[每日信息流] 2023-07-22

[chainreactorbot]

每日安全资讯（2023-07-22）

• HackerOne Hacker Activity
  • [ ] Password reset endpoint is not brute force protected
• 先知安全技术社区
  • [ ] SCA技术进阶系列（三）：浅谈二进制SCA在数字供应链安全体系中的应用
• Security Boulevard
  • [ ] GitHub Developers Targeted by North Korea’s Lazarus Group
  • [ ] BSides Sofia 2023 – Georgi Gerganov – Keytap Acoustic Keyboard Eavesdropping
  • [ ] Startups’ Guide to Security Questionnaires
  • [ ] Dell Adds Orchestration Capabilities to Data Protection Platform
  • [ ] Daniel Stori’s ‘Annoying Software’
  • [ ] 3 Essential Elements of an Identity Threat Detection and Response (ITDR) Strategy
  • [ ] Software Supply Chain Attackers Targeting Banks, Checkmarx Says
  • [ ] Cybersecurity Insights with Contrast CISO David Lindner | 7/21
  • [ ] Digging Into An Interesting New CVE
  • [ ] BSides Sofia 2023 – Alexander Nedelchev – Unencrypted Malware, The Invisible Threat
• Files ≈ Packet Storm
  • [ ] Ubuntu Security Notice USN-6232-1
  • [ ] Red Hat Security Advisory 2023-4241-01
  • [ ] Red Hat Security Advisory 2023-4159-01
  • [ ] Red Hat Security Advisory 2023-4178-01
  • [ ] Red Hat Security Advisory 2023-4093-01
  • [ ] WordPress Page Builder KingComposer 2.9.5 Open Redirection
  • [ ] WordPress ChurcHope Responsive Themes 4.7.x Directory Traversal
  • [ ] Red Hat Security Advisory 2023-4091-01
  • [ ] CMS-Bank Mellat Payment Manager 1.0.0 Cross Site Scripting
  • [ ] RaidenFTPD 2.4.4005 Buffer Overflow
  • [ ] Red Hat Security Advisory 2023-4090-01
  • [ ] CMS TSS-EST 1.0.0 SQL Injection
  • [ ] Foody Friend 1.0 Arbitrary File Upload / Cross Site Scripting
  • [ ] CMS Supported IRF-TH 2.0.6 Cross Site Scripting
  • [ ] Wifi Soft Unibox Administration 3.0 / 3.1 SQL Injection
  • [ ] Red Hat Security Advisory 2023-4238-01
  • [ ] CMS SAUDI SOFTECH 5.0.2 SQL Injection
  • [ ] CMS NEXIN 2.0 Insecure Settings
  • [ ] CMS Emlak Scripti 2 Cross Site Scripting
  • [ ] Buzzy News Viral Lists Polls And Videos 2.0 Insecure Settings
  • [ ] Listplace Directory Listing Platform 3.0 File Upload / Cross Site Scripting
  • [ ] CMS Contabil Bandeirantes 1.0.0 Cross Site Request Forgery
• Tenable Blog
  • [ ] Cybersecurity Snapshot: CISOs Say Breaches Are Down, but Staffing Remains Difficult
• unSafe.sh - 不安全
  • [ ] AI 公司承诺将为 AI 生成内容打上水印
  • [ ] Dolphin 项目公开任天堂法务部对该项目的立场
  • [ ] 苹果为Apple Music开启夏日活动 即日起至8月21日免费领取3个月会员
  • [ ] Implementing Tic Tac Toe with 170mb of HTML - no JS or CSS
  • [ ] CISA: You've got two weeks to patch Citrix NetScaler vulnerability CVE-2023-3519
  • [ ] Estée Lauder targeted by Cl0p and BlackCat ransomware groups
  • [ ] LLM is all you need for the backend - 郑瀚Andrew
  • [ ] The Good, the Bad and the Ugly in Cybersecurity – Week 29
  • [ ] 关闭Win10/Win11的自动更新
  • [ ] Spring Security身份认证绕过漏洞(CVE-2023-34034)
  • [ ] Atlassian多个高危漏洞通告
  • [ ] Fuzzing on-chain contracts with Echidna
  • [ ] “产、学、研、用”协同创新，全力打造安全平行切面生态体系
  • [ ] 数字军火行业的兴衰及调整 - 趋势与更新
  • [ ] 外交部回应中国黑客入侵驻华大使电邮
  • [ ] 议题征集 | 金融科技安全与数据安全高峰论坛·上海站启航
• Recent Commits to cve:main
  • [ ] Update Fri Jul 21 00:26:34 UTC 2023
• 安全客-有思想的安全新媒体
  • [ ] 云上数据防护新思路？DSPM来袭
• CXSECURITY Database RSS Feed - CXSecurity.com
  • [ ] Perch v3.2 Stored XSS
  • [ ] ABB FlowX v4.00 Exposure of Sensitive Information
  • [ ] Hikvision Hybrid SAN Ds-a71024 SQL Injection
  • [ ] Blackcat CMS 1.4 Shell Upload
  • [ ] TP-Link TL-WR740N Directory Traversal
  • [ ] Pluck 4.7.18 Remote Shell Upload
  • [ ] ProjeQtOr Project Management System v10.4.1 Multiple XSS
  • [ ] Faculty Evaluation System v1.0 SQL Injection
  • [ ] Foody Friend 1.0 Arbitrary File Upload / Cross Site Scripting
  • [ ] RaidenFTPD 2.4.4005 Buffer Overflow
  • [ ] Wifi Soft Unibox Administration 3.0 / 3.1 SQL Injection
  • [ ] CMS SAUDI SOFTECH 5.0.2 SQL Injection
  • [ ] Listplace Directory Listing Platform 3.0 File Upload / Cross Site Scripting
• Zdziarski
  • [ ] Good Medicine for Imposter’s Syndrome
• Sploitus.com Exploits RSS Feed
  • [ ] Listplace Directory Listing Platform 3.0 File Upload / Cross Site Scripting exploit
  • [ ] ViaTalk CP - Persistent XSS Web Vulnerability exploit
  • [ ] CMS SAUDI SOFTECH 5.0.2 SQL Injection exploit
  • [ ] Foody Friend 1.0 Arbitrary File Upload / Cross Site Scripting exploit
  • [ ] Perch v3.2 - Remote Code Execution (RCE) exploit
  • [ ] CMS-Bank Mellat Payment Manager 1.0.0 Cross Site Scripting exploit
  • [ ] Wifi Soft Unibox Administration 3.0 / 3.1 SQL Injection exploit
  • [ ] CMS Supported IRF-TH 2.0.6 Cross Site Scripting exploit
  • [ ] Perch v3.2 - Stored XSS exploit
  • [ ] CMS NEXIN 2.0 Insecure Settings exploit
  • [ ] Buzzy News Viral Lists Polls And Videos 2.0 Insecure Settings exploit
  • [ ] RaidenFTPD 2.4.4005 Buffer Overflow exploit
  • [ ] CMS TSS-EST 1.0.0 SQL Injection exploit
  • [ ] WordPress Page Builder KingComposer 2.9.5 Open Redirection exploit
  • [ ] CMS Emlak Scripti 2 Cross Site Scripting exploit
  • [ ] CMS Contabil Bandeirantes 1.0.0 Cross Site Request Forgery exploit
  • [ ] WordPress ChurcHope Responsive Themes 4.7.x Directory Traversal exploit
  • [ ] Exploit for CVE-2023-38632 exploit
  • [ ] Exploit for Code Injection in Citrix Netscaler Application Delivery Controller exploit
  • [ ] Exploit for Code Injection in Apache Airflow exploit
• 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com
  • [ ] “产、学、研、用”协同创新，全力打造安全平行切面生态体系
  • [ ] 工具推荐之不出网环境下上线CS
  • [ ] 黑客如何劫持卫星？
  • [ ] 寻找一个新的隐身通用Rootkit加载程序
  • [ ] 可信云大会·云原生安全分论坛 精彩内容抢先看
• Twitter @Nicolas Krassas
  • [ ] Global CDN Service ‘jsdelivr’ Exposed Users to Phishing Attacks https://www.hackread.com/global-cdn-service-jsdelivr-phishing-attacks/
  • [ ] Roblox Data Breach: PII of Thousands of Developers Stolen https://www.hackread.com/roblox-data-breach-developers-pii-data-stolen/
  • [ ] Citrix ADC Gateway RCE: CVE-2023-3519 is Exploitable, and 53% of Servers Are Unpatched https://bishopfox.com/blog/citrix-adc-gateway-rce-cve-2023-3519
  • [ ] Rootkit Attack Detections Increase at UAE Businesses https://www.darkreading.com/dr-global/rootkit-attack-detections-increase-uae-businesses
  • [ ] Atlassian Confluence and Bamboo Remote Code Execution Vulnerabilities https://securityonline.info/atlassian-confluence-and-bamboo-remote-code-executio...
  • [ ] dnsReaper now supports subdomain attacks using project discovery and SecurityTrails https://www.reddit.com/r/netsec/comments/155o304/dnsreaper_now_sup...
  • [ ] Netscaler ADC bug exploited to breach US critical infrastructure org https://www.bleepingcomputer.com/news/security/netscaler-adc-bug-exploited-to-bre...
  • [ ] Clop gang to earn over $75 million from MOVEit extortion attacks https://www.bleepingcomputer.com/news/security/clop-gang-to-earn-over-75-million-from...
  • [ ] HotRat: New Variant of AsyncRAT Malware Spreading Through Pirated Software https://thehackernews.com/2023/07/hotrat-new-variant-of-asyncrat-malware.ht...
  • [ ] Azure AD Token Forging Technique in Microsoft Attack Extends Beyond Outlook, Wiz Reports https://thehackernews.com/2023/07/azure-ad-token-forging-tech...
  • [ ] Re @Jhaddix @infosec_au How about the RSA keynote ?
  • [ ] PoC released for critical CloudPanel CVE-2023-35885 vulnerability https://securityonline.info/poc-released-for-critical-cloudpanel-cve-2023-35885-vuln...
  • [ ] Compromised Microsoft Key: More Impactful Than We Thought https://www.wiz.io/blog/storm-0558-compromised-microsoft-key-enables-authentication-of-count...
  • [ ] Fuzzing on-chain contracts with Echidna https://blog.trailofbits.com/2023/07/21/fuzzing-on-chain-contracts-with-echidna/
  • [ ] Amazon agrees to $25 million fine for Alexa children privacy violations https://www.bleepingcomputer.com/news/technology/amazon-agrees-to-25-million-f...
  • [ ] Lawyer sees almost 1,000 complainants sign up to Capita breach class action https://go.theregister.com/feed/www.theregister.com/2023/07/21/capita_brea...
  • [ ] Sophisticated BundleBot Malware Disguised as Google AI Chatbot and Utilities https://thehackernews.com/2023/07/sophisticated-bundlebot-malware.html
  • [ ] RT HADESS: Kevin Mitnick Lessons Collection: https://redteamrecipe.com/Kevin-Mitnick-Lessons/ USB ninja: https://lnkd.in/eNfjvivW) The dangers of publ...
  • [ ] RT Florian Roth: Citrix NetScaler ADC CVE-2023-3519 resources -- Compromise Assessments @CISAgov advisory https://www.cisa.gov/sites/default/files/202...
• ElcomSoft blog
  • [ ] iOS Device Acquisition: Installing the Extraction Agent
• SecWiki News
  • [ ] SecWiki News 2023-07-21 Review
• Twitter @bytehx
  • [ ] Re @_Xiety l think it depends on the app like if the app have functionality to view those data publicly it is not. If the app doesn’t have that funct...
  • [ ] Re @Jhaddix Is it still available?
• SAP Blogs
  • [ ] SAP Content Discovery Go-Live for Partners.
  • [ ] Modern SAP Technology explained
  • [ ] Tricentis Test Automation for SAP Cloud ALM (TTA for Cloud ALM)
  • [ ] Inviting You To Contribute: Launch of SAP Central Business Configuration on SAP Customer Influence
  • [ ] INTEGRATION OF SAP BUSINESS BYDESIGN WITH ACUMATICA A THIRD-PARTY ERP SYSTEM
  • [ ] A Bounty Hunting Approach In SAP S/4HANA Project Testing – why not?
  • [ ] Enabling Business Transformation with Artificial Intelligence & Machine Learning
  • [ ] Embracing Web3, NFTs, and the Metaverse: Transforming Enterprise Opportunities
  • [ ] User Research Journey in Visa Engagement
  • [ ] Demystifying SAP Cloud Integration Runtime Error Messages: A Comprehensive Guide for Novice Users
• Hex Rays
  • [ ] Igor’s Tip of the Week #149: Using symbolic constants in the decompiler
• Malwarebytes Labs
  • [ ] CISA: You've got two weeks to patch Citrix NetScaler vulnerability CVE-2023-3519
  • [ ] Estée Lauder targeted by Cl0p and BlackCat ransomware groups
• SentinelOne
  • [ ] The Good, the Bad and the Ugly in Cybersecurity – Week 29
• Reverse Engineering
  • [ ] Detect It Easy 3.08 Program for determining types of files for Windows, Linux and MacOS.
• PortSwigger Blog
  • [ ] Implementing Tic Tac Toe with 170mb of HTML - no JS or CSS
• Exploit-DB.com RSS Feed
  • [ ] [webapps] Perch v3.2 - Stored XSS
  • [ ] [webapps] Perch v3.2 - Remote Code Execution (RCE)
• CCC Event Blog
  • [ ] Camp 2023 - Your journey to camp 2023
• bishopfox.com
  • [ ] Citrix ADC Gateway RCE: CVE-2023-3519 is Exploitable, and 53% of Servers Are Unpatched
• 绿盟科技技术博客
  • [ ] 关闭Win10/Win11的自动更新
  • [ ] Spring Security身份认证绕过漏洞(CVE-2023-34034)
  • [ ] Atlassian多个高危漏洞通告
• FreeBuf网络安全行业门户
  • [ ] 议题征集 | 金融科技安全与数据安全高峰论坛·上海站启航
  • [ ] 云计算供应链遭遇重大安全风险！AMI MegaRAC BMC 曝两大关键漏洞
  • [ ] FreeBuf 周报 | 美国学生遭遇求职诈骗邮件“轰炸”！；思科 SD-WAN 管理曝高危漏洞
  • [ ] Apache OpenMeetings 网络会议工具曝出严重漏洞
  • [ ] 美国学生遭遇求职诈骗邮件“轰炸”！
• Private Feed for M09Ic
  • [ ] tyskill started following M09Ic
  • [ ] DVKunion released 1.1.3 at DVKunion/SeaMoon
  • [ ] zer0yu starred 0140454/hackbar
  • [ ] timwhitez starred AabyssZG/SpringBoot-Scan
  • [ ] zer0yu starred IBM/tree-sitter-codeviews
  • [ ] zer0yu started following vmayoral
  • [ ] Rvn0xsy starred palxiao/poster-design
  • [ ] Rvn0xsy starred cfour-hi/gitstars
  • [ ] zema1 starred VulnTotal-Team/yarb
  • [ ] panjf2000 started following JohnTitor
  • [ ] theLSA started following securifybv
  • [ ] panjf2000 starred containerd/containerd
  • [ ] theLSA starred Eltion/Instagram-SSL-Pinning-Bypass
  • [ ] theLSA starred BinaryAnalysisPlatform/bap
  • [ ] boy-hack starred AtomEcho/AtomGPT
  • [ ] theLSA starred yoavanaki/chatgpt-plugins
  • [ ] 0nise starred teamssix/cf
  • [ ] theLSA starred FlagAlpha/Llama2-Chinese
  • [ ] theLSA starred nu11secur1ty/Windows11Exploits
  • [ ] theLSA starred jkfran/killport
  • [ ] theLSA starred dsdanielpark/amazing-bard-prompts
  • [ ] panjf2000 starred NVIDIA/cuda-samples
  • [ ] theLSA starred Fadi002/unshackle
  • [ ] panjf2000 starred NVlabs/tiny-cuda-nn
  • [ ] theLSA starred lele8/SharpDBeaver
  • [ ] panjf2000 started following andrewrk
  • [ ] theLSA starred easydiffusion/easydiffusion
  • [ ] theLSA starred not-matthias/include_crypt
  • [ ] theLSA starred AndroBugs/AndroBugs_Framework
  • [ ] theLSA starred WuFengXue/android-reverse
• HackerNews
  • [ ] 今年最大规模网络攻击：受害机构数量逼近 400 家，影响人数超 2 千万
  • [ ] Apache OpenMeetings 网络会议工具曝出严重漏洞
  • [ ] 超百人团伙涉嫌支持俄罗斯，乌克兰网警将其击破
  • [ ] 美国学生遭遇求职诈骗邮件“轰炸”！
  • [ ] 匿名苏丹再次发起攻击！Only Fans 网站沦陷
• 博客园 - 郑瀚Andrew
  • [ ] LLM is all you need for the backend - 郑瀚Andrew
  • [ ] 《Language Model Cascades》论文学习 - 郑瀚Andrew
• Black Hills Information Security
  • [ ] Talkin’ About Infosec News – 7/21/2023
• Checkmarx.com
  • [ ] First Known Targeted OSS Supply Chain Attacks Against the Banking Sector
• rtl-sdr.com
  • [ ] TechMinds: Testing New RadioBerry Productions – an HF SDR Transceiver Raspberry Pi Hat
• 奇客Solidot–传递最新科技情报
  • [ ] AI 公司承诺将为 AI 生成内容打上水印
  • [ ] Dolphin 项目公开任天堂法务部对该项目的立场
  • [ ] 数字军火行业的兴衰及调整 - 趋势与更新
  • [ ] 外交部回应中国黑客入侵驻华大使电邮
  • [ ] Google 测试能撰写新闻的 AI 工具
  • [ ] 适度运动有助于改善老年人的认知
  • [ ] Google 开始向所有 Chrome 用户推送隐私沙盒 API
  • [ ] 台积电以人才短缺为由推迟美国芯片厂投产时间
  • [ ] TikTok 是英国青少年最主要的新闻源
  • [ ] Google 联合创始人 Sergey Brin 重返公司专注于 AI
• 安全内参
  • [ ] 今年最大规模网络攻击：受害机构数量逼近400家，影响人数超2千万
  • [ ] 国家漏洞库CNNVD：2022年度网络安全漏洞态势报告
• 黑奇士
  • [ ] 电商大佬要疯：仙人跳酒局被搬上银幕，爱奇艺这个热门剧要大火
• 吾爱破解论坛
  • [ ] 【开放注册公告】吾爱破解论坛2023年7月21日暑假开放注册公告即将开始 12：00 -- 14：00 和 20：00 -- 22：00，赶不上的定个晚间闹钟吧，新信息会在B站继续发布，推荐使用电脑注册，可以使用论坛的诊断修复工具修复一次，方便提前解决注册中可能会遇到的问题，如果修复后还是不行建议尽快更换设备尝试，注册页面会强制10分钟来阅读注册须知，须知中包括了你注册现在和未来可能会遇到的问题，请仔细阅读，否则可能无法注册成功或注册后被清理，开放注册期间暂停签到任务、QQ登录绑定、下载论坛附件功能、默认搜索功能等功能请各位知晓，在论坛等待大家光临。
• 三六零CERT
  • [ ] CVE-2023-38408：OpenSSH ssh-agent 远程代码执行漏洞通告
  • [ ] 安全日报（2023.07.21）
• 安全牛
  • [ ] 如何实现机器学习模型的敏感数据遗忘？
  • [ ] CNNVD通报Oracle多个安全漏洞
  • [ ] 安全牛课堂 | CISAW和CISP-PTE应该怎么选？
• 奇安信威胁情报中心
  • [ ] 每周高级威胁情报解读(2023.07.13~07.20)
• XCTF联赛
  • [ ] *CTF 2023｜**战队专访来啦，速来围观！
• 极客公园
  • [ ] OpenAI 新功能可以在系统层面记住用户；iPhone 15或面临供货短缺；暴雪部分游戏将登陆 Steam｜极客早知道
• 中国信息安全
  • [ ] CNNVD发布《2022年度网络安全漏洞态势报告》
  • [ ] 关注 | 关停账号2.1万余个，清理谣言70.5万余条，公安部通报网络谣言打击整治工作情况
  • [ ] 评论 | 肩负起网信事业使命任务 推动网络强国建设迈出新步伐
  • [ ] 专家解读 | 适应生成式人工智能特点 营造安全有序法治环境
  • [ ] 评论 | 网络法治护航青少年任重道远
  • [ ] 发布 | 《2023年度上半年社会民生领域网络辟谣榜》
  • [ ] 法治 | 网络工程师非法获取、出售公民个人信息，获刑三年一个月
• 山石网科安全技术研究院
  • [ ] 日本IPA发布2023“信息安全10大威胁”
• CNCERT国家工程研究中心
  • [ ] 谷歌对 6 种现实世界的人工智能攻击进行了分类，以供立即准备
  • [ ] WormGPT：生成式AI被用于发起商业邮件攻击
  • [ ] 如何使用Killer绕过AV和EDR等安全检测产品
• 网安杂谈
  • [ ] 【专刊2023合作伙伴：上海歆仁】专注案侦数据即战力的应用服务商
• 威胁猎人Threat Hunter
  • [ ] 威胁猎人发布广告反欺诈产品，提升现有能力10倍
• 补天平台
  • [ ] 补天白帽城市沙龙成都站来啦，议题征集全面开启，等你来投稿！
  • [ ] 奖金翻倍| 补天专属厂商“翼支付”活动上线！
  • [ ] 现金奖励| 2023补天通用型漏洞专项活动第一期来啦！
• 代码卫士
  • [ ] AMI MegaRAC BMC 软件存在多个严重漏洞，可触发供应链攻击
  • [ ] GitHub 提醒 Lazarus 黑客组织利用恶意项目攻击开发人员
• 乐枕迭代日志
  • [ ] 工作中的积极状态
• M01N Team
  • [ ] 每周蓝军技术推送（2023.7.15-7.21）
• Qualys Security Blog
  • [ ] Add Unique Asset Context with Custom Attributes in CSAM
• 安全研究GoSSIP
  • [ ] Let's GoSSIP暑期学校，下周不见不散！
• 关键基础设施安全应急响应中心
  • [ ] 做好网信工作要贯彻落实“十个坚持”
  • [ ] 主张“利润高于安全”的微软产品又被黑！美国前网络高官再谈软件安全监管
  • [ ] VirusTotal发生数据泄漏，美欧情报机构受影响
• Forensic Focus
  • [ ] Forensic Focus Digest, July 21 2023
• Tails - News
  • [ ] Archive of all news
• Securityinfo.it
  • [ ] Crescono gli investimenti nell’autenticazione passwordless
• ICT Security Magazine
  • [ ] Aumentano gli attacchi informatici alla Sanità e al mondo del Manifacturing
• 0x00sec - The Home of the Hacker - Top topics
  • [ ] Building a basic DLL blocker
• SANS Internet Storm Center, InfoCON: green
  • [ ] ISC Stormcast For Friday, July 21st, 2023 https://isc.sans.edu/podcastdetail/8582, (Fri, Jul 21st)
  • [ ] Shodan's API For The (Recon) Win!, (Fri, Jul 21st)
• Over Security - Cybersecurity news aggregator
  • [ ] Couple accused of laundering stolen Bitfinex cryptocurrency reaches plea deal
  • [ ] Stolen Azure AD key offered widespread access to Microsoft cloud services
  • [ ] Microsoft disputes report that Chinese hackers could have accessed suite of programs
  • [ ] The Week in Ransomware - July 21st 2023 - Avaddon Back as NoEscape
  • [ ] Open-source supply chain attacks expand to the banking sector
  • [ ] DHL investigating MOVEit breach as number of victims surpasses 20 million
  • [ ] FBI improperly used warrantless search powers on US senator, others
  • [ ] Few Fortune 100 Firms List Security Pros in Their Executive Ranks
  • [ ] Netscaler ADC bug exploited to breach US critical infrastructure org
  • [ ] Clop gang to earn over $75 million from MOVEit extortion attacks
  • [ ] Fabricated Microsoft Crypto Wallet Phishing Site Spreads Infostealer
  • [ ] Cyber sicurezza: fonti, paper e studi di settore per restare aggiornati
  • [ ] Importanti falle su tecnologie Atlassian
  • [ ] Crescono gli investimenti nell’autenticazione passwordless
  • [ ] Sintesi riepilogativa delle campagne malevole nella settimana del 15 – 21 luglio 2023
  • [ ] Amazon agrees to $25 million fine for Alexa children privacy violations
  • [ ] CISA: Citrix RCE bug exploited to breach critical infrastructure org
  • [ ] VirusTotal apologizes for accidental leak that exposed customer data
  • [ ] Data Privacy Framework: arriva il via libera anche dell’EDPB, con alcune precisazioni
  • [ ] VLOG – The Art of exploitation
  • [ ] VirusTotal apologizes for data leak affecting 5,600 customers
  • [ ] Il cyber crimine visto da Europol: una multinazionale sempre più strutturata e dal business fiorente
  • [ ] Errata qualificazione dei ruoli privacy: cosa impariamo dalla maxi-sanzione ad Autostrade per l’Italia
  • [ ] Android nel mirino di APT41: come proteggersi dagli spyware WyrmSpy e DragonEgg
  • [ ] Come le AI generative renderanno più accurata la sicurezza informatica
  • [ ] Risky Biz News: Microsoft feels the heat, gives customers access to more cloud security logs
• Schneier on Security
  • [ ] Friday Squid Blogging: Chromatophores
  • [ ] AI and Microdirectives
• Yak Project
  • [ ] 热加载 Fuzz 可有可无，这怎么能说出来？
• 奇安信病毒响应中心
  • [ ] 每周勒索威胁摘要
• 数世咨询
  • [ ] 关注价值：深度防御≠深度开支
• 看雪学苑
  • [ ] 更高更妙的抓包——从Chrome源码学习使用Cronet 通讯组件的app的通用抓包方法
  • [ ] 同时被两个黑客组织盯上，化妆品巨头雅诗兰黛证实数据泄露
  • [ ] 聘！文末投简历
  • [ ] 限时赠价值5000元工具！VMProtect 分析与还原
• Troy Hunt's Blog
  • [ ] Weekly Update 357
• Deeplinks
  • [ ] Young People Should Oppose the Kids Online Safety Act
  • [ ] First Draft of UN Cybercrime Convention Drops Troubling Provisions, But Dangerous And Open-Ended Cross Border Surveillance Powers Are Still on the Table
• Full Disclosure
  • [ ] [SYSS-2023-006]: Omnis Studio - Expected Behavior Violation (CWE-440) (CVE-2023-38334)
  • [ ] [SYSS-2023-005]: Omnis Studio - Expected Behavior Violation (CWE-440) (CVE-2023-38335)
• LockBoxx
  • [ ] Science Fiction for Hackers
• Blackhat Library: Hacking techniques and research
  • [ ] How do banks store digital currency?
• 火绒安全
  • [ ] 【火绒安全周报】雅诗兰黛被两个勒索软件攻击/VirusTotal员工导致数据遭泄露
• Social Engineering
  • [ ] Kevin Mitnick, hacker and fugitive turned security consultant, dies at 59
  • [ ] what ways can you push-pull without making someone dislike you?
  • [ ] How to organise chore list with roommate who has opposite schedule?
  • [ ] Why or how does public rudeness or outright verbal aggression get normalized in a society?
  • [ ] I made a video to raise awareness for South Asian migrant workers who are heavily exploited in Dubai. I'm surprised people never talk about it
• Security Affairs
  • [ ] CISA warns of attacks against Citrix NetScaler ADC and Gateway Devices
  • [ ] Experts believe North Korea behind JumpCloud supply chain attack
  • [ ] Nice Suzuki, sport: shame dealer left your data up for grabs
• Your Hacking Tutorial by Zempirians
  • [ ] E-mail trying to scam me.
  • [ ] Hacking a Zenimal
  • [ ] Need advice of program to examine a .png image I was texted.
  • [ ] NEED SERIOUS HELP
  • [ ] I want to install software to log where my Daughter location is and possibly her activity on her laptop
• TorrentFreak
  • [ ] ‘Digital TV’ Raided By Cybercrime Unit Following DirecTV IPTV Piracy Complaint
  • [ ] Popular Torrent Site Taunts Anti-Piracy Boss and Investigators
• The Register - Security
  • [ ] Stolen Microsoft key may have opened up a lot more than US govt email inboxes
  • [ ] VirusTotal: We're sorry someone fat-fingered and exposed 5,600 users
  • [ ] Lawyer sees almost 1,000 complainants sign up to Capita breach class action
• Computer Forensics
  • [ ] What is cyber forensics actually?
  • [ ] Mobile device forensics - typical output for a lab
  • [ ] iMac startup disk utility
  • [ ] Find if someone accessed microSD card content
• Information Security
  • [ ] Have you ever downloaded apps from unofficial app stores or sideloaded apps?
• Technical Information Security Content & Discussion
  • [ ] Analysis of CVE-2023-3519 in Citrix ADC and NetScaler Gateway
  • [ ] Cisco SPA112 Forever-Day: CVE-2023-20126.
  • [ ] Non-root Android Native Code Visualization Pt.2
  • [ ] dnsReaper now supports subdomain attacks using project discovery and SecurityTrails
• Il Disinformatico
  • [ ] Podcast RSI - Copie digitali dei defunti, Threads contro Twitter contro Mastodon, addio a un grande hacker
• The Hacker News
  • [ ] Azure AD Token Forging Technique in Microsoft Attack Extends Beyond Outlook, Wiz Reports
  • [ ] HotRat: New Variant of AsyncRAT Malware Spreading Through Pirated Software
  • [ ] Sophisticated BundleBot Malware Disguised as Google AI Chatbot and Utilities
  • [ ] Local Governments Targeted for Ransomware – How to Prevent Falling Victim
  • [ ] DDoS Botnets Hijacking Zyxel Devices to Launch Devastating Attacks
  • [ ] Citrix NetScaler ADC and Gateway Devices Under Attack: CISA Urges Immediate Action
• Krebs on Security
  • [ ] Few Fortune 100 Firms List Security Pros in Their Executive Ranks
• Deep Web
  • [ ] Which One Are You?
  • [ ] Escrow
• Paul's Security Weekly
  • [ ] Enhancing Enterprise Security UX: Embracing Zero-ish Trust - Ryan Fried, Juliet Okafor - ESW #324
  • [ ] AirGaps, Slackware, Mitnick, Awareness, Microsoft, Bad API, Aaran Leyland and More - SWN #311
• Dark Space Blogspot
  • [ ] Cosa Sono Le Transazioni OTC (Over The Counter): Depth Chart e Slippage

[github-actions[bot]]

This issue is stale because it has been open for 30 days with no activity.

[github-actions[bot]]

This issue was closed because it has been inactive for 14 days since being marked as stale.