[每日信息流] 2023-06-30

[chainreactorbot]

每日安全资讯（2023-06-30）

• paper - Last paper
  • [ ] GeoServer SQL 注入漏洞分析（CVE-2023-25157）
• Sploitus.com Exploits RSS Feed
  • [ ] Exploit for Code Injection in Vmware Spring Cloud Function exploit
  • [ ] Exploit for Improper Input Validation in Apache Log4J exploit
  • [ ] Exploit for CVE-2023-3338 exploit
  • [ ] Exploit for CVE-2023-2982 exploit
  • [ ] Exploit for OS Command Injection in Easynas exploit
• Trustwave Blog
  • [ ] Safeguarding Patients' Personal Health Information: 7 Steps to Achieving HIPAA Compliance with Trustwave DbProtect
• Recent Commits to cve:main
  • [ ] Update Thu Jun 29 00:13:55 UTC 2023
• Google Online Security Blog
  • [ ] Gmail client-side encryption: A deep dive
• 安全脉搏
  • [ ] 【漏洞预警】Grafana 身份认证绕过漏洞漏洞威胁通告
  • [ ] 界面劫持之拖放劫持
  • [ ] Sudo堆溢出漏洞(CVE-2021-3156)复现
• 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com
  • [ ] 安全向未来 C3安全大会·2023隆重召开 ——数字激荡未来 安全护航未来 产业共创未来
  • [ ] 四叶草安全New Stage2023主题发布会圆满举办
  • [ ] 重磅官宣丨2023 CCS成都网络安全大会8月正式召开！全球议题征集、极客赛事报名启动！
  • [ ] 《安全编排自动化与响应（SOAR）市场研究报告》正式发布
  • [ ] 美国两家航空公司发生了数据泄露事件
  • [ ] Muddled Libra精准高效的攻击组合力让人防不胜防
• 先知安全技术社区
  • [ ] PWN入门之二进制基础
• Security Boulevard
  • [ ] How MSSPs Can Leverage Security Automation
  • [ ] Log Centralization: The End Is Nigh?
  • [ ] EPSS Vs CVSS: How Do They Compare?
  • [ ] The Hunt Is On: Why Threat Hunting Still Reigns Supreme Over Vulnerability Hunting
  • [ ] BSidesSF 2023 – Max G, Jayesh Singh Chauhan – How To CTF Infra – Beyond The Challenges And Flags
  • [ ] Metadata and Data Lineage: Keys to Trustworthy Data
  • [ ] Russian Cybersecurity Executive Arrested for Alleged Role in 2012 Megahacks
  • [ ] Akira Ransomware Targets VMware ESXi Servers
  • [ ] Mitigating the CVE-2023-21716 Vulnerability: Challenges and Solutions
  • [ ] Navigating a JAB Provisional ATO (P-ATO)
• Tenable Blog
  • [ ] OT Maritime Security: Stormy Waters or Smooth Sailing Ahead?
• unSafe.sh - 不安全
  • [ ] CVE-2023-20864: Remote Code Execution in VMware Aria Operations for Logs
  • [ ] 安全向未来 C3安全大会·2023隆重召开 ——数字激荡未来 安全护航未来 产业共创未来
  • [ ] 四叶草安全New Stage2023主题发布会圆满举办
  • [ ] 外设制造商Sabrent推出业界首款8K@60P KVM切换器 基于雷电4协议
  • [ ] 三星公布其代工路线图：2025年量产2nm芯片 2027年量产1.4nm芯片
  • [ ] 网络抓包原理及常用抓包工具
  • [ ] 被骂上热搜后微信支付回应费率高问题：撤回变更重新与高校谈判
  • [ ] How to simulate a high latency network on Linux
  • [ ] Rhysida Ransomware | RaaS Crawls Out of Crimeware Undergrowth to Attack Chilean Army
  • [ ] 推特将推文限制从10000字符提升到25000字符 同时支持嵌入图片
  • [ ] 重磅官宣丨2023 CCS成都网络安全大会8月正式召开！全球议题征集、极客赛事报名启动！
  • [ ] NASA 取消了实验性电动飞机项目 X-57
  • [ ] Public Report – Zcash Zebra Security Assessment
• SecWiki News
  • [ ] SecWiki News 2023-06-29 Review
• 安全客-有思想的安全新媒体
  • [ ] API NEWS | 凭证泄漏导致API漏洞上升
  • [ ] Playwright 入门教程
  • [ ] 全球共书新安全！ISC 2023邀你共同创造吉尼斯世界纪录荣誉
  • [ ] Gartner公布全球Top10受欢迎NDR厂商，2家来自中国
• ZAWX_NETSTARSEC的博客
  • [ ] 中安网星版大模型来了！三大关键能力，不输专业红队攻击手
• Twitter @Nicolas Krassas
  • [ ] From MuddyC3 to PhonyC2: Iran's MuddyWater Evolves with a New Cyber Weapon https://thehackernews.com/2023/06/from-muddyc3-to-phonyc2-irans.html
  • [ ] Artemis - A Modular Web Reconnaissance Tool And Vulnerability Scanner http://www.kitploit.com/2023/06/artemis-modular-web-reconnaissance-tool.html
  • [ ] Technical whitepaper: Everyone Knows SAP®, Everyone Uses SAP, Everyone Uses RFC, No One Knows RFC: From RFC to RCE 16 Years Later https://www.reddit....
  • [ ] Introducing route-detect: find authentication and authorization bugs in web application routes https://www.reddit.com/r/netsec/comments/14m6mhu/introd...
  • [ ] Fluhorse: Flutter-Based Android Malware Targets Credit Cards and 2FA Codes https://thehackernews.com/2023/06/fluhorse-flutter-based-android-malware.ht...
  • [ ] Android Spy App LetMeSpy Suffers Major Data Breach, Exposing Users' Personal Data https://thehackernews.com/2023/06/android-spy-app-letmespy-suffers-m...
  • [ ] North Korean Hacker Group Andariel Strikes with New EarlyRat Malware https://thehackernews.com/2023/06/north-korean-hacker-group-andariel.html
  • [ ] RT Synack Red Team: Oftentimes, resiliency pays off. @kuldeepdotexe shares his strategy for discovering a second order XXE. Read more about his though...
  • [ ] Apple joins the opposition to encryption-bypassing 'spy clause' in UK internet law https://go.theregister.com/feed/www.theregister.com/2023/06/29/appl...
  • [ ] Network security guy in extradition tug of war between US and Russia https://go.theregister.com/feed/www.theregister.com/2023/06/29/russian_facct_empl...
  • [ ] Newly Uncovered ThirdEye Windows-Based Malware Steals Sensitive Data https://thehackernews.com/2023/06/newly-uncovered-thirdeye-windows-based.html
  • [ ] Microsoft Sysmon now detects when executables files are created https://www.bleepingcomputer.com/news/microsoft/microsoft-sysmon-now-detects-when-exec...
  • [ ] Critical Security Flaw in Social Login Plugin for WordPress Exposes Users' Accounts https://thehackernews.com/2023/06/critical-security-flaw-in-social...
  • [ ] Windows x64 kernel mode rootkit process hollowing POC. https://github.com/XaFF-XaFF/Kernel-Process-Hollowing
  • [ ] LetMeSpy Phone-Tracking App Hacked, Revealing User Data https://www.darkreading.com/attacks-breaches/letmespy-phone-tracking-app-hacked-revealing-user...
  • [ ] Exploit released for new Arcserve UDP auth bypass vulnerability https://www.bleepingcomputer.com/news/security/exploit-released-for-new-arcserve-udp-a...
  • [ ] Linux version of Akira ransomware targets VMware ESXi servers https://www.bleepingcomputer.com/news/security/linux-version-of-akira-ransomware-targets...
• • [ ] Spamdexing: What is SEO Spam & How to Remove It
• Horizon3.ai
  • [ ] You Can’t Manage Risk if You Lack Context
• SAP Blogs
  • [ ] The latest from SAP SuccessFactors Onboarding: Enhanced experiences to boost productivity and deliver greater value to you and your employees
  • [ ] SAP BTP Innobytes – June 2023
  • [ ] SAP E-Mobility: Smart Charging Using Vehicle Data
  • [ ] Deadline Monitoring with E-mail Notification in PO Flexible Workflow
  • [ ] How to prevent implicit Goods Receipt posting in SAP EWM
  • [ ] SAP Business Transformation Center – Digital Blueprint
  • [ ] SAP OOPS LOCAL ABSTRACT CLASS PART: 2
  • [ ] Manage your project documentation using SAP Cloud ALM
  • [ ] Webinar: Build a Future-Ready Workforce with SAP Analytics Cloud for Planning
  • [ ] Powering Efficient Supply Chains: SAP Datasphere’s Integration with Google Cloud’s Architecture
• Reverse Engineering
  • [ ] CVE-2023-20864: Remote Code Execution in VMware Aria Operations for Logs
• Malware-Traffic-Analysis.net - Blog Entries
  • [ ] 2023-06-29 - 30 days of Formbook: Day 25, Thursday 2023-06-29 - "CS94"
  • [ ] 2023-06-28 - IcedID (Bokbot) activity
  • [ ] 2023-06-26 - Files for an ISC diary (Loader-style infection for Remcos RAT)
• Twitter @bytehx
  • [ ] RT James Kettle: We've just published a new @WebSecAcademy topic on GraphQL! Learn how to abuse introspection, discover hidden data, bypass rate-limit...
• Malwarebytes Labs
  • [ ] Top contenders in Endpoint Security revealed: G2 Summer 2023 results
• SentinelOne
  • [ ] Rhysida Ransomware | RaaS Crawls Out of Crimeware Undergrowth to Attack Chilean Army
• PortSwigger Blog
  • [ ] BChecks: Houston, we have a solution!
• FreeBuf网络安全行业门户
  • [ ] 定制化白盒检测 | 越权漏洞的治理分享
  • [ ] 金融监管总局发布《关于加强第三方合作中网络和数据安全管理的通知》
  • [ ] 离职员工窃取源代码，半年狂赚 1.5 亿元
  • [ ] FreeBuf 早报 | Brave将引入新的限制控制；新勒索软件团伙8Base声名鹊起
  • [ ] 研究人员发出警告，小心Akira勒索软件的Linux变体
  • [ ] Brave将引入新的限制控制，以提高用户隐私保护！
  • [ ] 受害者猛增，新勒索软件团伙8Base开始“声名鹊起”
• rtl-sdr.com
  • [ ] Meteor M2-3 Now In Orbit and Transmitting Weather Images
• Private Feed for M09Ic
  • [ ] Ak74-577 starred jbaines-r7/badblood
  • [ ] Ak74-577 starred blackhatethicalhacking/CVE-2020-2034-POC
  • [ ] zema1 released Suo5 v0.9.0 at zema1/suo5
  • [ ] Ak74-577 starred horizon3ai/CVE-2022-40684
  • [ ] Ak74-577 starred imbas007/CVE-2023-27997-Check
  • [ ] idiotc4t starred werdhaihai/AtlasReaper
  • [ ] zema1 forked zema1/gosocks5 from go-gost/gosocks5
  • [ ] uknowsec starred WKL-Sec/WMIExec
  • [ ] timwhitez starred passthehashbrowns/BOFMask
  • [ ] gh0stkey starred ZacharyZcR/SecGPT
  • [ ] 0e0w starred HackJava/HackJava
  • [ ] liamg starred caarlos0/env
  • [ ] Ridter starred wheybags/glibc_version_header
  • [ ] whwlsfb starred messense/aliyundrive-webdav
  • [ ] uknowsec starred wafinfo/Hikvision
  • [ ] Ridter starred anhkgg/SuperRDP
  • [ ] Ridter starred alexbei/telegram-groups
  • [ ] Ridter starred NixOS/patchelf
  • [ ] niudaii starred traefik/yaegi
  • [ ] niudaii starred BishopFox/jsluice
  • [ ] WangYihang starred mvisonneau/gitlab-ci-pipelines-exporter
  • [ ] zema1 starred vi3t1/qq-tim-elevation
  • [ ] zema1 starred mengjian-github/copilot-analysis
• 绿盟科技技术博客
  • [ ] nginxWebUI runCmd远程命令执行漏洞通告
• 体验盒子
  • [ ] 网络抓包原理及常用抓包工具
• 安全牛
  • [ ] 简析大型集团企业网络安全人才培养的规划与挑战
  • [ ] 客户案例：构建可靠海外通邮系统，护航教育行业信息安全
  • [ ] 好成绩接二连三 瑞星三款软件产品通过赛可达评测
• 奇客Solidot–传递最新科技情报
  • [ ] NASA 取消了实验性电动飞机项目 X-57
  • [ ] FAST 观察到引力波踪迹
  • [ ] 国家地理裁掉了所有专职作家
  • [ ] GitHub DDoS 开源网站遭批评
  • [ ] Brave 将自动屏蔽浏览器端口扫描
  • [ ] 维生素D 或有助于降低老年人的心脏病风险
  • [ ] 英伟达不赞同扩大对华 AI 芯片出口限制
  • [ ] Reddit 施压抗议 Mod，Minecraft 开发者宣布退出 Subreddit
  • [ ] ReactOS 项目还活着
• 黑海洋 - WIKI
  • [ ] 在线虚拟身份信息生成器
• Secureworks Blog
  • [ ] Infinios Partners with Secureworks for Stronger Cybersecurity
• KitPloit - PenTest & Hacking Tools
  • [ ] Artemis - A Modular Web Reconnaissance Tool And Vulnerability Scanner
• Over Security - Cybersecurity news aggregator
  • [ ] GCHQ reveals British government was hacked by foreign cyber spies 20 years ago
  • [ ] More than 16 million people and counting have had data exposed in MOVEit breaches
  • [ ] Hollywood insider’s potential bid for NSO prompts warning from White House
  • [ ] YouTube tests restricting ad blocker users to 3 video views
  • [ ] Why an Illinois law is at the center of Congress’ debate on new data privacy legislation
  • [ ] Russian Cybersecurity Executive Arrested for Alleged Role in 2012 Megahacks
  • [ ] CISA working with agencies to pull exposed network tools from public internet
  • [ ] Hackers claim to take down Russian satellite communications provider
  • [ ] New video provides a behind-the-scenes look at Talos ransomware hunters
  • [ ] Microsoft rolls out early Windows Copilot preview to Insiders
  • [ ] New EarlyRAT malware linked to North Korean Andariel hacking group
  • [ ] Spamdexing: What is SEO Spam & How to Remove It
  • [ ] S3 Ep141: What was Steve Jobs’s first job?
  • [ ] MITRE releases new list of top 25 most dangerous software bugs
  • [ ] Pro-Russia DDoSia hacktivist project sees 2,400% membership increase
  • [ ] Linee guida per la Certificazione OSED
  • [ ] Proton launches open-source password manager with some limitations
  • [ ] Criminal IP Unveils Bug Bounty Program to Boost User Safety, Security
  • [ ] Hacking Auto-GPT and escaping its docker container
  • [ ] Il ransomware Akira prende di mira macchine virtuali VMware ESXi su piattaforma Linux: i dettagli
  • [ ] Sicurezza come elemento di innovazione: cosa dice l’Agenda di ricerca e innovazione di ACN
  • [ ] Software Defined “everything” (SDx): cos’è, modelli di minaccia e best practice difensive
  • [ ] How Talos IR’s Purple Team can help you prepare for the worst-case scenario
  • [ ] Intelligence, più efficienza e collaborazione con l’università: ecco la riforma Mantovano
  • [ ] Microsoft fixes bug that breaks Windows Start Menu, UWP apps
  • [ ] Trellix fixes bug breaking Office apps after June Windows updates
  • [ ] Blocco del riconoscimento facciale in Italia: proroga fino al 2025 per restare in Europa
  • [ ] Nuove tecniche di social engineering sfruttano le notifiche del browser
  • [ ] White House outlines cyber budget priorities, including making ransomware ‘no longer profitable’
• Securityinfo.it
  • [ ] Nuove tecniche di social engineering sfruttano le notifiche del browser
• Il Disinformatico
  • [ ] ANTEPRIMA Podcast RSI - Story: Gli orrori annunciati dell’IA diventano realtà. Come reagire?
  • [ ] Starship e “hot staging”, cambiamenti radicali prima del prossimo volo di prova
• Eric Conrad
  • [ ] Introducing DeepBlueCLI v3
• SANS Internet Storm Center, InfoCON: green
  • [ ] GuLoader- or DBatLoader/ModiLoader-style infection for Remcos RAT, (Thu, Jun 29th)
  • [ ] ISC Stormcast For Thursday, June 29th, 2023 https://isc.sans.edu/podcastdetail/8556, (Thu, Jun 29th)
• Schneier on Security
  • [ ] Redacting Documents with a Black Sharpie Doesn’t Work
• Forensic Focus
  • [ ] MSAB Raises The Bar In Digital Forensics With Industry-Leading BFU UNISOC Support And New Features
  • [ ] Digital Forensics Round-Up, June 29 2023
• bellingcat
  • [ ] Analysing the Cost of Wagner Revolt
  • [ ] Satellite Imagery Reveals Russia Caused Flooding in Occupied Ukrainian Town Before Counteroffensive
• TorrentFreak
  • [ ] Movie Companies Cannot Use Piracy Notice Scheme to Facilitate Class Action
  • [ ] Court Sentences YouTube Content ID Scammer to Over Five Years in Prison
• Trend Micro Research, News and Perspectives
  • [ ] Human vs Machine Identity Risk Management
  • [ ] Meet NIST Compliance Standards Using Automation
• The Register - Security
  • [ ] Crook who stole $23m+ in YouTube song royalties gets five years behind bars
  • [ ] It's 2023 and memory overwrite bugs are not just a thing, they're still number one
  • [ ] Chinese balloon that US shot down was 'crammed' with American hardware
  • [ ] Now Apple takes a bite out of encryption-bypassing 'spy clause' in UK internet law
  • [ ] Network security guy in extradition tug of war between US and Russia
• Information Security
  • [ ] How do you educate your employees about data protection best practices?
• TG Soft Software House - News
  • [ ] Vir.IT eXplorer PRO supera, ottenendo il massimo risultato, l'ultimo test effettuato a Maggio 2023 da AppEsteem per i prodotti AV DeceptorFighters
• Instapaper: Unread
  • [ ] Stalkerware Vendor Hacked
  • [ ] Should We Chat Privacy in the WeChat Ecosystem
  • [ ] Riconoscimento facciale, il blocco in Italia è stato prorogato al 2025
• The Hacker News
  • [ ] From MuddyC3 to PhonyC2: Iran's MuddyWater Evolves with a New Cyber Weapon
  • [ ] Fluhorse: Flutter-Based Android Malware Targets Credit Cards and 2FA Codes
  • [ ] The Right Way to Enhance CTI with AI (Hint: It's the Data)
  • [ ] North Korean Hacker Group Andariel Strikes with New EarlyRat Malware
  • [ ] Android Spy App LetMeSpy Suffers Major Data Breach, Exposing Users' Personal Data
  • [ ] Critical Security Flaw in Social Login Plugin for WordPress Exposes Users' Accounts
  • [ ] Newly Uncovered ThirdEye Windows-Based Malware Steals Sensitive Data
• Social Engineering
  • [ ] what ways can you alleviate someone's fears?
  • [ ] Joe Biden wasn't the first to sell out and use his government position to get rich. Until we ban all lobbying and insider trading and revolving doors in every form, this system is beyond f***ed and isn't even close to a representative democracy
  • [ ] Bill Gates funds a mosquito factory, and now we have malaria in the US. Probably just, yet another, coincidence.
• netsecstudents: Subreddit for students studying Network Security and its related subjects
  • [ ] practical-devsecops
  • [ ] SEC 401 or SEC 488?
• Krebs on Security
  • [ ] Russian Cybersecurity Executive Arrested for Alleged Role in 2012 Megahacks
• Computer Forensics
  • [ ] Dfe
• Blackhat Library: Hacking techniques and research
  • [ ] Printer Exploitation | Part Two | HackTheBox Wander
  • [ ] Want to Know about Black Arch Linux and setup of Black Arch Linux on GCP (Google Cloud Platform), Checkout this Blog Post.
• Technical Information Security Content & Discussion
  • [ ] Hacking Auto-GPT and escaping its docker container
  • [ ] Frida 16.1.0 is out w/ a brand new backend that supports instrumenting barebone targets — ranging from microcontrollers all the way to the iOS kernel on Corellium, allowing you to instantly inject your own Rust code and insert inline hooks
  • [ ] 0-day vulnerability found in Netskope leading to a Local Privilege Escalation.
  • [ ] Introducing route-detect: find authentication and authorization bugs in web application routes
  • [ ] Finding Gadgets for CPU Side-Channels with Static Analysis Tools
  • [ ] Technical whitepaper: Everyone Knows SAP®, Everyone Uses SAP, Everyone Uses RFC, No One Knows RFC: From RFC to RCE 16 Years Later
• Security Affairs
  • [ ] The phone monitoring app LetMeSpy disclosed a data breach
  • [ ] Previously undetected ThirdEye malware appears in the threat landscape
  • [ ] Former Group-IB manager has been arrested in Kazahstan
  • [ ] Experts published PoC exploits for Arcserve UDP authentication bypass issue
• NetSPI
  • [ ] Anti-Scraping Part 1: Core Principles to Deter Scraping
• Your Hacking Tutorial by Zempirians
  • [ ] Need a little help
  • [ ] UNABLE TO CONNECT TO TRYHACKME'S NETWORK USING OPENVPN. TRIED MANY TIMES BUT NOT ABLE TO CONNECT TO TRYHACKME'S MACHINES USING MY OWN KALI LINUX SYSTEM...
• Graham Cluley
  • [ ] Over 1500 gas stations disrupted in Canada, after energy giant hacked
  • [ ] Smashing Security podcast #328: UPS smishing, ChatGPT 101, and storing secret files
• KitPloit - PenTest Tools!
  • [ ] Artemis - A Modular Web Reconnaissance Tool And Vulnerability Scanner
• Paul's Security Weekly
  • [ ] Adversary Emulation w/ Carlos Perez - PSW #789

[github-actions[bot]]

This issue was closed because it has been inactive for 14 days since being marked as stale.