[每日信息流] 2023-07-21

[chainreactorbot]

每日安全资讯（2023-07-21）

• 先知安全技术社区
  • [ ] 记一次不存在的加解密实战渗透
  • [ ] DedeCMS v5.7 -- 后台RCE漏洞详解
  • [ ] Axis2 高版本Getshell方法
• 90Sec - 最新话题
  • [ ] 网络安全的意义
• Der Flounder
  • [ ] Disabling in-app review requests for apps installed from the macOS App Store
  • [ ] Slides from the “Introduction to Declarative MDM” session at Penn State MacAdmins 2023
• Google Online Security Blog
  • [ ] Supply chain security for Go, Part 3: Shifting left
  • [ ] A look at Chrome’s security review culture
• 安全客-有思想的安全新媒体
  • [ ] 数字安全观察每周简报第104期【安全事件篇】
• Twitter @Nicolas Krassas
  • [ ] Re @Jhaddix @schniggie I have reported same issues on burp support also, new burp release are blind on some categories of vulnerabilities. It’s been ...
  • [ ] This tool simplifies the task for red team operators and security teams to identify which MSI files correspond to which software and enables them to d...
• Sec-News 安全文摘
  • [ ] CVE-2023-34192 —— Zimbra XSS To RCE
  • [ ] 打造自己的AIGC应用（一）入门篇
  • [ ] CVE-2023-38408: Remote Code Execution in OpenSSH's forwarded ssh-agent
• Sploitus.com Exploits RSS Feed
  • [ ] phpFM 1.7.9 Authentication Bypass / Shell Upload exploit
  • [ ] CMS Nexin Adminisztracios Kozpont 1.2 Insecure Settings exploit
  • [ ] CMS Made Simple 2.2.17 Remote Code Execution exploit
  • [ ] PimpMyLog 1.7.14 Improper Access Control exploit
  • [ ] Wifi Soft Unibox Administration 3.0 & 3.1 - SQL Injection exploit
  • [ ] Boom CMS v8.0.7 - Cross Site Scripting exploit
  • [ ] CMS porViaX 2.0 SQL Injection exploit
  • [ ] CMS iQ-Digital 2.0 Cross Site Scripting exploit
  • [ ] CMS D-Creations 1.0 SQL Injection exploit
  • [ ] TP-Link TL-WR740N Directory Traversal exploit
  • [ ] OpenSSH Forwarded SSH-Agent Remote Code Execution exploit
  • [ ] CMS Made Simple 2.2.17 Server-Side Template Injection exploit
  • [ ] RWS WorldServer 11.7.3 - Session Token Enumeration exploit
  • [ ] statamic 4.7.0 Cross Site Scripting exploit
  • [ ] Blackcat CMS 1.4 Shell Upload exploit
  • [ ] Microsoft Office 365 Version 18.2305.1222.0 - Elevation of Privilege + RCE. exploit
  • [ ] CMS EngePlus 2.0.1 Cross Site Scripting exploit
  • [ ] Backdrop CMS 1.25.1 Cross Site Scripting exploit
  • [ ] ABB FlowX 4.00 Information Disclosure exploit
  • [ ] Webile v1.0.1 - Multiple Cross Site Scripting exploit
  • [ ] pfSense v2.7.0 - OS Command Injection exploit
  • [ ] Online Piggery Management System 1.0 Shell Upload exploit
  • [ ] Joomla! Booking 2.4.9 Account Enumeration exploit
  • [ ] ViaTalk CP - Cross Site Scripting Web Vulnerability exploit
  • [ ] CMS NaiveScripters 3.0.1 Cross Site Scripting exploit
  • [ ] Blackcat CMS 1.4 Cross Site Scripting exploit
  • [ ] Exploit for Off-by-one Error in F5 Nginx exploit
  • [ ] Exploit for Improper Authentication in Automattic Woocommerce Payments exploit
  • [ ] Exploit for Code Injection in Citrix Netscaler Application Delivery Controller exploit
• Trustwave Blog
  • [ ] Stopping Threat Actors from Gaining Initial Access
• unSafe.sh - 不安全
  • [ ] CVE-2023-36934: Progress Software MOVEit Transfer SQL Injection Remote Code Execution Vulnerability
  • [ ] Elevate to NT AUTHORITY\SYSTEM with CVE-2018-19321
  • [ ] 为反对英国在线安全法苹果威胁要在英国关停iMessage和FaceTime
  • [ ] 解决Aws rhel7系统无法使用YUM源的问题
  • [ ] To The Point Cybersecurity Podcast Episodes from the First Half of 2023
  • [ ] 更适合 Win 11 的窗口分组工具 Groupy 2，限时特惠仅需 59 元
  • [ ] Protecting data on Apple devices with Cloudflare and Jamf
• 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com
  • [ ] Fortinet Accelerate 2023·中国区巡展收官丨让安全成就未来
  • [ ] 梆梆安全又双叒叕登榜中国金融科技竞争力百强，彰显金融安全硬实力！
  • [ ] “特别推荐案例+创新安全方案”，梆梆安全亮相2023中国互联网大会
  • [ ] 2023年中特别回馈活动（含恶意样本提交激励计划年中回顾）
  • [ ] CACTER邮件安全网关V7.0支持独家域内垃圾邮件检测！
  • [ ] 业界首次！2023中国互联网大会AI安全论坛发布《共建安全大模型高质量数据集倡议书》
  • [ ] 2023CCS大会亮点前瞻！参会报名已开启，面向全民免费参与！
  • [ ] 世平信息完成新一轮战略融资
  • [ ] WormGPT：生成式AI被用于发起商业邮件攻击
  • [ ] 逆向工程物联网固件解析part 2
• Files ≈ Packet Storm
  • [ ] Debian Security Advisory 5456-1
  • [ ] Ubuntu Security Notice USN-6239-1
  • [ ] OpenSSH Forwarded SSH-Agent Remote Code Execution
  • [ ] Red Hat Security Advisory 2023-4158-01
  • [ ] jSQL Injection 0.88
  • [ ] Ubuntu Security Notice USN-6237-2
  • [ ] Red Hat Security Advisory 2023-4210-01
  • [ ] Online Piggery Management System 1.0 Shell Upload
  • [ ] Red Hat Security Advisory 2023-4177-01
  • [ ] Red Hat Security Advisory 2023-4211-01
  • [ ] Hikvision Hybrid SAN Ds-a71024 SQL Injection
  • [ ] Red Hat Security Advisory 2023-4175-01
  • [ ] Red Hat Security Advisory 2023-4176-01
  • [ ] CMS Nexin Adminisztracios Kozpont 1.2 Insecure Settings
  • [ ] CMS NaiveScripters 3.0.1 Cross Site Scripting
  • [ ] CMS iQ-Digital 2.0 Cross Site Scripting
  • [ ] CMS porViaX 2.0 SQL Injection
  • [ ] Red Hat Security Advisory 2023-4208-01
  • [ ] Red Hat Security Advisory 2023-4209-01
  • [ ] TP-Link TL-WR740N Directory Traversal
  • [ ] Red Hat Security Advisory 2023-4212-01
  • [ ] Red Hat Security Advisory 2023-4161-01
  • [ ] Red Hat Security Advisory 2023-4230-01
  • [ ] Pluck 4.7.18 Remote Shell Upload
  • [ ] Blackcat CMS 1.4 Shell Upload
• Recent Commits to cve:main
  • [ ] Update Thu Jul 20 00:20:34 UTC 2023
• SecWiki News
  • [ ] SecWiki News 2023-07-20 Review
• arighi's blog
  • [ ] Implement your own kernel CPU scheduler in Ubuntu with sched-ext
• Exodus Intelligence
  • [ ] Shifting boundaries: Exploiting an Integer Overflow in Apple Safari
• • [ ] How to Recognize & Avoid Phishing Emails: A Cautionary Tale
• Forcepoint
  • [ ] To The Point Cybersecurity Podcast Episodes from the First Half of 2023
• Security Boulevard
  • [ ] Is Artificial Intelligence Making People More Secure? Or Less?
  • [ ] 3 Troubling Ransomware Trends You Need to Know About
  • [ ] Cyber Resilience Act: The Future of Software in the European Union
  • [ ] BSides Sofia 2023 – Plamen Kalchev – Commit To Memory Making The Best Of Your Notes
  • [ ] AI Alone Is Not the Answer to Cybersecurity; Humans Are Needed
  • [ ] Wallarm at Black Hat USA 2023 Booth #3131
  • [ ] Randall Munroe’s XKCD ‘Marshmallow’
  • [ ] The Week in Security: Google Cloud Build permissions can be poisoned, WormGPT weaponizes AI
  • [ ] 2023 Fraud Trends to Know and Prevent
  • [ ] New P2P Worm Puts Windows and Linux Redis Servers in its Sights
• Planet Classpath
  • [ ] Riccardo Mottola: ArcticFox 42.1 released
• NVISO Labs
  • [ ] The SOC Toolbox: Analyzing AutoHotKey compiled executables
• GuidePoint Security
  • [ ] Quarterly GRIT Ransomware Report – Q2 2023
• SAP Blogs
  • [ ] How SAP S/4HANA Cloud Helps to Strategize Proactive Maintenance
  • [ ] Customer Aging and Supplier Aging Reports at the Line Item Level using Analytical Query in S/4HANA Cloud, Public Edition
  • [ ] HCM Brasil: eSocial – Guia de implementação da versão S-1.2
  • [ ] Change Record & Management of Change: Unraveling the Transformation Tango – A Feature-Fueled Faceoff!
  • [ ] Google Cloud and SAP enable native integration between  Google Workspace, SAP S/4HANA and SAP S/4HANA Cloud
  • [ ] Cloud Integration: How to call iFlow from XSUAA-based application in BTP
  • [ ] General approach of SAP Data and Analytics Advisory Methodology
  • [ ] Unboxing the New Manage Journal Entries App
  • [ ] From Soccer Mom to Cybersecurity Expert: How SAP Helped Natasha Mulford Turn Her Life Around
  • [ ] Introducing New Enhancements to SAP SuccessFactors Work Zone: Streamline Your Workflows and Boost Productivity
• Reverse Engineering
  • [ ] CVE-2023-36934: Progress Software MOVEit Transfer SQL Injection Remote Code Execution Vulnerability
  • [ ] Elevate to NT AUTHORITY\SYSTEM with CVE-2018-19321
• Bug Bounty in InfoSec Write-ups on Medium
  • [ ] My First Grafana Admin Bug Bounty — with Google Dork — $xxx
  • [ ] Solving SQL Injection Fundamentals HTB CTF
• Malwarebytes Labs
  • [ ] Google fixes "Bad.Build" Cloud Build flaw, researchers say it's not enough
  • [ ] Accidental VirusTotal upload is a valuable reminder to double check what you share
  • [ ] Amazon in-van delivery driver footage makes its way online
• bishopfox.com
  • [ ] Introducing jsluice: The Why Behind JavaScript Gold Mining (Part 1)
  • [ ] Introducing jsluice: A Technial Deep-Dive for JavaScript Gold (Part 2)
• Wallarm
  • [ ] Wallarm at Black Hat USA 2023 Booth #3131
• Exploit-DB.com RSS Feed
  • [ ] [webapps] RWS WorldServer 11.7.3 - Session Token Enumeration
  • [ ] [webapps] PaulPrinting CMS - Multiple Cross Site Web Vulnerabilities
  • [ ] [webapps] Aures Booking & POS Terminal - Local Privilege Escalation
  • [ ] [webapps] Webile v1.0.1 - Multiple Cross Site Scripting
  • [ ] [webapps] Boom CMS v8.0.7 - Cross Site Scripting
  • [ ] [local] RaidenFTPD 2.4.4005 - Buffer Overflow (SEH)
  • [ ] [webapps] Wifi Soft Unibox Administration 3.0 & 3.1 - SQL Injection
  • [ ] [remote] Microsoft Office 365 Version 18.2305.1222.0 - Elevation of Privilege + RCE.
  • [ ] [webapps] pfSense v2.7.0 - OS Command Injection
• 体验盒子
  • [ ] 职业的四大象限
• Black Hills Information Security
  • [ ] Shenetworks’ Guide to Landing Your First Tech Job
• 安全牛
  • [ ] “特别推荐案例+创新安全方案”，梆梆安全亮相2023中国互联网大会
  • [ ] 梆梆安全又双叒叕登榜中国金融科技竞争力百强，彰显金融安全硬实力！
  • [ ] 荣耀时刻｜江南信安荣获“北京市共铸诚信企业”称号
  • [ ] 2023中国互联网大会AI安全论坛发布业界首个《共建安全大模型高质量数据集倡议书》
  • [ ] 2023年第二季度邮件安全观察：诈骗邮件内容更加流利
  • [ ] 产业观察 | 安恒信息战略投资数据安全厂商世平信息
  • [ ] 2023年最热门的多云安全解决方案及其特点分析
  • [ ] 齐向东出席中国互联网大会：数实融合 安全第一
• 黑海洋 - WIKI
  • [ ] 解决Aws rhel7系统无法使用YUM源的问题
• Private Feed for M09Ic
  • [ ] IC3-CR3AM starred lem0nSec/ShellGhost
  • [ ] TideSec starred linshaoSec/WaterExp
  • [ ] liamg starred owenrumney/spotiJ
  • [ ] LoRexxar started following lem0nSec
  • [ ] Ak74-577 starred LTianHang/ShiroUploadTools
  • [ ] WangYihang starred gocolly/colly
  • [ ] WangYihang starred godoctor/godoctor
  • [ ] 4ra1n starred lem0nSec/ShellGhost
  • [ ] 4ra1n starred novysodope/fupo_for_yonyou
  • [ ] FunnyWolf starred Meltedd/HVNC
  • [ ] DVKunion starred teamssix/twiki
  • [ ] phith0n starred dwisiswant0/ppfuzz
  • [ ] whwlsfb starred LizardByte/Sunshine
  • [ ] Ridter starred foxlox/GIUDA
  • [ ] TideSec starred shmilylty/netspy
  • [ ] shmilylty starred lele8/SharpDBeaver
• 奇客Solidot–传递最新科技情报
  • [ ] Kevin Mitnick 去世，享年 59 岁
  • [ ] 关于 0-day 数字军火行业
  • [ ] 神秘天体每 20 分钟闪烁一次
  • [ ] 研究称 ChatGPT 性能下降，OpenAI 否认
  • [ ] 母乳含有独特的抗体组合
  • [ ] 苹果开发自己的大语言模型和 AI 工具
  • [ ] Google 称其算法并不优待 AI 生成内容
  • [ ] 斯坦福大学校长将辞职，其论文将撤回或修正
  • [ ] 暴雪游戏将登陆 Steam 平台
• Microsoft Security Response Center
  • [ ] Updated Researcher Portal Submission Form: Discover the New Fields in the Submission Form
• 看雪学苑
  • [ ] 世界头号黑客 Kevin Mitnick 逝世，享年59岁
  • [ ] Windows 之 CRT的检测内存泄露
  • [ ] 更新至第二章！看雪安卓高级研修班（月薪一万计划）
• HackerNews
  • [ ] 第一个被 FBI 通缉的黑客离世
  • [ ] 成千上万的 OpenAI 凭证在暗网上待售
  • [ ] WhatsApp 在全球范围内宕机，超 20 万用户受影响
  • [ ] 事关 5G 安全威胁！CISA 和 NSA 发布最新指南
  • [ ] 一个错误操作致美国、德国情报机构雇员信息泄漏
  • [ ] 双重伤害！雅诗兰黛同时遭遇两个勒索软件的攻击
• 代码卫士
  • [ ] 一个字母之差，数百万份美军邮件源源不断地发给俄罗斯盟友
  • [ ] 谷歌推出新的安全试点计划，禁止员工访问互联网
• 腾讯玄武实验室
  • [ ] 每日安全动态推送(7-20)
• K4YT3X
  • [ ] 为 UnblockNeteaseMusic Docker 服务生成自己的证书
• 青衣十三楼飞花堂
  • [ ] 关闭Win10/Win11的自动更新
• 白帽100安全攻防实验室
  • [ ] 关于mavlink协议及环境配置
• 代码审计SDL
  • [ ] 常见JAVA反序列化危险对象列表
• 安全内参
  • [ ] 主张“利润高于安全”的微软产品又被黑！美国前网络高官再谈软件安全监管
  • [ ] 涉数据安全管理缺失等11项违规，浙江农商联合银行被罚380万
• 极客公园
  • [ ] 越来越像 AI 公司的特斯拉，三个月涨了 4400 亿美金
  • [ ] 传抖音即将进军「基金销售」；美团或已入股大模型公司智谱 AI；地表最强 2.0T 奔驰车曝光 | 极客早知道
• 丁爸 情报分析师的工具箱
  • [ ] 【资料】开源情报调查人员用人工智能（AI）（ChatGPT）打击散布信息和伪造评论的实用指南
  • [ ] 【培训】能力及业务体系建设高级实训班8月湖南警院开班
• 中国信息安全
  • [ ] 全国政协委员周鸿祎：学习促进民营经济发展壮大的意见 以创新驱动助力高质量发展
  • [ ] 专家观点 | 做好网信工作要贯彻落实“十个坚持”
  • [ ] 中国代表：人工智能问题凸显构建人类命运共同体的重要性、必要性、紧迫性
  • [ ] 聚焦 | 2023中国互联网大会AI安全论坛发布业界首个《共建安全大模型高质量数据集倡议书》
  • [ ] CNNVD | 关于Oracle多个安全漏洞的通报
  • [ ] 通知 | 信安标委征求国家标准《信息安全技术 网络安全产品互联互通框架（征求意见稿）》意见（附全文）
  • [ ] 《生成式人工智能服务管理暂行办法》解读——明确“不适用”场景 充分“松绑”AI发展
  • [ ] 注意 | 教育部 公安部联合发布防骗预警提示
• FreeBuf网络安全行业门户
  • [ ] 缅怀，一代传奇黑客离世
  • [ ] FreeBuf 早报 | 雅诗兰黛同时遭遇两个勒索软件的攻击；CISA和NSA发布最新指南
  • [ ] 成千上万的 OpenAI 凭证在暗网上待售
  • [ ] 双重伤害！雅诗兰黛同时遭遇两个勒索软件的攻击
  • [ ] 事关5G安全威胁！CISA和NSA发布最新指南
  • [ ] WhatsApp 在全球范围内宕机，超20万用户受影响
• 安全研究GoSSIP
  • [ ] G.O.S.S.I.P 阅读推荐 2023-07-20 eBPF 入门和进阶
• 数世咨询
  • [ ] 大多数企业SIEM检测不出MITRE ATT&CK攻击
  • [ ] 世平信息完成新一轮战略融资
• 关键基础设施安全应急响应中心
  • [ ] 方滨兴：网络安全保险保障数字经济高质量发展
  • [ ] 网络犯罪盯上ESG领域！挪威资源回收巨头被黑导致部分系统瘫痪
  • [ ] SaaS安全对于人工智能应用安全至关重要的3个原因
• 补天平台
  • [ ] 奖金翻倍| 补天专属厂商“翼支付”活动上线！
  • [ ] 现金奖励| 2023补天通用型漏洞专项活动第一期来啦！
• 深信服千里目安全技术中心
  • [ ] 【漏洞通告】Atlassian Confluence 远程代码执行漏洞 CVE-2023-22508
• Yak Project
  • [ ] yaklang的新标准库：SCA
• 赛博少女
  • [ ] CVE-2023-34192 —— Zimbra XSS To RCE
• CNCERT国家工程研究中心
  • [ ] 伊朗黑客盯上核安全专家，短短一周内将Windows感染链移植到了Mac
  • [ ] 化妆品巨头雅诗兰黛遭遇网络攻击致部分业务运营中断
  • [ ] PyPI 中发现六个针对 Windows 用户的恶意软件包
• Beacon Tower Lab
  • [ ] 工具推荐之不出网环境下上线CS
• Checkmarx.com
  • [ ] Checkmarx Introduces Codebashing 2.0, the First AppSec Solution to Boost Developer Experience and Adoption with New Gamified User Interface
• 火绒安全
  • [ ] 火绒安全 & 统信UOS，联合打造“终端纵深主动防御解决方案”
• Qualys Security Blog
  • [ ] Part I: Implementing Effective Cyber Security Metrics That Reduce Risk Realistically
• 鱼凫游民随笔
  • [ ] 一些关于CobaltStike的闲言碎语
• 奇安信威胁情报中心
  • [ ] BCS2023威胁情报技术论坛——《漏洞情报：走出漏洞处置的泥潭》
• Securityinfo.it
  • [ ] KillNet aumenta le proprie capacità e stringe nuove collaborazioni
• ICT Security Magazine
  • [ ] Presentato al Senato il Rapporto CENSIS-IISFA
• 黑伞安全
  • [ ] 好项目分享：一个红队知识仓库
• 三六零CERT
  • [ ] 安全日报（2023.07.20）
• Javvad Malik
  • [ ] ​​The Great Google Experiment: Googlers Trapped in an Internet-Free Wonderland
• Over Security - Cybersecurity news aggregator
  • [ ] GitHub warns of Lazarus hackers targeting devs with malicious projects
  • [ ] How to Quickly Find & Fix Mixed Content Issues (SSL/HTTPS)
  • [ ] FTC, HHS warn health providers not to use tracking tech in websites, apps
  • [ ] How to Recognize & Avoid Phishing Emails: A Cautionary Tale
  • [ ] Cyberattack on GitHub customers linked to North Korean hackers, Microsoft says
  • [ ] LockBit Ransomware: Inside the World’s Most Active Ransomware Group
  • [ ] The federal government’s cybersecurity policies are falling into place just in time to be stalled again
  • [ ] Apple accuses UK government of trying to become ‘global arbiter’ of encryption
  • [ ] ‘It feels like a digital hurricane’: Coastal Mississippi county recovering from ransomware attack
  • [ ] Cyber assistance bills for agriculture sector gain bipartisan attention in Senate
  • [ ] Critical AMI MegaRAC bugs can let hackers brick vulnerable servers
  • [ ] Cyber Resilience Act: la UE approva, ecco la roadmap
  • [ ] Google Chrome gets Windows 11's new design - how to enable it
  • [ ] Tampa hospital says sensitive data of 1.2 million stolen in failed ransomware attack
  • [ ] NSA, Cyber Command nominee Haugh offers latest warning on AI as election threat
  • [ ] Adobe fixes patch bypass for exploited ColdFusion CVE-2023-29298 flaw
  • [ ] Threat Actors are Targeting Your Web Applications – Here’s How To Protect Them
  • [ ] ColdFusion, un’altra zero-day permette di bypassare i sistemi di sicurezza sui dispositivi esposti
  • [ ] S3 Ep144: When threat hunting goes down a rabbit hole
  • [ ] KillNet aumenta le proprie capacità e stringe nuove collaborazioni
  • [ ] North Korean hackers linked to attempted supply-chain attack on JumpCloud customers
  • [ ] APT41 hackers target Android users with WyrmSpy, DragonEgg spyware
  • [ ] New P2PInfect worm malware targets Linux and Windows Redis servers
  • [ ] JumpCloud breach traced back to North Korean state hackers
  • [ ] Riconoscere gli avversari informatici di nuova generazione per anticiparne le mosse: le misure difensive
  • [ ] Crisi di sicurezza in Russia, crolla l’impero mediatico di Prigozhin e del Gruppo Wagner: gli scenari
  • [ ] Kanti: A NIM-Based Ransomware Unleashed in the Wild
  • [ ] Campagna di Phishing ai danni dei Dealer WINDTRE
  • [ ] Muore Kevin Mitnick, pietra miliare dell’hacking, all’età di 59 anni
  • [ ] Estée Lauder beauty giant breached by two ransomware gangs
  • [ ] Estée Lauder beauty giant breached in two separate ransomware attacks
• SANS Internet Storm Center, InfoCON: green
  • [ ] Deobfuscation of Malware Delivered Through a .bat File, (Thu, Jul 20th)
  • [ ] ISC Stormcast For Thursday, July 20th, 2023 https://isc.sans.edu/podcastdetail/8580, (Thu, Jul 20th)
• 字节跳动技术团队
  • [ ] 字节跳动基于 Hudi 的机器学习应用场景
• Il Disinformatico
  • [ ] Kevin Mitnick, 1963-2023
• D3Lab
  • [ ] Campagna di Phishing ai danni dei Dealer WINDTRE
• 奇安信 CERT
  • [ ] BCS2023威胁情报技术论坛 ——《漏洞情报：走出漏洞处置的泥潭》
  • [ ] OpenSSH ssh-agent 远程代码执行漏洞(CVE-2023-38408)安全风险通告
  • [ ] Atlassian Confluence Data Center & Server 远程代码执行漏洞安全风险通告
  • [ ] Spring Security 身份认证绕过漏洞(CVE-2023-34034)安全风险通告
• 情报分析师
  • [ ] 情报分析师打造《每日开源》《全球情报周刊》正式上线
  • [ ] 情报分析师必备8个人物搜索引擎
• The Hacker News
  • [ ] Critical Flaws in AMI MegaRAC BMC Software Expose Servers to Remote Attacks
  • [ ] Mallox Ransomware Exploits Weak MS-SQL Servers to Breach Networks
  • [ ] Apache OpenMeetings Web Conferencing Tool Exposed to Critical Vulnerabilities
  • [ ] North Korean State-Sponsored Hackers Suspected in JumpCloud Supply Chain Attack
  • [ ] A Few More Reasons Why RDP is Insecure (Surprise!)
  • [ ] Turla's New DeliveryCheck Backdoor Breaches Ukrainian Defense Sector
  • [ ] New P2PInfect Worm Targeting Redis Servers on Linux and Windows Systems
  • [ ] Microsoft Expands Cloud Logging to Counter Rising Nation-State Cyber Threats
  • [ ] Adobe Rolls Out New Patches for Actively Exploited ColdFusion Vulnerability
• Security Current
  • [ ] Five Ways to Mitigate the Risk of Large Breaches
  • [ ] Lessons in Cybersecurity from Sabras – The Israeli Model of Innovation and Cooperation – the Good, the Bad, and the Ugly
• Trend Micro Research, News and Perspectives
  • [ ] Security Patch Management Strengthens Ransomware Defense
• Security Affairs
  • [ ] Experts attribute WyrmSpy and DragonEgg spyware to the Chinese APT41 group
  • [ ] ALPHV/BlackCat and Clop gangs claim to have hacked cosmetics giant Estée Lauder
  • [ ] P2PInfect, a Rusty P2P worm targets Redis Servers on Linux and Windows systems
  • [ ] Adobe out-of-band update addresses an actively exploited ColdFusion zero-day
• Computer Forensics
  • [ ] Cyber Forensics in Legal Sector
  • [ ] Third Party App Forensics
• Graham Cluley
  • [ ] Estée Lauder – internal data stolen after being hit by two separate ransomware attacks
  • [ ] Tech support scammers trick victims into old-school offline money transfer
• Schneier on Security
  • [ ] Kevin Mitnick Died
  • [ ] Commentary on the Implementation Plan for the 2023 US National Cybersecurity Strategy
• Social Engineering
  • [ ] how to associate an outcome with something positive someone wants?
  • [ ] When asking for something what's the best emotional state to have someone in?
• Deeplinks
  • [ ] First Draft of UN Cybercrime Convention Drops Troubling Provisions, But Dangerous And Open-Ended Cross Border Surveillance Powers Are Still on the Table
  • [ ] Victory! Embedded Links to Photos on Instagram Don’t Infringe Photographers’ Copyrights, Court Rules
  • [ ] Amended Cooper Davis Act Is a Direct Threat to Encryption
• Information Security
  • [ ] Am I in trouble
  • [ ] Which of the following security issues concerns you the most?
• Your Hacking Tutorial by Zempirians
  • [ ] RIP Kevin Mitnick
  • [ ] How to autofill captcha and form of an international site for forms
• Deep Web
  • [ ] Withdrawing from e-wallet
• Technical Information Security Content & Discussion
  • [ ] Kevin Mitnick has passed away
  • [ ] Okta’s Trusted Origins: A Continued Cacophony of Security Issues
  • [ ] PyCript: A burp extension to bypass client side encryption using java python and javascript using custom logic to support any encryption.
  • [ ] Detecting eBPF malware with eBPF and Perf events data
  • [ ] Unshackle: A tool to bypass windows password logins
  • [ ] One LFI bypass to rule them all (using base64)
  • [ ] The Unexpected “0” Master ID for Account Data Manipulation
• TorrentFreak
  • [ ] Cheat Seller Appeals $3.6m DMCA Violation Loss Against Bungie
  • [ ] 70% of Russian Gamers Are Pirates Following Western Publisher Exodus
• /dev/random
  • [ ] [SANS ISC] Deobfuscation of Malware Delivered Through a .bat File
• Forensic Focus
  • [ ] Unveiling The Truth On Vic/Wit/Consent In The Digital Age: ADF Webinar Interview
  • [ ] Digital Forensics Round-Up, July 20 2023
  • [ ] Highlights Of The MD-Series Release Notes For Q2 2023
  • [ ] UPCOMING WEBINAR – Uncovering Hidden Data: How To Collect The Mobile Data Your Investigation Is Missing
• The Register - Security
  • [ ] MOVEit body count closes in on 400 orgs, 20M+ individuals
  • [ ] RIP Kevin Mitnick: Former most-wanted hacker dies at 59
  • [ ] Under CISA pressure collaboration, Microsoft makes cloud security logs available for free
  • [ ] Ukraine busts bot farm spreading Russian infowar propaganda and fraud
• Blackhat Library: Hacking techniques and research
  • [ ] Best VPN Service Curated by Reddit Users in 2023
• Paul's Security Weekly
  • [ ] Security Certification - Rohit Misuriya, Sumit Siddharth - PSW #791

[github-actions[bot]]

This issue is stale because it has been open for 30 days with no activity.

[github-actions[bot]]

This issue was closed because it has been inactive for 14 days since being marked as stale.