[每日信息流] 2023-08-10

[chainreactorbot]

每日安全资讯（2023-08-10）

• SecWiki News
  • [ ] SecWiki News 2023-08-09 Review
• Security Boulevard
  • [ ] Anton’s Security Blog Quarterly Q3 2023
  • [ ] Hacking With Your Nemesis
  • [ ] Cequence named winner in the Enterprise Security Tech 2023 Cyber Top 20 Awards List
  • [ ] Fortra Introduces New Integrations for Offensive Security
  • [ ] CrowdStrike Launches Managed Service Focused on Protecting Credentials
  • [ ] Defender Pretender: When Windows Defender Updates Become a Security Risk
  • [ ] BSides Leeds 2023 – Michael Ndon – Stop Breaking Into Cyber Security
  • [ ] Threat Roundup: Microsoft August Patch Tuesday & New PaperCut Vulnerability
  • [ ] Randall Munroe’s XKCD ‘Solar Panel Placement’
• Sploitus.com Exploits RSS Feed
  • [ ] Deprixa 3.2.5 SQL Injection exploit
  • [ ] Datoo Complete Dating Script 1.0 HTML Injection exploit
  • [ ] EuroTel ETL3100 Transmitter Unauthenticated Config/Log Download Vulnerability exploit
  • [ ] EuroTel ETL3100 Transmitter Default Credentials exploit
  • [ ] Emagic Data Center Management Suite 6.0 Remote Command Execution exploit
  • [ ] DevSoft Arge Bilişim CMS 1.0.0 Cross Site Scripting exploit
  • [ ] EuroTel ETL3100 Transmitter Authorization Bypass (IDOR) exploit
  • [ ] EuroTel ETL3100 Transmitter Information Disclosure Vulnerability exploit
  • [ ] Metabase Remote Code Execution exploit
  • [ ] Wchat 1.6 HTML Injection exploit
  • [ ] EuroTel ETL3100 Transmitter Authorization Bypass / Insecure Direct Object Reference exploit
  • [ ] PHPJabbers Vacation Rental Script 4.0 Cross Site Request Forgery exploit
  • [ ] Lucee 5.4.2.17 Cross Site Scripting exploit
  • [ ] Coupons CMS 7.00 Open Redirection exploit
  • [ ] Desenvolvido Buscazip Guiaking CMS 1.0 Cross Site Scripting exploit
  • [ ] EuroTel ETL3100 Transmitter Default Credentials Vulnerability exploit
  • [ ] Pyro CMS 3.9 Server-Side Template Injection exploit
  • [ ] EuroTel ETL3100 Transmitter Information Disclosure exploit
  • [ ] Chevereto CMS 3.7.0 SQL Injection exploit
  • [ ] EuroTel ETL3100 Transmitter Authorization Bypass / Insecure Direct Object Reference Vulnerabilities exploit
  • [ ] eHato CMS 1.0 Cross Site Scripting exploit
  • [ ] Metabase Remote Code Execution Exploit exploit
  • [ ] Exploit for Vulnerability in Metabase exploit
  • [ ] Exploit for Prototype Pollution in Sheetjs exploit
  • [ ] Exploit for Missing Authorization in Publishpress Capabilities exploit
  • [ ] Exploit for Missing Authentication for Critical Function in Properfraction Profilepress exploit
  • [ ] Exploit for Open Redirect in King-Theme Kingcomposer exploit
  • [ ] Exploit for Missing Authorization in Wpdeveloper Simple 301 Redirects exploit
• 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com
  • [ ] 开启人工智能时代数字安全新范式！ISC 2023第十一届互联网安全大会开幕
  • [ ] 独家域内安全解决方案！CACTER邮件安全网关V7.0全新发布
  • [ ] 干货分享｜通过用能数据构建企业活力指数 支撑园区数字化转型
  • [ ] 派拓网络亮相ISC 2023，谈数字安全体系化建设
  • [ ] ISC 2023第十一届互联网安全大会开幕，全国工商联党组成员、副主席汪鸿雁出席并致辞
  • [ ] ISC 2023第十一届互联网安全大会开幕 周鸿祎再掀安全新浪潮
  • [ ] 新型网络钓鱼活动可以完全接管攻击Facebook的商业账户
  • [ ] 新型对抗攻击影响ChatGPT等主流大语言模型
• Twitter @Nicolas Krassas
  • [ ] EmploLeaks is an OSINT tool that helps detect members of a company with leaked credentials https://www.reddit.com/r/netsec/comments/15mlyw9/emploleaks...
  • [ ] Missouri warns that health info was stolen in IBM MoveIT data breach https://www.bleepingcomputer.com/news/security/missouri-warns-that-health-info-wa...
  • [ ] LOLKEK Unmasked | An In-Depth Analysis of New Samples and Evolving Tactics https://www.sentinelone.com/blog/lolkek-unmasked-an-in-depth-analysis-of-ne...
  • [ ] Xurlfind3R - A CLI Utility To Find Domain'S Known URLs From Curated Passive Online Sources http://www.kitploit.com/2023/08/xurlfind3r-cli-utility-to-f...
  • [ ] JTAG 'Hacking' the Original Xbox in 2023 https://www.reddit.com/r/ReverseEngineering/comments/15mibzj/jtag_hacking_the_original_xbox_in_2023/
  • [ ] Rust-Based Injector Deploys XWorm and Remcos RAT in Multi-Stage Attack https://www.hackread.com/rust-injector-xworm-remcos-rat-multi-stage-attack/
  • [ ] Irish Police Data Breach Rattles Northern Ireland’s Security Landscape https://www.hackread.com/irish-police-data-breach-northern-ireland/
  • [ ] Rapid7 prepares to toss 18% of workforce to cut costs https://go.theregister.com/feed/www.theregister.com/2023/08/09/rapid_7_redundancies/
  • [ ] Interpol Shuts Down African Cybercrime Group, Seizes $2 Million https://www.darkreading.com/dr-global/interpol-shuts-down-african-cybercrime-group-sei...
  • [ ] Popular open source project Moq criticized for quietly collecting data https://www.bleepingcomputer.com/news/security/popular-open-source-project-moq-...
  • [ ] Collide+Power, Downfall, and Inception: New Side-Channel Attacks Affecting Modern CPUs https://thehackernews.com/2023/08/collidepower-downfall-and-inc...
  • [ ] Google to fight hackers with weekly Chrome security updates https://www.bleepingcomputer.com/news/google/google-to-fight-hackers-with-weekly-chrome-se...
  • [ ] EvilProxy phishing campaign targets 120,000 Microsoft 365 users https://www.bleepingcomputer.com/news/security/evilproxy-phishing-campaign-targets-120...
  • [ ] Data Breach Identifies All PSNI Officers And Staff https://packetstormsecurity.com/news/view/34883/Data-Breach-Identifies-All-PSNI-Officers-And-Staff....
  • [ ] New Report Exposes Vice Society's Collaboration with Rhysida Ransomware https://thehackernews.com/2023/08/new-report-exposes-vice-societys.html
  • [ ] Northern Ireland police may have endangered its own officers by posting details online in error https://go.theregister.com/feed/www.theregister.com/20...
  • [ ] U.K. Electoral Commission Breach Exposes Voter Data of 40 Million Britons https://thehackernews.com/2023/08/uk-electoral-commission-breach-exposes.htm...
  • [ ] RT Naomi: My exchange rce bug killed with August patch 😢 I was a little bit late to report it and it's now fixed. It was a nice bypass due to bad f...
  • [ ] Malicious Campaigns Exploit Weak Kubernetes Clusters for Crypto Mining https://thehackernews.com/2023/08/malicious-campaigns-exploit-weak.html
• Recent Commits to cve:main
  • [ ] Update Wed Aug 9 00:22:17 UTC 2023
• Tenable Blog
  • [ ] Introducing ExposureAI in Tenable One: Meet the Future of Preventive Cybersecurity
• Vulnerabilities and Threat Research – Qualys Security Blog
  • [ ] Risk Fact #2: External-Facing Vulnerabilities Are Low-Hanging Fruit for Attackers
• Files ≈ Packet Storm
  • [ ] EuroTel ETL3100 Transmitter Information Disclosure
  • [ ] EuroTel ETL3100 Transmitter Authorization Bypass / Insecure Direct Object Reference
  • [ ] EuroTel ETL3100 Transmitter Default Credentials
  • [ ] Ubuntu Security Notice USN-6279-1
  • [ ] Debian Security Advisory 5473-1
  • [ ] Metabase Remote Code Execution
  • [ ] Ubuntu Security Notice USN-4336-3
  • [ ] Ubuntu Security Notice USN-6278-1
  • [ ] Pyro CMS 3.9 Server-Side Template Injection
  • [ ] Debian Security Advisory 5472-1
  • [ ] Ubuntu Security Notice USN-6276-1
  • [ ] Red Hat Security Advisory 2023-4571-01
  • [ ] Emagic Data Center Management Suite 6.0 Remote Command Execution
  • [ ] Red Hat Security Advisory 2023-4569-01
  • [ ] Red Hat Security Advisory 2023-4575-01
  • [ ] PHPJabbers Vacation Rental Script 4.0 Cross Site Request Forgery
  • [ ] Red Hat Security Advisory 2023-4576-01
  • [ ] Lucee 5.4.2.17 Cross Site Scripting
  • [ ] Red Hat Security Advisory 2023-4570-01
  • [ ] eHato CMS 1.0 Cross Site Scripting
  • [ ] Dexx CMS HTML And Site Builder 2.2.3 XSS / Arbitrary File Upload
  • [ ] DevSoft Arge Bilişim CMS 1.0.0 Cross Site Scripting
  • [ ] Desenvolvido Buscazip Guiaking CMS 1.0 Cross Site Scripting
  • [ ] Deprixa 3.2.5 SQL Injection
  • [ ] Datoo Complete Dating Script 1.0 HTML Injection
• Trustwave Blog
  • [ ] The Impact of Patient Care on Healthcare Cybersecurity Practices
• CXSECURITY Database RSS Feed - CXSecurity.com
  • [ ] Metabase Remote Code Execution
  • [ ] EuroTel ETL3100 Transmitter Information Disclosure
  • [ ] EuroTel ETL3100 Transmitter Default Credentials
  • [ ] PHPJabbers Vacation Rental Script 4.0 Cross Site Request Forgery
  • [ ] Lucee 5.4.2.17 Cross Site Scripting
• XPN InfoSec Blog
  • [ ] PNG Steganography from First Principles
• Pentest Blog
  • [ ] Advisory | NetModule Router Software Race Condition Leads to Remote Code Execution
• Twitter @bytehx
  • [ ] RT PortSwigger Research: We've just published 'Smashing the state machine: the true potential of web race conditions' by @albinowax! Dive in to arm yo...
• Malwarebytes Labs
  • [ ] Facial recognition tech lands innocent woman with bogus carjacking charge
  • [ ] Cloudflare Tunnel increasingly abused by cybercriminals
  • [ ] Voter data stolen in UK Electoral Commission systems breach
• RET2 Systems Blog
  • [ ] JTAG ‘Hacking’ the Original Xbox in 2023
• SentinelOne
  • [ ] LOLKEK Unmasked | An In-Depth Analysis of New Samples and Evolving Tactics
• Trail of Bits Blog
  • [ ] Use our suite of eBPF libraries
• blog.avast.com EN
  • [ ] New Report Finds Shift in Cyber Crime | Avast
• unSafe.sh - 不安全
  • [ ] 感觉欧盟反垄断还不够？Windows 11自动下载安装Teams并自启动
  • [ ] Stability AI 宣布了它的 AI 编程助手 StableCode
  • [ ] LOLKEK Unmasked | An In-Depth Analysis of New Samples and Evolving Tactics
  • [ ] JTAG 'Hacking' the Original Xbox in 2023
  • [ ] 微软在Windows 11资源管理器地址栏增加动态效果吸引用户使用OneDrive
  • [ ] 空气污染与抗生素耐药性上升相关
  • [ ] 中国论文数再次高居第一
  • [ ] 微信发布小程序备案通知 已发布的小程序需在2024年3月31日前完成备案
  • [ ] 威联通推出新NAS机种TS-AI642 内置NPU神经处理单元加速AI计算
  • [ ] Drinking Our Own Champagne: Enhancing API Security with FAST
  • [ ] Introducing per hostname TLS settings — security fit to your needs
  • [ ] The Hidden Dangers: Exploring Image-Based Cyber Attacks
• PortSwigger Research
  • [ ] Smashing the state machine: the true potential of web race conditions
• SAP Blogs
  • [ ] SAP SuccessFactors Expert (SFX) Accreditation 2023 Update: New SFX Exams & Training Courses!
  • [ ] Pay Bitcoin Per Request : Harnessing Lightning for Micropayments
  • [ ] SAP Datasphere: Implementing Row-Level Security using Data Access Controls
  • [ ] SAP Datasphereで4月始まりのカレンダテーブルの作成方法
  • [ ] How can we add search help with Z to a field in SAP standard. Example MATNR(MAT1)
  • [ ] Digital Selling Workspace Overview in SAP Sales Cloud Version 2
  • [ ] Harmonizing Horizons: Gen AI’s Rise and the Reshaping of SAP S/4HANA Public Cloud and Beyond
  • [ ] SAPUI5 – Pagination in sap.m Table on button click using JSON Data
  • [ ] How to Update Dependencies in a Node Project
  • [ ] SAP TR failure with “Link to database failed”
• Reverse Engineering
  • [ ] JTAG 'Hacking' the Original Xbox in 2023
  • [ ] Unveiling the Clock Fault Injection on Mocor OS
  • [ ] readexe: a program for inspecting EXE files (currently for legacy DOS/Win16 EXEs) - version 0.1 (0.1.1 is now out!)
• Ghostlulz
  • [ ] Cloud Hacking – AWS Elastic BeanStalk
• Twitter @hakivvi
  • [ ] RT PortSwigger Research: We've just published 'Smashing the state machine: the true potential of web race conditions' by @albinowax! Dive in to arm yo...
• FreeBuf网络安全行业门户
  • [ ] FreeBuf早报 | 国际刑警组织打掉一家钓鱼即服务平台；挪威将对Meta开巨额罚单
  • [ ] AMD Zen CPU皆中招，新型Inception攻击能从中泄露敏感数据
  • [ ] 恶意扩展可滥用 VS Code 漏洞窃取认证令牌
  • [ ] 英国选举委员会泄露选民信息
  • [ ] 工信部组织开展APP备案工作：未备案不得从事APP互联网信息服务
• Forcepoint
  • [ ] The Hidden Dangers: Exploring Image-Based Cyber Attacks
• 安全牛
  • [ ] 企业如何选型合适的MDR服务？
  • [ ] 国家网信办就《人脸识别技术应用安全管理规定（试行）（征求意见稿）》公开征求意见
• KitPloit - PenTest & Hacking Tools
  • [ ] Xurlfind3R - A CLI Utility To Find Domain'S Known URLs From Curated Passive Online Sources
• 奇客Solidot–传递最新科技情报
  • [ ] 美国的芯片制造复兴成功了吗？
  • [ ] Stability AI 宣布了它的 AI 编程助手 StableCode
  • [ ] 空气污染与抗生素耐药性上升相关
  • [ ] 中国论文数再次高居第一
  • [ ] Android 14 将允许禁用 2G
  • [ ] 美国金融公司因使用加密消息应用交流被罚 5.49 亿美元
  • [ ] 英特尔芯片曝出 Downfall 漏洞
  • [ ] 研究称每天至少走 4000 步或有助于降低死亡风险
  • [ ] Google Messages 应用将默认使用 RCS
  • [ ] 亚马逊制造了逾五成 Arm 服务器芯片
  • [ ] 网信办发布人脸识别技术应用征求意见稿
  • [ ] 台积电将在德国建造芯片工厂
• Seebug漏洞平台
  • [ ] 404星链计划 | 攻防演练必备之开源攻击与利用工具盘点
• 微步在线研究响应中心
  • [ ] 漏洞通告 | WPS Office远程代码执行漏洞
• Checkmarx.com
  • [ ] Popular NuGet Package “Moq” Silently Exfiltrates User Data to Cloud Service
  • [ ] Checkmarx CISO Study Finds 96% of CISOs Say Their Business Prospects Consider Their Organizations’ AppSec Maturity When Making Deal Decisions
• Wallarm
  • [ ] Drinking Our Own Champagne: Enhancing API Security with FAST
• 白帽100安全攻防实验室
  • [ ] 通过一道CTF题目学习M1卡的AES认证机制
• Private Feed for M09Ic
  • [ ] glzjin starred fantasticit/think
  • [ ] BishopFox made BishopFox/mellon public
  • [ ] Ridter starred TonyNPham/GodzillaPlugin-Suo5-MemProxy
  • [ ] liamg starred Kong/insomnia
  • [ ] FunnyWolf starred pengzhile/pandora
  • [ ] xpn made xpn/stego-playground public
  • [ ] 4ra1n made 4ra1n/4ra1n public
  • [ ] BeichenDream starred djerryz/electron_shell
  • [ ] FunnyWolf starred SpecterOps/BloodHound
  • [ ] PeiQi0 starred Amulab/CAudit
  • [ ] timwhitez started following monoxgas
  • [ ] Ak74-577 starred dirkjanm/adconnectdump
  • [ ] timwhitez starred SpecterOps/BloodHound
  • [ ] FunnyWolf starred 0x727/CloudSandbox
  • [ ] Y4er forked Y4er/naabu from projectdiscovery/naabu
• 吾爱破解论坛
  • [ ] [开售最后9个小时，错过这次可能需要等4年，【加售通知】。

手机用户请直接复制淘口令： 【淘宝】https://m.tb.cn/h.5Xpzt9C?tk=sPGJdEZpqE8 CZ0001 「2023 吾爱 定制T恤」

电脑购买链接： https://item.taobao.com/item.htm?id=732248734927](https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651139700&idx=1&sn=7d5129d42e4cfd0eac6228f6739af88c&chksm=bd50be208a273736bfb773597f6c8e0814a3a39f5140cfdff0c9984f040a5bb8770537a8d260&scene=58&subscene=0#rd)

• PeiQi文库
  • [ ] PeiQi文库 - Github更新～
• 安全内参
  • [ ] 英国发生重大数据泄露事件！近10年选民数据全部曝光
  • [ ] 工信部：未履行备案手续的，不得从事APP服务
• 腾讯玄武实验室
  • [ ] 每日安全动态推送(8-9)
• 安全研究GoSSIP
  • [ ] G.O.S.S.I.P 阅读推荐 2023-08-09 又见CPU瞬态漏洞~
• bishopfox.com
  • [ ] Badge of Shame - Breaking Into Secure Facilities with OSDP
• 安全圈
  • [ ] 【安全圈】AMD Zen CPU皆中招，新型Inception攻击能从中泄露敏感数据
  • [ ] 【安全圈】准确率高达 95%！新型声学攻击通过键盘击键窃取数据
  • [ ] 【安全圈】涉“违规泄露客户信息”等6项违法违规，中行被罚210万
  • [ ] 【安全圈】朝鲜黑客入侵俄罗斯导弹公司，军工技术机密被窃取
• KCon 黑客大会
  • [ ] KCon演讲议题巡展｜移动人脸识别安全攻防对抗之旅
• 三六零CERT
  • [ ] 2023-08 补丁日: 微软多个漏洞安全更新通告
  • [ ] 安全日报（2023.08.09）
• 火线安全平台
  • [ ] IAST技术专栏 | IAST下基于请求调用链的漏洞验证方案及其问题
  • [ ] 火线签约快讯：易宝支付、众安保险、老虎证券、数禾科技
  • [ ] IAST百科全书第13期：关于IAST的检测覆盖范围，一次说清
• 看雪学苑
  • [ ] 即刻访谈 | 对话看雪版主【piaox】：莫空谈，实战出真知
  • [ ] QEMU/KVM + moonlight实现串流游戏作弊
  • [ ] 2023美国黑帽技术大会：一文快速了解大洋彼岸正在举办的世界级安全会议
  • [ ] 在立秋的三伏天，寻觅凉意
• 奇安信 CERT
  • [ ] 微软2023年8月补丁日多个产品安全漏洞风险通告
• 默安科技
  • [ ] 得分！这款红蓝对抗利器入选省级技术创新成果
• 网安寻路人
  • [ ] 通用人工智能供应链中的风险与合理分配
• 数据安全与取证
  • [ ] 取证供应商不愿说的那些事儿（一）
  • [ ] 专题五：Android和iOS痕迹 | CDF暑期集训营（专题班）火热招生中！
  • [ ] CDF暑期集训营（全能班）火热招生中！
• 斗象智能安全
  • [ ] 2023攻防演练必修高危漏洞合集（3.0版）
• 关键基础设施安全应急响应中心
  • [ ] 加快构建网络空间命运共同体
  • [ ] 英国内阁：网络领域风险巨大，未来两年关基设施或发生重大网络攻击
• 黑伞安全
  • [ ] 突击一下内存马查杀，小白看了也能kill！
• 极客公园
  • [ ] 营收大涨 2 倍、毛利率超过特斯拉，理想是怎么做到的？
  • [ ] 黄仁勋：「核弹工厂」即将上线，要让所有人用上生成式 AI
  • [ ] 蔚来回应合作奔驰传闻：消息不实；波音推迟飞船载人飞行测试；工信部：App 备案明年 4 月完成 | 极客早知道
• 娜璋AI安全之家
  • [ ] [Python图像处理] 二十.图像量化处理和采样处理及局部马赛克特效
• 绿盟科技研究通讯
  • [ ] 浅析属性图在异常程序检测的应用
• 火绒安全
  • [ ] 2023-08微软漏洞通告
• 字节跳动技术团队
  • [ ] 超低延时直播技术的前世今生
• CNCERT国家工程研究中心
  • [ ] 航旅业大地震：常旅客积分系统曝严重漏洞
  • [ ] 黑帽大会焦点：风险投资减少、生成式AI炒作周期终结？
  • [ ] 如何有效开展网络安全事件调查工作
• 天融信阿尔法实验室
  • [ ] 【风险提示】天融信关于微软2023年8月安全更新的风险提示
• 国家互联网应急中心CNCERT
  • [ ] 网络安全信息与动态周报2023年第32期（7月31日-8月6日）
• Qualys Security Blog
  • [ ] Risk Fact #2: External-Facing Vulnerabilities Are Low-Hanging Fruit for Attackers
• Over Security - Cybersecurity news aggregator
  • [ ] New BitForge cryptocurrency wallet flaws lets hackers steal crypto
  • [ ] Hackers use open source Merlin post-exploitation toolkit in attacks
  • [ ] Attackers use EvilProxy phishing kit to take over executives’ Microsoft 365 accounts
  • [ ] L'occhio della piramide: la versione dei fratelli Occhionero
  • [ ] Missouri warns that health info was stolen in IBM MOVEit data breach
  • [ ] Microsoft Patch Tuesday: 74 CVEs plus 2 “Exploit Detected” advisories
  • [ ] Rhysida ransomware behind recent attacks on healthcare
  • [ ] Pro-Russian hackers claim attacks on French, Dutch websites
  • [ ] Missouri says some Medicaid health information was compromised in MOVEit breach
  • [ ] Regulators fear Russia could access Yandex taxi data from Europe, Central Asia
  • [ ] Popular open source project Moq criticized for quietly collecting data
  • [ ] Prospect Medical hospitals still recovering from ransomware attack
  • [ ] Out-of-bounds write vulnerabilities in popular chemistry software; Foxit PDF Reader issues could lead to remote code execution
  • [ ] IRS confirms takedown of bulletproof hosting provider Lolek
  • [ ] EvilProxy phishing campaign targets 120,000 Microsoft 365 users
  • [ ] Preventative medicine for securing IoT tech in healthcare organizations
  • [ ] Google to fight hackers with weekly Chrome security updates
  • [ ] UK explains likelihood of catastrophic cyberattacks — and its response plans
  • [ ] Adobe releases patches for dozens of vulnerabilities affecting suite of programs
  • [ ] Popular Chinese-language service Sogou exposed to ‘eavesdropper,’ report says
  • [ ] ~/docs/sysdig.howto
  • [ ] APT34 miete nuove vittime: colpiti alcuni obiettivi governativi degli Emirati Arabi Uniti
  • [ ] Truffe romantiche: i consigli per non rimanere vittime del romance scam
  • [ ] Risky Biz News: DHS links pro-PRC info-op to Chinese municipal government
  • [ ] Microsoft Visual Studio Code flaw lets extensions steal passwords
  • [ ] Microsoft Patch Tuesday, August 2023 Edition
• Forensic Focus
  • [ ] Digital Evidence Investigator PRO (DEI PRO) From ADF Solutions
• Securityinfo.it
  • [ ] APT34 miete nuove vittime: colpiti obiettivi governativi degli Emirati Arabi Uniti
• 0x00sec - The Home of the Hacker - Top topics
  • [ ] How to get start in hardware hacking stuff
• 山石网科安全技术研究院
  • [ ] 山石再次上榜微软全球最具价值安全研究员榜单
• Posts By SpecterOps Team Members - Medium
  • [ ] Hacking With Your Nemesis
• Schneier on Security
  • [ ] Using Machine Learning to Detect Keystrokes
• Il Disinformatico
  • [ ] Ci siamo mai scritti su Signal?
  • [ ] Il supertestimone ufologico al Congresso ha avuto un ricovero psichiatrico e problemi di alcolismo. Però continuate pure a credergli sulla parola
• Security Current
  • [ ] Dror Kashti, CEO and Co-Founder, Sweet Security
• SANS Internet Storm Center, InfoCON: green
  • [ ] ISC Stormcast For Wednesday, August 9th, 2023 https://isc.sans.edu/podcastdetail/8608, (Wed, Aug 9th)
• Instapaper: Unread
  • [ ] Since there is an uptick of new people to the field. Here is a link to to Hitchhiker's Guide to DFIR. A good resource that will help.
  • [ ] New Downfall attacks on Intel CPUs steal encryption keys, data
  • [ ] Interpol takes down phishing-as-a-service platform used by 70,000 people
• The Hacker News
  • [ ] Collide+Power, Downfall, and Inception: New Side-Channel Attacks Affecting Modern CPUs
  • [ ] China-Linked Hackers Strike Worldwide: 17 Nations Hit in 3-Year Cyber Campaign
  • [ ] Continuous Security Validation with Penetration Testing as a Service (PTaaS)
  • [ ] New Android 14 Security Feature: IT Admins Can Now Disable 2G Networks
  • [ ] U.K. Electoral Commission Breach Exposes Voter Data of 40 Million Britons
  • [ ] Microsoft Releases Patches for 74 New Vulnerabilities in August Update
  • [ ] Malicious Campaigns Exploit Weak Kubernetes Clusters for Crypto Mining
  • [ ] New Report Exposes Vice Society's Collaboration with Rhysida Ransomware
• Trend Micro Research, News and Perspectives
  • [ ] An Overview of the New Rhysida Ransomware Targeting the Healthcare Sector
  • [ ] Zero Trust Frameworks for Industry
  • [ ] The Journey to Zero Trust with Industry Frameworks
• Krebs on Security
  • [ ] Microsoft Patch Tuesday, August 2023 Edition
• Technical Information Security Content & Discussion
  • [ ] EmploLeaks is an OSINT tool that helps detect members of a company with leaked credentials
  • [ ] Smashing the state machine: the true potential of web race conditions
  • [ ] TunnelCrack: Widespread design flaws in VPN clients
  • [ ] Hacking AI: technical deep dive into low level exploits in Apache MXnet
  • [ ] Ultimate guide to Rubber Ducky attacks using Kali NetHunter
• Blackhat Library: Hacking techniques and research
  • [ ] Beginner Forensics CTF | HackTheBox Alien Cradle & Extraterrestrial Persistence
• TorrentFreak
  • [ ] Pirate Site Survives ‘Operation: Mechta Shemesh’ But Massive Lawsuit Awaits
  • [ ] Youtube-dl Site Goes Offline as Hosting Provider Enforces Court-Ordered Ban
• netsecstudents: Subreddit for students studying Network Security and its related subjects
  • [ ] Best textbooks/books on penetration testing for web and mobile applications?
• Computer Forensics
  • [ ] Since there is an uptick of new people to the field. Here is a link to to Hitchhiker's Guide to DFIR. A good resource that will help.
  • [ ] Microsoft E5
• Social Engineering
  • [ ] How can fear of missing out be used when persuading someone?
  • [ ] A social issue is a problem that affects many people within a society.
• KitPloit - PenTest Tools!
  • [ ] Xurlfind3R - A CLI Utility To Find Domain'S Known URLs From Curated Passive Online Sources
• Information Security
  • [ ] Kali Linux Home lab for Beginners in cybersecurity
  • [ ] All in one package: Remote Server with RDP Access, Unlimited Worldwide Residential Proxies, and Device Fingerprint Spoofing. (1 Year)
  • [ ] When installing mobile apps, how often do you review and adjust app permissions?
• Deep Web
  • [ ] What kind of social media are most frequentent lately
• Security Affairs
  • [ ] Balada Injector still at large – new domains discovered
  • [ ] EvilProxy used in massive cloud account takeover scheme
  • [ ] Downfall Intel CPU side-channel attack exposes sensitive data
  • [ ] LockBit threatens to leak medical data of cancer patients stolen from Varian Medical Systems
• The Register - Security
  • [ ] Nearly every AMD CPU since 2017 vulnerable to Inception data-leak attacks
  • [ ] Rapid7 prepares to toss 18% of workforce to cut costs
  • [ ] Northern Ireland police may have endangered its own officers by posting details online in error
  • [ ] INTERPOL shutters '16shop' phishing-as-a-service outfit
• Appsecco - Medium
  • [ ] My Exciting Two Month Journey as a Security Analyst at Appsecco

[github-actions[bot]]

This issue is stale because it has been open for 30 days with no activity.

[github-actions[bot]]

This issue was closed because it has been inactive for 14 days since being marked as stale.