
  • [ ] Talkin’ About Infosec News – 6/27/2023
• 代码卫士
  • [ ] 两家全球航空巨头披露数据泄露事件
  • [ ] Chrome 漏洞多：web 浏览器还安全吗？
• GobySec
  • [ ] 漏洞分析｜死磕Jenkins漏洞回显与利用效果
• FreeBuf网络安全行业门户
  • [ ] FreeBuf 早报 | 暴雪娱乐遭DDoS攻击；美国军人频频收到神秘智能手表
  • [ ] 微软发出警告，俄罗斯黑客正进行大范围的凭证窃取攻击
  • [ ] Anatsa 安卓木马正在窃取美国、英国用户的银行账户信息！
  • [ ] 研究发现，电源指示灯的闪烁也能泄露密码
  • [ ] Suncor Energy遭遇网络攻击，致使加拿大石油系统全面瘫痪！
  • [ ] CobaltStrike后渗透进阶篇
• 奇客Solidot–传递最新科技情报
  • [ ] 微软内部文档显示它想将 Windows 完整转移到云端
  • [ ] 澳大利亚总理建议居民每晚手机关机五分钟
  • [ ] 开发者将 ChatGPT 移植到 Windows 3.1
  • [ ] 英国试验粪便移植治疗肝病
  • [ ] AI 在杀死旧 Web？
  • [ ] Red Hat 恪守对开源的承诺
  • [ ] 古代玛雅城市藏身丛林逾千年
  • [ ] Z-Library 发布桌面应用以改进可及性
  • [ ] 社交应用 IRL 在承认 95% 的用户是机器人后关闭
  • [ ] Google DeepMind CEO 称其开发的新 AI 系统将让 ChatGPT 黯然失色
• 安全内参
  • [ ] 加拿大石油巨头被黑影响全国加油站：支付或瘫痪 仅支持现金
  • [ ] 美国军人频频收到神秘智能手表，官方发布警告
• 腾讯玄武实验室
  • [ ] 每日安全动态推送(6-27)
• 黑海洋 - WIKI
  • [ ] 什么是蜂巢思维？
  • [ ] GitHub Proxy 图片、raw、gist文件加速下载
  • [ ] Google开发者账号被封丨谷歌上架关联下架，问题到底出在哪？
  • [ ] 流媒体解锁一键测试脚本
  • [ ] 青蛇探针（serverMmon）
• 关键基础设施安全应急响应中心
  • [ ] 加拿大石油巨头Suncor公司遭到网络攻击导致全国加油服务中断
  • [ ] RepoJacking攻击影响数百万GitHub库
  • [ ] 美国政府如何管控供应商数据安全？以国土安全领域为例
• 电子物证
  • [ ] 【数据库中间件MyCat的取证】
  • [ ] 【手机指纹暴力破解攻击影响安卓和iOS设备】
• 长亭安全应急响应中心
  • [ ] 在野0day捕获｜nginxWebUI runCmd远程命令执行漏洞
• 极客公园
  • [ ] 黄仁勋：英伟达的 AI 算力，已经「1 折」出售
  • [ ] 小米：小米汽车14.99 万是谣言；马斯克获世界航天最高奖；高考生喊话马化腾后，腾讯：QQ 空间改回老版｜极客早知道
• 青藤云安全
  • [ ] 上海移动&青藤共建CNAPP先进云安全方案，获信通院权威认可
• 火线Zone
  • [ ] 【火线Zone征稿】6月优秀文章公示汇总
• 中国信息安全
  • [ ] 论坛·原创 | 联合国 OEWG 进程中的联络点名录机制研究
  • [ ] 通知 | 中央网信办开展“清朗·2023年暑期未成年人网络环境整治”专项行动
  • [ ] 前沿 | AI时代的信息安全新挑战
  • [ ] 观点 | 强化数据安全保障体系建设 增强全民国家安全意识
  • [ ] 评论 | 整治网络暴力要矫正“法不责众”错误倾向
  • [ ] 关注 | 引导青少年健康使用短视频
• 微步在线
  • [ ] CSOP 干货直通 | 信通院陈鑫：企业资产暴露面的收敛
  • [ ] ​微步TDP与亚马逊云科技如何联手保护某券商云端业务
• 安全研究GoSSIP
  • [ ] G.O.S.S.I.P 阅读推荐 2023-06-27
• 看雪学苑
  • [ ] iOS之APP登录参数_sign&userpwd分析
  • [ ] 暴雪遭受DDoS攻击，《暗黑破坏神IV》《魔兽世界》等热门游戏无法登录
  • [ ] 安卓逆向入门
• 黑伞安全
  • [ ] 转发先知社区《SRC中的SSRF漏洞挖掘笔记1.0》
  • [ ] DNS Rebinding in Browser
  • [ ] Azure 机器学习服务上已验证的 SSRF 漏洞
• 体验盒子
  • [ ] 电影艺术与商业、全球十三大电影国风格与特点及代表作
• dotNet安全矩阵
  • [ ] .NET 分享支持Oracle/MySQL连接脚本工具
  • [ ] .NET矩阵星球优惠活动持续进行
• 嘶吼专业版
  • [ ] 《安全编排自动化与响应（SOAR）市场研究报告》发布会即将召开
  • [ ] OpenSSH木马活动攻击物联网设备和基于Linux的系统
  • [ ] 微软承认6月发生了针对Outlook和OneDrive的黑客攻击事件
• 安全圈
  • [ ] 【安全圈】遭DDoS攻击，暴雪的《暗黑破坏神》等多款游戏无法登陆
  • [ ] 【安全圈】电源指示灯的闪烁也能泄露密码？看看研究怎么说
  • [ ] 【安全圈】将暴露的敏感信息武器化最快仅需两分钟！
  • [ ] 【安全圈】Suncor Energy遭遇网络攻击，导致加拿大加油站支付受限
• IT职场课
  • [ ] 【转】安全资讯：已发布网络安全国家标准清单汇总
• 奇安信威胁情报中心
  • [ ] 合法数字签名幕后的陷阱：警惕“谷堕大盗”的水坑攻击
• 情报分析师
  • [ ] 美国军队人口统计报告（附下载）
  • [ ] 开源情报在乌克兰战争中的作用
• 复旦白泽战队
  • [ ] 白泽带你读论文｜MANTA
• CNCERT国家工程研究中心
  • [ ] 2023数据泄漏报告十大发现
  • [ ] 2023 Verizon 数据泄露报告：74%安全事件存在人为因素
  • [ ] 美国航空和西南航空的飞行员数据在数据泄露中被盗
• 奇安盘古
  • [ ] 奇安盘古成为OpenHarmony安全委员会委员单位
• Over Security - Cybersecurity news aggregator
  • [ ] U.K. Cyber Thug “PlugwalkJoe” Gets 5 Years in Prison
  • [ ] Windows 11 KB5027303 preview update enables new Moment 3 features
  • [ ] Windows 10 KB5027293 update released with 3 new features, 14 changes
  • [ ] Lessons From Clop: Combating Ransomware and Cyber Extortion Events
  • [ ] Hundreds of devices found violating new CISA federal agency directive
  • [ ] Siemens Energy confirms data breach after MOVEit data-theft attack
  • [ ] UCLA, Siemens Energy latest MOVEit victims to confirm breaches
  • [ ] WordPress Vulnerability & Patch Roundup June 2023
  • [ ] Endpoint security: ecco come bloccare gli attacchi ransomware in 10 mosse
  • [ ] GravityRAT, lo spyware Android nascosto in finte app di messagistica che ruba le nostre chat WhatsApp
  • [ ] Outlook for the web outage impacts users across America
  • [ ] EncroChat takedown led to 6,500 arrests and $979 million seized
  • [ ] Just released: Session tracks for Mandiant’s 2023 mWISE event
  • [ ] Ongoing outage affects Outlook for the web users across America
  • [ ] Milioni di repository GitHub a rischio RepoJacking: quali accorgimenti prendere
  • [ ] Vacanze sicure: come proteggere dati e dispositivi mobili
  • [ ] Il dark web prende di mira l’Italia: aumentano le informazioni in vendita sui forum
  • [ ] New Mockingjay process injection technique evades EDR detection
  • [ ] Swiss intelligence warns of fallout in cyberspace as West clamps down on spies
  • [ ] Tracking atrocities in Sudan: 'The world has become significantly less anonymous for war criminals'
  • [ ] Six months into Breached: The legacy of RaidForums?
  • [ ] Defender-in-the-middle: How to reduce damage from info-stealing malware
  • [ ] Proact, Don’t React: How CISOs Should View Cybercrime Threat Intelligence
  • [ ] 400 Security Practitioners Gave These 7 Insights into Their Cybercrime Monitoring
  • [ ] 5 Trends Shaping The Future Of Cybercrime Threat Intelligence
  • [ ] How To Prepare Your Organization For The Future Of Cybercrime
  • [ ] Attacks on MSPs: How Threat Actors Kill Two Birds (and More) With One Stone
  • [ ] An Executive’s Guide To The Cybercrime Underground
  • [ ] RaidForums leaked database – insights and intelligence by KELA
  • [ ] Your Malware Has Been Generated: How Cybercriminals Exploit the Power of Generative AI and What Can Organizations Do About It?
  • [ ] More than 6,500 arrested since French and Dutch police’s EncroChat hack
  • [ ] Unveiling Wagner Group’s Cyber-Recruitment
  • [ ] Esenzione ticket inviata a pazienti sbagliati: cosa impariamo dalla sanzione privacy all’ASL di Padova
  • [ ] Il gruppo APT Vanguard Panda usa tecniche innovative per i suoi attacchi
  • [ ] How cybercrime is impacting SMBs in 2023
• Il Disinformatico
  • [ ] “Artificial Evil”: la presentazione di Mikko Hyppönen (WithSecure) a Sphere23
  • [ ] Pranzo dei Disinformatici 2023: sabato 16 settembre alle 13
  • [ ] Bobby Solo legge il mio libro sui complottismi lunari e lo spiega a Red Ronnie
• JUMPSEC
  • [ ] Compound Extortion: UnSafeLeaks
• KCon 黑客大会
  • [ ] 兵器谱大众评选开启，送你中意的“神兵利器”去KCon！
• IT Service Management News
  • [ ] Convegno su NIS2 e non solo
• Securityinfo.it
  • [ ] Il dark web prende di mira l’Italia: aumentano le informazioni in vendita sui forum
  • [ ] Il gruppo APT Vanguard Panda usa tecniche innovative per i suoi attacchi
• Forensic Focus
  • [ ] Mitre Att&ck Scanning And Mapping Added To DRONE
• Schneier on Security
  • [ ] Typing Incriminating Evidence in the Memo Field
• TrustedSec
  • [ ] Introducing CoWitness: Enhancing Web Application Testing With External Service Interaction
• 信息安全国家工程研究中心
  • [ ] 网络钓鱼攻击防御指南
  • [ ] 专题·人工智能安全 | 基于人工智能的网络空间内容安全治理方法研究
• Secureworks Blog
  • [ ] Unravelling the Attack Surface of AI Systems
  • [ ] Why MSSPs and SIEM May Not Be Your Best Value
  • [ ] SIEM vs. SOC: Your Security Strategy
• SANS Internet Storm Center, InfoCON: green
  • [ ] The Importance of Malware Triage, (Tue, Jun 27th)
  • [ ] ISC Stormcast For Tuesday, June 27th, 2023 https://isc.sans.edu/podcastdetail/8552, (Tue, Jun 27th)
• Deeplinks
  • [ ] Around the World, Threats to LGBTQ+ Speech Deepen
• Instapaper: Unread
  • [ ] FileZilla Forensics with Python
  • [ ] Windows 11 is getting a built-in passkey manager for Windows Hello
  • [ ] ChatGPT hackerato 100mila accessi rubati, a rischio le nostre chat
• Graham Cluley
  • [ ] DNS can speed up response to threats and make security operations more productive
  • [ ] Political hackers strike City of Fort Worth, in protest at anti-trans legislation
• Trend Micro Research, News and Perspectives
  • [ ] How to Reach Compliance with HIPAA
  • [ ] How Zero Trust Can Help Your Organization: Strengthening Security and Supply Chain Assurance
  • [ ] The Well-Architected Framework Guide
• The Hacker News
  • [ ] New Mockingjay Process Injection Technique Could Let Malware Evade Detection
  • [ ] New Ongoing Campaign Targets npm Ecosystem with Unique Execution Chain
  • [ ] Beyond Asset Discovery: How Attack Surface Management Prioritizes Vulnerability Remediation
  • [ ] EncroChat Bust Leads to 6,558 Criminals' Arrests and €900 Million Seizure
  • [ ] Anatsa Banking Trojan Targeting Users in US, UK, Germany, Austria, and Switzerland
  • [ ] New Fortinet's FortiNAC Vulnerability Exposes Networks to Code Execution Attacks
• Blackhat Library: Hacking techniques and research
  • [ ] Intro to Web Application Security | TryHackMe Introduction to Cyber Security Path
• Your Hacking Tutorial by Zempirians
  • [ ] Bruteforce a http-post-form with Hydra, but the form is protected by basic auth
  • [ ] Got Close to Being Pwned, How to View Previous IP Sessions on Zumper
  • [ ] Dashboard camera
  • [ ] Please help
  • [ ] How to trace back anonymous e-mails sent thru servers?
• NetSPI
  • [ ] 9 Quotes that Capture the State of Offensive Security
  • [ ] NetSPI Offensive Security Solutions Updates: June 2023
• Social Engineering
  • [ ] ~ Robert Greene, Author of THE 48 LAWS OF POWER iAma Interview - June 28 ~
• The Register - Security
  • [ ] Miscreants leak texts and info siphoned by Android stalkerware app LetMeSpy
  • [ ] Cops' total pwnage of 'secure' EncroChat nets 6,500+ arrests, €740m in funds – so far
  • [ ] Warning: JavaScript registry npm vulnerable to 'manifest confusion' abuse
  • [ ] Tackling the cyber skills gap with AI
  • [ ] Cloud security advice and expertise at your fingertips
• Palo Alto Networks Blog
  • [ ] Accenture Teams with Palo Alto Networks to Bolster Zero Trust Security
• Krebs on Security
  • [ ] U.K. Cyber Thug “PlugwalkJoe” Gets 5 Years in Prison
• /dev/random
  • [ ] [SANS ISC] The Importance of Malware Triage
• Computer Forensics
  • [ ] Forensics toolkits for linux?
  • [ ] issue opening .nsf files on encase
  • [ ] Degree/sans
  • [ ] SIM Card USED
• Security Affairs
  • [ ] Mockingjay process injection technique allows EDR bypass
  • [ ] Experts found hundreds of devices within federal networks having internet-exposed management interfaces
  • [ ] Schneider Electric and Siemens Energy are two more victims of a MOVEit attack
  • [ ] JOKERSPY used to target a cryptocurrency exchange in Japan
• Deep Web
  • [ ] como entrar na deep web?
• Technical Information Security Content & Discussion
  • [ ] ParaForge: A BurpSuite extension to create a custom word-list of endpoint and parameters for enumeration and fuzzing
  • [ ] A deep dive on how Camaro Dragon utilized USB flash drives to infect a EU heath system
  • [ ] For Science! - Using an Unimpressive Bug in EDK II to Do Some Fun Exploitation
  • [ ] Hashing Phone Numbers For 2-Factor Authentication
  • [ ] Process Mockingjay: Echoing RWX In Userland To Achieve Code Execution
• Information Security
  • [ ] Hashing Phone Numbers For 2-Factor Authentication
• TorrentFreak
  • [ ] Major Labels Need an Anti-Piracy Sleuth to Probe Pirate Apps
  • [ ] Former Anti-Piracy Boss Becomes Sony Music’s AI Chief
• netsecstudents: Subreddit for students studying Network Security and its related subjects
  • [ ] Application security engineer interview help.
• Paul's Security Weekly
  • [ ] Vendor Consolidation, CISO Burnout Prevention & Maximizing Leadership Potential - Shawn Surber - BSW #310

[github-actions[bot]]

This issue was closed because it has been inactive for 14 days since being marked as stale.