[每日信息流] 2023-08-11

[chainreactorbot]

每日安全资讯（2023-08-11）

• SecWiki News
  • [ ] SecWiki News 2023-08-10 Review
• HackerOne Hacker Activity
  • [ ] Notes attachments render HTML in preview mode
  • [ ] Improper restriction of excessive authentication attempts on WebDAV endpoint
  • [ ] Any (non-admin) user from an instance can destroy any (user and/or global) external filesystem
  • [ ] New AppPassword can be generated without password confirmation
  • [ ] Missing brute force protection on OAuth2 API controller
• Sploitus.com Exploits RSS Feed
  • [ ] OutSystems Service Studio 11.53.30 - DLL Hijacking exploit
  • [ ] DMIS:CRI LMS 2.0 SQL Injection exploit
  • [ ] Desenvolvido C3iM CMS 2.0 Cross Site Scripting exploit
  • [ ] Doma CMS 1.0 Cross Site Scripting exploit
  • [ ] Deprixa 3.2.5 Cross Site Request Forgery exploit
  • [ ] e2 Distr CMS 2.8.5.3 Backup Disclosure exploit
  • [ ] WordPress WP Project Manager 2.6.4 Privilege Escalation exploit
  • [ ] Request-Baskets v1.2.1 - Server-side request forgery (SSRF) exploit
  • [ ] TP-Link Archer AX21 - Unauthenticated Command Injection exploit
  • [ ] systemd 246 - Local Privilege Escalation exploit
  • [ ] Dynamic Journal CMS 2.5 Database Disclosure exploit
  • [ ] DriverPack Solution CMS 17.11.108 Cross Site Scripting exploit
  • [ ] Discussion On Kontackt 1.18 Cross Site Scripting exploit
  • [ ] Maltrail v0.53 - Unauthenticated Remote Code Execution (RCE) exploit
  • [ ] Digisha CMS 1.2.7 SQL Injection exploit
  • [ ] DigaSell Digital Store PHP Script 1.0.0 SQL Injection exploit
• Files ≈ Packet Storm
  • [ ] Microsoft Windows Kernel Security Descriptor Use-After-Free
  • [ ] Microsoft Windows Kernel Unsafe Reference
  • [ ] Microsoft Windows Kernel Arbitrary Read
  • [ ] American Fuzzy Lop plus plus 4.08c
  • [ ] Packet Fence 13.0.0
  • [ ] OpenSSH 9.4p1
  • [ ] WordPress WP Project Manager 2.6.4 Privilege Escalation
  • [ ] Red Hat Security Advisory 2023-4590-01
  • [ ] Ubuntu Security Notice USN-6281-1
  • [ ] Red Hat Security Advisory 2023-4591-01
  • [ ] Ubuntu Security Notice USN-6243-2
  • [ ] Dynamic Journal CMS 2.5 Database Disclosure
  • [ ] e2 Distr CMS 2.8.5.3 Backup Disclosure
  • [ ] DriverPack Solution CMS 17.11.108 Cross Site Scripting
  • [ ] DMIS:CRI LMS 2.0 SQL Injection
  • [ ] Discussion On Kontackt 1.18 Cross Site Scripting
  • [ ] Digisha CMS 1.2.7 SQL Injection
  • [ ] DigaSell Digital Store PHP Script 1.0.0 SQL Injection
  • [ ] Doma CMS 1.0 Cross Site Scripting
  • [ ] Desenvolvido C3iM CMS 2.0 Cross Site Scripting
  • [ ] Deprixa 3.2.5 Cross Site Request Forgery
• 安全脉搏
  • [ ] 一次暴露面全开的红帽渗透测试【getshell】
  • [ ] 【漏洞预警】通达OA SQL注入漏洞威胁通告
• Der Flounder
  • [ ] Session videos now available from Penn State MacAdmins Conference 2023
• Recent Commits to cve:main
  • [ ] Update Thu Aug 10 00:28:05 UTC 2023
• CXSECURITY Database RSS Feed - CXSecurity.com
  • [ ] ReyeeOS 1.204.1614 MITM Remote Code Execution (RCE)
  • [ ] Pyro CMS 3.9 Server-Side Template Injection
  • [ ] JLex GuestBook 1.6.4 Reflected XSS
• Security Boulevard
  • [ ] Agents are a Dead-End for IoT Security
  • [ ] Lexmark Command Injection Vulnerability ZDI-CAN-19470 Pwn2Own Toronto 2022
  • [ ] Traceable AI Extends Reach to Combat Fraudulent API Activity
  • [ ] What is the democratization of fraud?
  • [ ] BSides Leeds 2023 – Sean Wright – Docker To The Security
  • [ ] My Favorite Things: Hardware Hacking and Reverse Engineering
  • [ ] Site Takeover via SCCM’s AdminService API
  • [ ] SSPM to the Rescue: Accelerating SaaS Incident Response by 90%
  • [ ] Zero-Day Flaws an Evolving Weapon in Ransomware Groups’ Arsenals
  • [ ] Randall Munroe’s XKCD ‘What to Do’
• 先知安全技术社区
  • [ ] JNDI注入学习
• Trustwave Blog
  • [ ] 5 Reasons to Pursue a Career in Cybersecurity
• Chromium Blog
  • [ ] Protecting Chrome Traffic with Hybrid Kyber KEM
• Twitter @Nicolas Krassas
  • [ ] RT Devansh (⚡, 🥷): A curated list of awesome iOS application security resources. https://github.com/Cy-clon3/awesome-ios-security
  • [ ] Simplifying BOF Development: Debug, Test, and Save Your B(e)acon https://www.cobaltstrike.com/blog/simplifying-bof-development
  • [ ] Gootloader SEO watering hole malware targets law firms https://www.scmagazine.com/news/gootloader-seo-watering-hole-malware-targets-law-firms
  • [ ] Bulletproof hosting provider Lolek Hosted dismantled https://www.scmagazine.com/brief/bulletproof-hosting-provider-lolek-hosted-dismantled
  • [ ] Widespread file exposure possible with Western Digital, Synology NAS flaws https://www.scmagazine.com/brief/widespread-file-exposure-possible-with-wes...
  • [ ] CISA: New Whirlpool backdoor used in Barracuda ESG hacks https://www.bleepingcomputer.com/news/security/cisa-new-whirlpool-backdoor-used-in-barracuda-...
  • [ ] New Statc Stealer Malware Emerges: Your Sensitive Data at Risk https://thehackernews.com/2023/08/new-statc-stealer-malware-emerges-your.html
  • [ ] Dell Compellent hardcoded key exposes VMware vCenter admin creds https://www.bleepingcomputer.com/news/security/dell-compellent-hardcoded-key-exposes-...
  • [ ] New Attack Alert: Freeze[.]rs Injector Weaponized for XWorm Malware Attacks https://thehackernews.com/2023/08/new-attack-alert-freezers-injector.html
  • [ ] Secret Search Warrant Issued For Trump's Twitter https://packetstormsecurity.com/news/view/34888/Secret-Search-Warrant-Issued-For-Trumps-Twitter.html
  • [ ] Blog about reverse engineering, hacking and breaking your software in every way imaginable https://secret.club/
  • [ ] “Please do not make it public”: Vulnerabilities in Sogou Keyboard encryption expose keypresses to network eavesdropping https://www.reddit.com/r/net...
  • [ ] Cryptographic Flaw in Libbitcoin Explorer Cryptocurrency Wallet https://www.schneier.com/blog/archives/2023/08/cryptographic-flaw-in-libbitcoin-explor...
  • [ ] Get your staff's consent before you monitor them, tech inquiry warns https://go.theregister.com/feed/www.theregister.com/2023/08/10/workplace_monitori...
  • [ ] Emerging Attacker Exploit: Microsoft Cross-Tenant Synchronization https://thehackernews.com/2023/08/emerging-attacker-exploit-microsoft.html
  • [ ] Cybercriminals Increasingly Using EvilProxy Phishing Kit to Target Executives https://thehackernews.com/2023/08/cybercriminals-increasingly-using.html
  • [ ] Encryption Flaws in Popular Chinese Language App Put Users' Typed Data at Risk https://thehackernews.com/2023/08/encryption-flaws-in-popular-chinese.h...
  • [ ] 'MoustachedBouncer' APT Spies on Embassies, Likely via ISPs https://www.darkreading.com/attacks-breaches/moustached-bouncer-apt-spied-embassies-belaru...
  • [ ] Hacking With Your Nemesis https://posts.specterops.io/hacking-with-your-nemesis-7861f75fcab4?source=rss----f05f8696e3cc---4
  • [ ] RT Piotr Bazydło: Another Exchange RCE patched: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38181 (advisory says Spoofing instead ...
• Google Online Security Blog
  • [ ] Making Chrome more secure by bringing Key Pinning to Android
• 90Sec - 最新话题
  • [ ] 一次edu存储型XSS挖掘过程
• Sucuri Blog
  • [ ] From Google DNS to Tech Support Scam Sites: Unmasking the Malware Trail
• Perception Point
  • [ ] Investigating the Intricacies of BEC Invoice Redirect Attacks
• 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com
  • [ ] 360与中税集团共同打造税务行业标准大模型 助力税务数字化整体跃迁
  • [ ] 360安全大模型发布，以“安全即服务”新理念提升企业安全运营能力
  • [ ] 如何使用macOS 安全配置进行应用程序开发和测试（上）
  • [ ] 严重的AMI MegaRAC漏洞让黑客可以瞬间使高危服务器成废砖
  • [ ] 数字认证重磅亮相2023商用密码大会，全面展示密码应用创新成果
  • [ ] ISC 2023潘剑锋：360正式发布行业首个可交付安全大模型应用
  • [ ] ISC 2023 | AI新场景·安全新边界技术高峰会召开，构筑智能可信世界
  • [ ] ISC 2023尚冰：高度关注人工智能等新技术安全问题
  • [ ] 年度总冠军重磅出炉！ISC 2023创新独角兽沙盒大赛圆满收官
• Twitter @bytehx
  • [ ] RT ghostlulz: This is still one of my favorite wordlist to use when bug bounty hunting 💯 https://github.com/Bo0oM/fuzz.txt #bugbountytips #bugbount...
• Forcepoint
  • [ ] ChatGPT on How AI Can Transform Customer Engagement for B2B Marketers
• Securelist
  • [ ] Focus on DroxiDat/SystemBC
  • [ ] Common TTPs of attacks against industrial organizations
• Horizon3.ai
  • [ ] Lexmark Command Injection Vulnerability ZDI-CAN-19470 Pwn2Own Toronto 2022
• blog.avast.com EN
  • [ ] New Report Finds Shift in Cyber Crime | Avast
• Hex Rays
  • [ ] Building IDA Python on Windows
• Malwarebytes Labs
  • [ ] Ransomware review: August 2023
  • [ ] August Patch Tuesday stops actively exploited attack chain and more
• Application Security Blog
  • [ ] Whose IP is it anyway? Introducing Synopsys AI code analysis API
• SAP Blogs
  • [ ] IBP OBP/RTI Adding Customer Group Attribute to Demand Planning Level
  • [ ] Troubleshooting Flexible Workflow issues
  • [ ] How to check which release strategy characteristic values are being used in a purchasing document
  • [ ] Automate your Job Postings Using Generative AI & SAP Build Apps
  • [ ] Using several ratings from Performance forms in Compensation
  • [ ] Discover the Power of SAP AI Core: The New Learning Journey Now Available!
  • [ ] Partner Business Challenges from PEC Athens
  • [ ] Release Navigator for SAP S/4HANA Cloud, public edition 2308
  • [ ] Canada S/4HANA Cloud, public edition – Tax codes creation enabled
  • [ ] SAP AI Core template generator now available on NPM
• PortSwigger Blog
  • [ ] New techniques and tools for web race conditions
• Microsoft Security Response Center
  • [ ] Azure Serial Console Attack and Defense - Part 1
• SpiderLabs Blog from Trustwave
  • [ ] Gootloader: Why your Legal Document Search May End in Misery
• Twitter @Octagon Networks
  • [ ] Re Only reply with screenshot. Redact the answer to not spoil th fun.
  • [ ] There is an XSS here somewhere. 🤔 Can you pop alert() here? 10$ reward for the first valid solution! 💢🔥 attach proof in reply. http://octagon...
• Blog - Praetorian
  • [ ] Konstellation: A Tool for RBACpacking in Kubernetes
• Twitter @hakivvi
  • [ ] RT Jeti @DEFCON: Here's a write-up on a Browser-Powered Desync bug that I discovered in the Azure CDN service known as Front Door. The entire concept ...
• Exploit-DB.com RSS Feed
  • [ ] [local] OutSystems Service Studio 11.53.30 - DLL Hijacking
  • [ ] [remote] TP-Link Archer AX21 - Unauthenticated Command Injection
  • [ ] [webapps] Maltrail v0.53 - Unauthenticated Remote Code Execution (RCE)
  • [ ] [webapps] Request-Baskets v1.2.1 - Server-side request forgery (SSRF)
  • [ ] [local] systemd 246 - Local Privilege Escalation
• FreeBuf网络安全行业门户
  • [ ] FreeBuf早报 | 网传58集团“倒卖”简历信息；搜狗输入法曝加密漏洞
  • [ ] ISC 2023胡振泉：真正的安全托管运营服务要为安全效果买单
  • [ ] 个人信息泄露，公安部抓获行业“内鬼”2300余名
  • [ ] 网传58集团“倒卖”毕业生简历信息
  • [ ] 为打击漏洞利用，谷歌将每周更新Chrome安全补丁
  • [ ] 微软账户成为 EvilProxy 网络钓鱼工具包的攻击目标
  • [ ] 英特尔处理器被曝出“Downfall”漏洞：可窃取加密密钥
  • [ ] Hvv进行时｜隐侠社工信息搜集技巧丰富渗透姿势（直播回顾）
  • [ ] 国家标准《信息安全技术 敏感个人信息处理安全要求》公开征求意见
• Private Feed for M09Ic
  • [ ] xpn starred xpn/stego-playground
  • [ ] timwhitez starred Idov31/Jormungandr
  • [ ] timwhitez starred xalicex/LOLDrivers_finder
  • [ ] timwhitez starred lem0nSec/ShellGhost
  • [ ] timwhitez starred rad9800/talks
  • [ ] timwhitez starred fortra/hw-call-stack
  • [ ] timwhitez starred gabriellandau/PPLFault
  • [ ] timwhitez starred WKL-Sec/Malleable-CS-Profiles
  • [ ] timwhitez starred WKL-Sec/StackMask
  • [ ] timwhitez starred WKL-Sec/GregsBestFriend
  • [ ] timwhitez started following WKL-Sec
  • [ ] Rvn0xsy starred ulissescastro/linux-native-backdoors
  • [ ] whwlsfb started following 4ra1n
  • [ ] H4wk-eye forked H4wk-eye/cf from M09Ic/cf
  • [ ] chainreactors forked chainreactors/phonedata from xluohome/phonedata
  • [ ] DVKunion started following chompie1337
  • [ ] glzjin starred Orange-Cyberdefense/GOAD
  • [ ] glzjin starred AlmondOffSec/PassTheCert
  • [ ] niudaii starred amitshekhariitbhu/go-backend-clean-architecture
  • [ ] yuligesec starred ax1sX/SecurityList
  • [ ] ourren starred SunLab-GMU/PySecDB
  • [ ] FunnyWolf starred prowler-cloud/prowler
• HackerNews
  • [ ] 针对 Linux 系统的恶意爬虫软件分析
  • [ ] 个人信息泄露，公安部抓获行业“内鬼”2300 余名
  • [ ] 为打击漏洞利用，谷歌将每周更新 Chrome 安全补丁
  • [ ] DARPA 启动为期两年的竞赛 以建立人工智能驱动的网络防御系统
  • [ ] 英特尔处理器被曝出“Downfall”漏洞：可窃取加密密钥
  • [ ] 微软账户成为 EvilProxy 网络钓鱼工具包的攻击目标
• 奇客Solidot–传递最新科技情报
  • [ ] 研究称中国对未成年人游戏时间限制没有减少游戏沉迷
  • [ ] Vim 项目的未来
  • [ ] 科学家在心脏组织中发现微塑料
  • [ ] 印度通过数据保护法案
  • [ ] Google 认为 AI 可以挖掘网上内容除非选择退出
  • [ ] 西雅图成为第一个保护零工避免突然“解雇”的美国城市
  • [ ] 保守派的维基百科替代 Justapedia 上线
  • [ ] 沙特宣布到 2025 年所有电子设备使用 USB-C 标准充电端口
  • [ ] 广西报告称大学的研究成果转化率不到 1%
  • [ ] 腾讯搜狗输入法存在加密漏洞容易暴露输入内容
  • [ ] CNET 删除旧文以改进搜索排名
• SecPulse安全脉搏
  • [ ] 【漏洞预警】通达OA SQL注入漏洞威胁通告
• 虎符智库
  • [ ] 解读 | 工业互联网安全国际标准正式发布，将如何指导行业发展？
• 黑海洋 - WIKI
  • [ ] Copy Trading合约跟单交易赚钱秘籍
  • [ ] 最强虚拟卡信用卡+实体卡-可直接消费USDT提现CNY
  • [ ] 人工智能AI代码翻译器 -AI Code Converter
  • [ ] 功能最强大的开源调查问卷系统和考试系统
  • [ ] 苹果Apple ID 自动化管理工具 自动检测解锁
  • [ ] 付费加密音乐格式转换Mp3 Flac工具
  • [ ] OpenAI账号分享 ChatGPT免费账号
  • [ ] 大麦抢票辅助软件-DaMaiHelper
  • [ ] xposed模块仓库 解锁各种实用功能-Xposed Module Repository
  • [ ] Cloudflare免费CDN配置详细教程
• Black Hills Information Security
  • [ ] Wrangling the M365 UAL with PowerShell and SOF-ELK (Part 1 of 3)
• SentinelOne
  • [ ] Day 1 of Black Hat USA 2023 | Generative AI, Automation & The Security Landscape of Tomorrow
• 腾讯安全威胁情报中心
  • [ ] [攻防小道君，8月10日向您来报！

“腾讯安全威胁情报中心”公众号内，回复口令“首战必胜”，可获得每日最新攻防重要事件及高危漏洞情报信息。

复制跳转 https://tix.qq.com/ 登录腾讯安全·TIX威胁情报中心，可查询分析相关威胁线索并进行深度研判。](https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247500896&idx=1&sn=86a99fdb2171c65951c175e4f1a1e41a&chksm=ec9f1d13dbe89405bb9c9f32f614fc41aa3ea6eea6b6b2cec3dc16f51563eefc77e15ce4e941&scene=58&subscene=0#rd)

• 腾讯玄武实验室
  • [ ] 每日安全动态推送(8-10)
• 白帽100安全攻防实验室
  • [ ] 福利抽奖 | WMCTF2023赛前直播赛题大揭秘
• dotNet安全矩阵
  • [ ] 2023HVV— 汇总 .NET ByPass WebShell
  • [ ] .NET矩阵星球优惠活动持续进行
• Hacking就是好玩
  • [ ] 小红书SRC上线！快来解锁新地图
• 软件安全与逆向分析
  • [ ] 福利！eBPF安全开发与攻防对抗课程第三季额外增加Frida安全对抗10节内容
• 安全牛
  • [ ] 第十一届互联网安全大会（ ISC 2023）开幕
  • [ ] 通付盾汪德嘉：数据要素市场化的实现与安全思考
  • [ ] 《信息安全技术 敏感个人信息处理安全要求》（征求意见稿）公开征求意见
• 看雪学苑
  • [ ] CLFS信息泄露漏洞CVE-2023-28266分析
  • [ ] “黑吃黑”，间谍软件制造商LetMeSpy被黑客删除服务器数据后宣布关停业务
  • [ ] 本周更新8节！教你30小时玩转CTF
• PeiQi文库
  • [ ] PeiQi文库 - Github更新 (2)
• 网安杂谈
  • [ ] 【赠书2本】天才黑客扛鼎之作，安全从业标配十年重磅更新！
• 极客公园
  • [ ] Mac mini跌破2900；比亚迪500万辆新能源车下线，全球首家；传BAT向英伟达下50亿美元大单 | 极客早知道
• 山石网科安全技术研究院
  • [ ] 第三届山石CTF夏令营入营名单来啦！
• 腾讯科恩实验室
  • [ ] 腾讯安全科恩实验室2023社会招聘启动，开放三大社招岗位
• 默安科技
  • [ ] 得分！这款红蓝对抗利器入选省级技术创新成果
• 东软NetEye网络安全
  • [ ] 东软网络安全产品亮相2023商用密码大会
• 三六零CERT
  • [ ] 安全日报（2023.08.10）
• OPPO安全应急响应中心
  • [ ] 小红书SRC上线！快来解锁新地图
• 红日安全
  • [ ] 8.10HVV情报速递
• 威胁猎人Threat Hunter
  • [ ] 当营销活动碰上羊毛党，车企这样“精准反击”
  • [ ] 威胁猎人邀您参加“威胁情报与取证分析技术沙龙深圳站”，8月26日等你来！
• 关键基础设施安全应急响应中心
  • [ ] 英国发生重大数据泄露事件！近10年选民数据全部曝光
  • [ ] “黑化”的AI | 盘点十大新型 AI 网络攻击
  • [ ] ​DARPA和白宫发起2000万美元的人工智能网络安全挑战竞赛
• 深信服千里目安全技术中心
  • [ ] 【高级持续威胁追踪】关于近期国内航空航天领域面临APT窃密攻击风险分析
• 吾爱破解论坛
  • [ ] 【售罄】论坛定制T恤已售罄，近2日共售1961件，截至目前，本次销售总计3640件，预计14天左右发货，请大家耐心等待收货，有任何问题可与淘宝客服沟通，感谢大家的厚爱。
• CNCERT国家工程研究中心
  • [ ] 计算机可疑程序深度分析鉴定框架设计与实现
  • [ ] 英国选举委员会遭严重数据泄漏：数百万选民信息曝光
  • [ ] 新型对抗攻击影响ChatGPT等主流大语言模型
• 数世咨询
  • [ ] 数世咨询：《一体化端点安全能力白皮书》正式发布（附报告下载）
  • [ ] 2023攻防演练必修开源组件漏洞合集
• AlienVault Security Essentials Blog
  • [ ] Mac systems turned into proxy exit nodes by AdLoad
• Il Disinformatico
  • [ ] Repubblica ficca le scie chimiche nel titolo e nell'articolo. Giornalismo nell’era del SEO
• Over Security - Cybersecurity news aggregator
  • [ ] Rightbiz - 65,376 breached accounts
  • [ ] Google loses bid to throw out ‘Incognito’ lawsuit, placing private browsing under scrutiny
  • [ ] From Google DNS to Tech Support Scam Sites: Unmasking the Malware Trail
  • [ ] Gafgyt malware exploits five-years-old flaw in EoL Zyxel router
  • [ ] La storia del gruppo Clop e il nuovo scenario delle minacce informatiche
  • [ ] Microsoft Exchange updates pulled after breaking non-English installs
  • [ ] Reflecting on supply chain attacks halfway through 2023
  • [ ] Ukrainian official touts country’s wartime cyber intelligence efforts
  • [ ] CISA Director: US has lessons to learn about anticipating threats, disruption
  • [ ] NSA chief: Chinese cyber spies continue to improve — but hasn’t surpassed US
  • [ ] MoustachedBouncer hackers use AiTM attacks to spy on diplomats
  • [ ] California city investigating data theft after ransomware group’s claims
  • [ ] Flashpoint a Strong Performer in External Threat Intelligence Forrester Wave
  • [ ] US should crack down on SIM swapping following Lapsus$ attacks: DHS review
  • [ ] CISA: New Whirlpool backdoor used in Barracuda ESG hacks
  • [ ] Lawmakers press FCC for action on Chinese-made cellular modules
  • [ ] Multiple zero days found affecting crypto platforms
  • [ ] Iranian cyber spies are targeting dissidents in Germany, warns intelligence service
  • [ ] Safeguarding Against Silent Cyber Threats: Exploring the Stealer Log Lifecycle
  • [ ] Dell Compellent hardcoded key exposes VMware vCenter admin creds
  • [ ] S3 Ep147: What if you type in your password during a meeting?
  • [ ] German military procurement officer arrested on suspicion of spying for Russia
  • [ ] Focus on DroxiDat/SystemBC
  • [ ] New Jersey, Emerson Public School District data in hands of Medusa ransomware group
  • [ ] Common TTPs of attacks against industrial organizations
  • [ ] Facebook: profileremo gli utenti per marketing solo con il loro consenso
  • [ ] Violazione della privacy: la responsabilità disciplinare e risarcitoria del dipendente
  • [ ] Wazuh, la soluzione open-source per migliorare la sicurezza aziendale
• bellingcat
  • [ ] Revealing Andrew Tate’s Secretive War Room “Brothers”
• Have I Been Pwned latest breaches
  • [ ] Rightbiz - 65,376 breached accounts
• Yak Project
  • [ ] 【文末福利】定了！2023 CCS成都网络安全大会，分论坛等你
• Securityinfo.it
  • [ ] Wazuh, la soluzione open-source per migliorare la sicurezza aziendale
• 奇安信 CERT
  • [ ] 【已复现】Smartbi Token 回调地址漏洞(QVD-2023-18159)安全风险通告
  • [ ] 奇安信集团2023年8月补丁库更新通告第一次更新
• 安全内参
  • [ ] 美国政府发起超亿元奖金挑战赛，悬赏能挖漏洞的下一代AI
  • [ ] 美国陆军网络司令部利用AI增强网络攻防能力
• 信息安全国家工程研究中心
  • [ ] 工程中心精彩亮相2023商密大会，展现最新密码应用安全创新成果
• 渗透测试网络安全
  • [ ] 利用插件逻辑反制Acunetix WVS 扫描器
• 黑伞安全
  • [ ] GraphQL API 漏洞
• SANS Internet Storm Center, InfoCON: green
  • [ ] Some things never change ? such as SQL Authentication ?encryption?, (Thu, Aug 10th)
  • [ ] ISC Stormcast For Thursday, August 10th, 2023 https://isc.sans.edu/podcastdetail/8610, (Thu, Aug 10th)
• 黑奇士
  • [ ] 奇葩高管：舍不得买8元可乐，送文化衫睡了女粉17天，婚内y炮还跟朋友共享猎物视频
• Deeplinks
  • [ ] Congress Amended KOSA, But It's Still A Censorship Bill
• NetSPI
  • [ ] NetSPI and BMC Collaborate to Strengthen Mainframe Security
• Instapaper: Unread
  • [ ] HackInBo® Forensic Games, fase #2 sulla scena del crimine
• 火绒安全
  • [ ] 火绒安全终端防护数据月报（2023-07）
• Security Current
  • [ ] A Practical Approach to AI Security
• Forensic Focus
  • [ ] Digital Forensics Round-Up, August 10 2023
• The Register - Security
  • [ ] There's a good chance your VPN is vulnerable to privacy-menacing TunnelCrack attack
  • [ ] Get your staff's consent before you monitor them, tech inquiry warns
• Security Affairs
  • [ ] Statc Stealer, a new sophisticated info-stealing malware
  • [ ] CISA discovered a new backdoor, named Whirlpool, used in Barracuda ESG attacks
  • [ ] CISA adds actively exploited flaw in .NET, Visual Studio to its Known Exploited Vulnerabilities catalog
  • [ ] US Govt launches Artificial Intelligence Cyber Challenge
  • [ ] Data of all serving police officers Police Service of Northern Ireland (PSNI) mistakenly published online
• KitPloit - PenTest Tools!
  • [ ] Chaos - Origin IP Scanning Utility Developed With ChatGPT
• Computer Forensics
  • [ ] Forensic Tool To Analyze Mailbox
• Social Engineering
  • [ ] how can anchoring be used for asking favors?
• Graham Cluley
  • [ ] 10,000 N Ireland police officers and staff have their details exposed after spreadsheet screw-up
  • [ ] Rhysida ransomware – what you need to know
  • [ ] Smashing Security podcast #334: Acoustic attacks, and the tears of a crypto rapper
• Blackhat Library: Hacking techniques and research
  • [ ] No Log Assessment - PUREVPN. Thoughts?
  • [ ] Best VPN in 2023? Chosen By Reddit Users
  • [ ] Guy on Upwork is telling my my Instagram is blacklisted
• 小米安全中心
  • [ ] 小红书SRC上线！快来解锁新地图
• Technical Information Security Content & Discussion
  • [ ] “Please do not make it public”: Vulnerabilities in Sogou Keyboard encryption expose keypresses to network eavesdropping
  • [ ] A Pain in the NAS: Exploiting Cloud Connectivity to PWN your NAS: WD PR4100 Edition
  • [ ] Extended resume writing guidance for InfoSec professionals
  • [ ] Lexmark Printer Command Injection - Credential Dumping POC
  • [ ] Client-side desync attack on Azure CDN
  • [ ] .NET developers alert: Moq NuGET package exfiltrates user emails from git
• netsecstudents: Subreddit for students studying Network Security and its related subjects
  • [ ] Knowledge base
• Posts By SpecterOps Team Members - Medium
  • [ ] Site Takeover via SCCM’s AdminService API
• TorrentFreak
  • [ ] YouTube Rippers Run Out of Money, Give Up On $83m RIAA Legal Battle
  • [ ] DataCamp’s IPTV “Scam Judgment” Claims Withdrawn Pending Settlement
• Information Security
  • [ ] What are the best security practices for company identification cards and access control badges?
  • [ ] How do you verify the legitimacy of a website before entering personal information?
• Schneier on Security
  • [ ] Cryptographic Flaw in Libbitcoin Explorer Cryptocurrency Wallet
• 李姐姐的扫描器
  • [ ] 利用插件逻辑反制Acunetix WVS 扫描器
• Your Hacking Tutorial by Zempirians
  • [ ] Where can i learn in a safe way?
• The Hacker News
  • [ ] New Attack Alert: Freeze[.]rs Injector Weaponized for XWorm Malware Attacks
  • [ ] New Statc Stealer Malware Emerges: Your Sensitive Data at Risk
  • [ ] Emerging Attacker Exploit: Microsoft Cross-Tenant Synchronization
  • [ ] Encryption Flaws in Popular Chinese Language App Put Users' Typed Data at Risk
  • [ ] Cybercriminals Increasingly Using EvilProxy Phishing Kit to Target Executives
  • [ ] Interpol Busts Phishing-as-a-Service Platform '16Shop,' Leading to 3 Arrests
• KitPloit - PenTest & Hacking Tools
  • [ ] Chaos - Origin IP Scanning Utility Developed With ChatGPT
• Security Weekly Podcast Network (Audio)
  • [ ] Incident Response Readiness - Gerard Johansen - PSW #794

[github-actions[bot]]

This issue is stale because it has been open for 30 days with no activity.

[github-actions[bot]]

This issue was closed because it has been inactive for 14 days since being marked as stale.