[每日信息流] 2024-10-18

[chainreactorbot]

每日安全资讯（2024-10-18）

• 先知安全技术社区
  • [ ] Java手动实现完整的加密通信流程
  • [ ] 玄机-哥斯拉 4.0 流量分析 wp
  • [ ] 从JNDI到log4j2漏洞
• Doonsec's feed
  • [ ] 密码之重与密码学的奥秘
  • [ ] DataEase存在数据库配置信息暴露漏洞(CVE-2024-30269) 附POC
  • [ ] 分享一个资源
  • [ ] Adobe ColdFusion 反序列化漏洞
  • [ ] Adobe ColdFusion 文件读取漏洞
  • [ ] 【资讯】北京市经信局发布《关于征集先进计算赋能新质生产力典型应用案例的通知》
  • [ ] 【资讯】上海市经信委发布《关于公布2024年度上海市重点产业和领域数字化产品和解决方案推荐目录的通知》
  • [ ] 【资讯】江西省工信厅等两部门发布《关于开展制造业数字化转型入企诊断和数字化改造专项项目申报工作的通知》
  • [ ] 新增资料《地理位置：更多可能》
  • [ ] 英飞达软件有限公司信息泄露漏洞【带工具】
  • [ ] 去除您的烦恼——Windows激活脚本 (MAS)
  • [ ] 10月26日专题会议 | 流量智能安全分析
  • [ ] 10月26日专题会议 | 威胁情报分析与应用
  • [ ] 掌握SAFE业务流，真能解决初次沟通的大问题！
  • [ ] 警惕深度伪造“陷阱”
  • [ ] 以色列笨重的传呼机如何愚弄真主党
  • [ ] 黑客被起诉，3.5 万次攻击中使用的 DDoS 工具被缴获
  • [ ] 过时技术，致命结果：真主党如何落入陷阱
  • [ ] 谷歌请求第九巡回上诉法院紧急暂缓执行
  • [ ] 反抗联邦调查局的黑客现已入狱
  • [ ] 云原生01—K8s
  • [ ] Java反序列化GUI利用工具
  • [ ] 发现Facebook SSRF，收获31500美元赏金的故事【1】
  • [ ] 面向未来的软件定义汽车网络安全策略
  • [ ] 当前和未来微控制器的长期网络安全的检查清单
  • [ ] 华为： Al系统的网络安全治理实践
  • [ ] 【漏洞预警】Kubernetes Image Builder凭证管理不当漏洞CVE-2024-9486
  • [ ] 【高危漏洞预警】Apache CloudStack 模板验证绕过漏洞CVE-2024-45219
  • [ ] 【漏洞预警】Apache CloudStack请求来源验证绕过漏洞 CVE-2024-45693
  • [ ] CNVD通用型漏洞挖掘思路-平台漏洞列表一眼定睛法
  • [ ] 红队安全攻防知识库
  • [ ] ctftools-all-in-oneV6.0正式版进度
  • [ ] 【邀请函】2024年密码应用技术论坛暨中国密码学会密码应用工作委员会年会即将召开
  • [ ] 境外企业在国内非法测绘？多方紧急回应
  • [ ] 专家解读 | 王钦敏：构建公共数据资源开发利用新格局
  • [ ] 谷歌：2023年被利用的漏洞70%是0 Day
  • [ ] 热烈祝贺金水区新联会网络空间、创意设计专委会授牌仪式圆满成功
  • [ ] G.O.S.S.I.P 阅读推荐 2024-10-17 Modern C（免费版）
  • [ ] 黑客滥用 EDRSilencer 工具绕过安全性并隐藏恶意活动
  • [ ] 大前端：如何突破动态化容器的天花板？
  • [ ] 美团机器人研究院｜2024年科研课题申报指南
  • [ ] qq被盗忘记密码七步找回
  • [ ] 网络安全领域的 16 个专业
  • [ ] 史宾格再获vivo最佳安全技术合作伙伴奖项
  • [ ] 「漏洞复现」英飞达医学影像存档与通信系统 WebUserLogin.asmx 信息泄露漏洞
  • [ ] 静态恶意代码逃逸学习
  • [ ] 别再被骗了，找到自己真正热爱的事业哪有那么重要
  • [ ] 深信服将重磅发布秋季新品！10月23日，一起见证！
  • [ ] “数据安全技能能手”2024年第2期培训大纲
  • [ ] Damn-Vulnerable-Drone：一款针对无人机安全研究与分析的靶机工具
  • [ ] 技往开来｜慢雾(SlowMist) 应邀出席第十届区块链全球峰会
  • [ ] 安全419《抗量子密码系列访谈》之三未信安
  • [ ] [bypass] 迅雷下载功能bypass 403 | waf
  • [ ] CDSP认证2.0全新升级，创新技术与实战案例携手，助力数据安全有效实施
  • [ ] 游戏玩家遭遇“黑手”，稀有“装备”频频失窃，福州警方破获“黑客”盗宝奇案！
  • [ ] 快手两大议题亮相QCon上海站，邀您共启技术探索之旅！
  • [ ] 【安全圈】高调的后果：频繁发起DDoS的苏丹匿名者两名黑客被逮捕并被美国起诉
  • [ ] 【安全圈】X/Twitter最新使用条款强制用户同意授予内容训练AI 如果不同意则无法使用X
  • [ ] 【安全圈】SolarWinds Web Help Desk曝出严重漏洞，已遭攻击者利用
  • [ ] 【安全圈】谷歌：2023年被利用的漏洞70%是0Day
  • [ ] 全议程公布！| 2024 全球数商大会数据流通安全合规主题论坛火热报名中
  • [ ] 特斯拉、极氪等紧急回应，某境外企业非法测绘被国安局通报
  • [ ] 专访盛邦安全副总裁袁先登：数据要素政策密集落地带来市场机遇，后续投入更多研发资源到数据技术方向
  • [ ] 2024年首届“网空杯”师生乒乓球联谊赛圆满举行
  • [ ] 黑客技术如何开创你的高薪未来？
  • [ ] 30天渗透测试练习计划（2024 第一部分）
  • [ ] 国安部披“智能驾驶非法测绘”，移动版“天眼系统”敲响安全警钟！
  • [ ] 仿冒乱象泛滥，媒体、政府官网也能“套牌”？
  • [ ] 国安部：敏感数据转移出境威胁国家安全！数据跨境如何“层层设防”？
• Private Feed for M09Ic
  • [ ] glzjin forked glzjin/android-chat from wildfirechat/android-chat
  • [ ] mgeeky starred namazso/dll-proxy-generator
  • [ ] mgeeky starred lmarena/arena-hard-auto
  • [ ] Ak74-577 started following cpu0x00
  • [ ] 0xbug created a repository 0xbug/docs
  • [ ] uknowsec starred 0xchang/DockerApiRCE
  • [ ] timwhitez starred YouChenJun/CheckCdn
  • [ ] killeven starred istoreos/istoreos
  • [ ] gh0stkey starred me115/linuxtools_rst
  • [ ] gh0stkey starred RocketChat/Rocket.Chat
  • [ ] timwhitez starred cpu0x00/Ghost
  • [ ] HuYlllc pushed to dev in chainreactors/malice-network
  • [ ] wabzsy starred go-acme/lego
  • [ ] 4ra1n starred YouChenJun/CheckCdn
  • [ ] zema1 starred YouChenJun/CheckCdn
  • [ ] Rvn0xsy starred trimstray/the-book-of-secret-knowledge
  • [ ] 4ra1n starred xuchengsheng/wx-dump-4j
  • [ ] FunnyWolf starred Syslifters/sysreptor
  • [ ] Y4er starred EcoPasteHub/EcoPaste
• Files ≈ Packet Storm
  • [ ] ABB Cylon Aspect 3.08.01 networkDiagAjax.php Remote Network Utility Execution
  • [ ] SofaWiki 3.9.2 Cross Site Scripting
  • [ ] Ubuntu Security Notice USN-7073-1
  • [ ] Red Hat Security Advisory 2024-8180-03
  • [ ] Red Hat Security Advisory 2024-8179-03
  • [ ] Red Hat Security Advisory 2024-8129-03
  • [ ] Red Hat Security Advisory 2024-8128-03
  • [ ] Red Hat Security Advisory 2024-8127-03
  • [ ] SofaWiki 3.9.2 Shell Upload
  • [ ] Red Hat Security Advisory 2024-8126-03
  • [ ] Ubuntu Security Notice USN-7072-1
  • [ ] Red Hat Security Advisory 2024-8125-03
  • [ ] Red Hat Security Advisory 2024-8124-03
  • [ ] Ubuntu Security Notice USN-7071-1
  • [ ] Red Hat Security Advisory 2024-8123-03
  • [ ] Red Hat Security Advisory 2024-8122-03
  • [ ] Red Hat Security Advisory 2024-8121-03
  • [ ] Red Hat Security Advisory 2024-8119-03
  • [ ] Red Hat Security Advisory 2024-8118-03
  • [ ] Red Hat Security Advisory 2024-8117-03
  • [ ] Red Hat Security Advisory 2024-7944-03
  • [ ] Red Hat Security Advisory 2024-7941-03
• Trustwave Blog
  • [ ] How to Implement Microsoft Security Products for Maximum Value
• 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com
  • [ ] 云时代下，如何落地有效的云安全防御体系
  • [ ] 2024金融科技大会 | 梆梆安全推出基于新监管下的“全渠道”移动应用安全建设实践方案
  • [ ] 2024 年 9 月头号恶意软件：AI 驱动型攻击方式兴起
  • [ ] 盛邦安全副总裁、董秘袁先登：护航卫星互联网等新兴产业安全至关重要
  • [ ] 卫星互联网安全产业化提速——盛邦安全董事长权小文接受中国证券报采访
  • [ ] 盛邦安全闪耀迪拜GITEX Global 2024
• Der Flounder
  • [ ] Setting Safari to always prompt for download location on macOS Sequoia
• Recent Commits to cve:main
  • [ ] Update Thu Oct 17 22:26:38 UTC 2024
  • [ ] Update Thu Oct 17 14:14:20 UTC 2024
  • [ ] Update Thu Oct 17 06:40:00 UTC 2024
• 安全客-有思想的安全新媒体
  • [ ] 微软十月更新中的 5 个零日，请立即打补丁
  • [ ] 热点 | 又一汽车巨头遭勒索攻击，360为车企系好网络“安全带”
  • [ ] 利用开源 EDRSilencer 工具以规避 EDR
  • [ ] mbNET.mini工业路由器发现严重漏洞，可能导致全面系统接管
  • [ ] SideWinder 发动新一轮攻击，地理覆盖范围扩大，涉及亚洲、中东、非洲及欧洲众多国家的实体和战略基础设施目标
  • [ ] CISA 警告 SolarWinds Help Desk 软件漏洞被主动利用
  • [ ] 美国网络安全和基础设施安全局 (CISA) 在其已知漏洞目录中增加了 Windows 内核、Mozilla Firefox 和 SolarWinds Web Help Desk 漏洞。
  • [ ] 从误用到滥用： 人工智能风险与攻击
  • [ ] 美国气象局借助人工智能实现更精准飓风预测
  • [ ] 巴西联邦警察逮捕了黑客 USDoD，他是国家公共数据和 InfraGard 入侵事件的幕后黑手。
  • [ ] Apache CloudStack 在最新版本中修补了重大安全漏洞
• Security Boulevard
  • [ ] The Evolution of Automated Browser Detection: A Cat & Mouse Game
  • [ ] CVE-2024-9381 – Ivanti CSA Security Vulnerability – October 2024
  • [ ] Life in the Swimlane with Abby Shapiro, Customer Success Manager
  • [ ] Mastering Product-led Onboarding in B2B SaaS: A Comprehensive Guide
  • [ ] ADR Provides Application Visibility for CISOs | Closing Application Layer Gap | Contrast Security
  • [ ] World Economic Forum: AI, Quantum Require ‘Paradigm Shift’ in Security
  • [ ] USENIX NSDI ’24 – EPVerifier: Accelerating Update Storms Verification with Edge-Predicate
  • [ ] Email Aliasing is a Great Privacy Tool
  • [ ] Executive Perspectives, Episode 2, Michelle Faylo
  • [ ] The CMMC Final Rule is Published: What Contractors Need to Know
• 奇安信攻防社区
  • [ ] 样本分析：phobos勒索软件样本分析学习
• SecWiki News
  • [ ] SecWiki News 2024-10-17 Review
• Hacking Articles
  • [ ] Abusing AD-DACL : Generic ALL Permissions
• 一个被知识诅咒的人
  • [ ] 用AI创建自动化代码审查工具：智能分析与优化代码的未来
  • [ ] Java与DevOps：自动化部署Java应用到Docker与Kubernetes
  • [ ] 基于AI的动态代码生成：自动生成符合需求的Python应用程序
• GuidePoint Security
  • [ ] Quarterly GRIT Ransomware Report — Q3 2024
• Securelist
  • [ ] SAS CTF and the many ways to persist a kernel shellcode on Windows 7
• blog.avast.com EN
  • [ ] Scary cybersecurity stories to tell in the dark
• Malwarebytes
  • [ ] 23andMe will retain your genetic information, even if you delete the account
• SpiderLabs Blog
  • [ ] Feline Hackers Among Us? (A Deep Dive and Simulation of the Meow Attack)
• Webroot Blog
  • [ ] 10 steps to safeguarding your privacy online
• Horizon3.ai
  • [ ] Fireside Chat: Horizon3.ai and Legion Cyberworks
• daniel.haxx.se
  • [ ] UndefinedBehaviorSanitizer’s unexpected behavior
• Reverse Engineering
  • [ ] Call stack spoofing explained using APT41 malware
• 安全牛
  • [ ] 面对英特尔CPU触目惊心的安全漏洞， 除了排查，更要加速信创发展
  • [ ] SC27网络安全国际标准公开征集提案，AI安全、数据安全等优先；科技巨头遭遇数据危机，思科发生大规模信息泄露 | 牛­览
• 奇客Solidot–传递最新科技情报
  • [ ] Matt Mullenweg 的报复行动冲击 WordPress 社区
  • [ ] 哈勃发现木星大红斑大小会变化
  • [ ] 官方机构指责英特尔产品存在网络安全问题
  • [ ] Twitter/X 将使用用户帖子训练 AI，这一次用户无法退出
  • [ ] 腾讯微信使用的 MMTLS 加密协议存在安全弱点
  • [ ] 高收入的低稳定性
  • [ ] Winamp 移除源码库
• FreeBuf网络安全行业门户
  • [ ] 常见API接口安全设计
  • [ ] 云上规模化的威胁检测与防护 | FCIS 2024议题前瞻
  • [ ] FreeBuf早报 | 苹果缩短网站安全证书有效期提案遭反对；思科机密开发数据疑遭模泄漏
  • [ ] 谷歌：2023年被利用的漏洞70%是0Day
  • [ ] 国安部：某境外企业以汽车智能驾驶研究为掩护，开展非法测绘
  • [ ] SolarWinds Web Help Desk曝出严重漏洞，已遭攻击者利用
• rtl-sdr.com
  • [ ] ARMSDR.COM: Tracking Support for Windows 11 ARM64 Compatible SDR Applications
• 黑海洋 - WIKI
  • [ ] Bootstrap国内cdn库
  • [ ] openHarmony逆向工具包
• 腾讯玄武实验室
  • [ ] 每日安全动态推送(10-17)
• 锦行科技
  • [ ] 【网安实习生招聘】少年请留步，伯乐寻你来了！
• 威努特安全网络
  • [ ] 如何构建公安视频传输网络安全防护屏障？
• Black Hills Information Security
  • [ ] Clear, Concise, and Comprehensive: The Formula for Great SOC Tickets
• 代码卫士
  • [ ] 谷歌：2023年70%的已遭利用漏洞是0day
  • [ ] VMware 修复HCX 平台上可导致RCE的高危SQLi 漏洞
• 青衣十三楼飞花堂
  • [ ] 红队 vs 蓝队--网络攻防实战技术解析
• 慢雾科技
  • [ ] 技往开来｜慢雾(SlowMist) 应邀出席第十届区块链全球峰会
• 安全研究GoSSIP
  • [ ] G.O.S.S.I.P 阅读推荐 2024-10-17 Modern C（免费版）
• 丁爸 情报分析师的工具箱
  • [ ] 【工具】几个搜索工具
  • [ ] 【PPT】如何进行有效的网上开源调查-联合国反恐中心
• 安全内参
  • [ ] 中国网络空间安全协会：建议对英特尔启动网络安全审查
  • [ ] 美陆军为小型企业提供安全协作“飞地”，打造供应商安全新典范
• 数世咨询
  • [ ] 安全漏洞曝光：AMD 和 Intel面临新型攻击威胁
  • [ ] 漏洞频发、故障率高：应系统排查英特尔产品网络安全风险
• M01N Team
  • [ ] 直播预告 | 国际猎人勒索组织！前沿情报独家揭秘
• 信息安全国家工程研究中心
  • [ ] 官方通报“境外企业以汽车智驾为由非法测绘”，多方连夜回应
• dotNet安全矩阵
  • [ ] .NET 一款内网渗透环境下切换不同身份启动进程的工具
  • [ ] .NET 内网攻防实战电子报刊
  • [ ] .NET SoapShell 更新 | 发布增强免杀版适配哥斯拉客户端的WebShell
• 补天平台
  • [ ] 倒计时1天，2024补天白帽大会明天召开！
• 安全圈
  • [ ] 【安全圈】高调的后果：频繁发起DDoS的苏丹匿名者两名黑客被逮捕并被美国起诉
  • [ ] 【安全圈】X/Twitter最新使用条款强制用户同意授予内容训练AI 如果不同意则无法使用X
  • [ ] 【安全圈】SolarWinds Web Help Desk曝出严重漏洞，已遭攻击者利用
  • [ ] 【安全圈】谷歌：2023年被利用的漏洞70%是0Day
• 中国信息安全
  • [ ] 招聘启事 | 中国信息安全测评中心招聘非编安全测评人员
  • [ ] 预告 | 深信服2024秋季新品发布会来了！10月23日，一同见证！
  • [ ] 关注 | 英特尔产品存在严重安全问题，中国网络空间安全协会建议启动网络安全审查
  • [ ] CNNVD | 关于Oracle多个安全漏洞的通报
  • [ ] 专家解读 | 王钦敏：构建公共数据资源开发利用新格局
  • [ ] 观点 | 提升数据安全治理监管能力的三个着力点
  • [ ] 评论 | 守护好儿童的“腕上”安全
• 极客公园
  • [ ] H100 算力价格暴跌 75%，对 AI 创业公司意味什么？
  • [ ] 传境外车企借智驾非法测绘，特斯拉、极氪辟谣；亚马逊首推彩屏版 Kindle；俄罗斯方块40 周年纪念作下月发售 | 极客早知道
• 微步在线
  • [ ] 正告“银狐”：你马上就要成为我们的玩物！
• 默安科技
  • [ ] 宵明CSPM：助力跨国企业解锁云上安全新技能
• 情报分析师
  • [ ] 如何通过电话号码获取情报？
  • [ ] 美国高科技企业人事任命动态（2024年9月更新）
• 山石网科安全技术研究院
  • [ ] 手把手玩转路由器漏洞挖掘系列-ZigBee协议
• 字节跳动技术团队
  • [ ] 扣子上新！文生播客、客服、陪伴、教育…官方带你抄作业！
  • [ ] 一文教会你轻松上手豆包MarsCode 编程助手！（文末送AirPods 4啦）
• 360数字安全
  • [ ] 国安部披“智能驾驶非法测绘”，移动版“天眼系统”敲响安全警钟！
  • [ ] 仿冒乱象泛滥，媒体、政府官网也能“套牌”？
• 安全419
  • [ ] 安全419《抗量子密码系列访谈》之三未信安
• 百度安全实验室
  • [ ] 史宾格再获vivo最佳安全技术合作伙伴奖项
• 迪哥讲事
  • [ ] 分享一个资源
• LuxSci
  • [ ] Secure Texting Apps for Healthcare: Are They Safe?
• IT Service Management News
  • [ ] Minacce e attacchi: Bancario spia i conti correnti (ma non è un "incidente di sicurezza"!)
  • [ ] Normativa: FAQ di ACN su NIS2
• Over Security - Cybersecurity news aggregator
  • [ ] How Israel’s bulky pager fooled Hezbollah
  • [ ] Microsoft warns it lost some customer's security logs for a month
  • [ ] Anonymous Sudan, dagli attacchi DDoS agli arresti del dipartimento di giustizia
  • [ ] Researcher Discovers Open Cloud: Data from Engled S.r.l. and Italian Gas S.r.l. Exposed
  • [ ] Fake Google Meet conference errors push infostealing malware
  • [ ] Un hacker sottovalutato - Il Post
  • [ ] Microsoft Defender XDR's Deception Technology
  • [ ] FBI arrest Alabama man suspected of hacking SEC's X account
  • [ ] Alabama man arrested in breach of SEC social media account
  • [ ] Undercover North Korean IT workers now steal data, extort employers
  • [ ] What I’ve learned in my first 7-ish years in cybersecurity
  • [ ] Feds arrest man who allegedly participated in hack of the SEC’s X account, boosting Bitcoin’s price
  • [ ] BforeAI Named 2024 SINET16 Innovator Award Winner
  • [ ] More than 5,000 arrested, thousands of websites disrupted in crackdown on illegal gambling during Euro tournament
  • [ ] Insurance giant Globe Life facing extortion attempts after data theft from subsidiary
  • [ ] Kroger’s facial recognition plans draw increasing concern from lawmakers
  • [ ] BianLian ransomware claims attack on Boston Children's Health Physicians
  • [ ] Japan's ruling political party hit by cyberattack from alleged pro-Russian hackers
  • [ ] Top 5 Cloud Security Automations for SecOps Teams
  • [ ] Hackers blackmail Globe Life after stealing customer data
  • [ ] Sudanese Brothers Arrested in ‘AnonSudan’ Takedown
  • [ ] Two Sudanese Nationals Indicted for Alleged Role in Anonymous Sudan Cyberattacks on Hospitals, Government Facilities, and Other Critical Infrastructure in Los Angeles and Around the World
  • [ ] SolarWinds Releases Patches for High-Severity Vulnerabilities
  • [ ] Ukraine tracks emailed bomb threats to Russia-linked group
  • [ ] Independent Russian news site rides out a week of DDoS incidents
  • [ ] GitHub Releases Security Advisory on Critical Vulnerability in Self-Hosted Environments
  • [ ] SAS CTF and the many ways to persist a kernel shellcode on Windows 7
  • [ ] UAT-5647 targets Ukrainian and Polish entities with RomCom malware variants
  • [ ] ClickFix tactic: The Phantom Meet
  • [ ] NIS2: il 66% non riuscirà a rispettare i termini di scadenza per l’adeguamento
  • [ ] AlpineReplay - 898,681 breached accounts
  • [ ] Hacker allegedly behind attacks on FBI, Airbus, National Public Data arrested in Brazil
• ICT Security Magazine
  • [ ] Gestione delle Password: Un Approccio Completo per la Sicurezza Digitale
• bellingcat
  • [ ] Geolocating Site Where Hamas Leader Yahya Sinwar Was Killed
• 甲方安全建设
  • [ ] 「推安早报」1017 | 域安全、红蓝工具节选
• Krypt3ia
  • [ ] Reflections for the Cybersecurity Professional
  • [ ] Comprehensive Threat Intelligence Report: The Rise of Nation-State Cyber Attacks and Their Convergence with Cybercrime
• Have I Been Pwned latest breaches
  • [ ] AlpineReplay - 898,681 breached accounts
• TrustedSec
  • [ ] Spec-tac-ula Deserialization: Deploying Specula with .NET
• Securityinfo.it
  • [ ] NIS2: il 66% non riuscirà a rispettare i termini di scadenza per l’adeguamento
• Instapaper: Unread
  • [ ] Google 70% of exploited flaws disclosed in 2023 were zero-days
  • [ ] 5 Techniques for Collecting Cyber Threat Intelligence
  • [ ] FIDO Alliance Drafts New Protocol to Simplify Passkey Transfers Across Different Platforms
  • [ ] Android 15 Rolling Out With New Theft, Application Protection Features
  • [ ] Hacker Charged With Seeking to Kill Using Cyberattacks on Hospitals
  • [ ] Analysis Process
  • [ ] Mamba 2FA, così rubano gli account Microsoft 365 come difendersi
  • [ ] Bitcoin e criptovalute, la stangata del governo
• SANS Internet Storm Center, InfoCON: green
  • [ ] Scanning Activity from Subnet 15.184.0.0/16, (Thu, Oct 17th)
  • [ ] ISC Stormcast For Thursday, October 17th, 2024 https://isc.sans.edu/podcastdetail/9184, (Thu, Oct 17th)
• Graham Cluley
  • [ ] A glimmer of good news on the ransomware front, as encryption rates plummet
• The Register - Security
  • [ ] Troubled US insurance giant hit by extortion after data leak
  • [ ] Brazilian police claim they've cuffed serial cybercrook behind FBI and Airbus attacks
  • [ ] WeChat devs introduced security flaws when they modded TLS, say researchers
  • [ ] Anonymous Sudan isn't any more: Two alleged operators named, charged
• Security Affairs
  • [ ] Russia-linked RomCom group targeted Ukrainian government agencies since late 2023
  • [ ] A critical flaw in Kubernetes Image Builder could allow attackers to gain root access
  • [ ] VMware fixes high-severity SQL injection flaw CVE-2024-38814 in HCX
• Trend Micro Research, News and Perspectives
  • [ ] How to Mitigate the Impact of Rogue AI Risks
  • [ ] 5 AI Security Takeaways featuring Forrester
• The Hacker News
  • [ ] Russian RomCom Attacks Target Ukrainian Government with New SingleCamper RAT Variant
  • [ ] Researchers Uncover Cicada3301 Ransomware Operations and Its Affiliate Program
  • [ ] 5 Ways to Reduce SaaS Security Risks
  • [ ] SideWinder APT Strikes Middle East and Africa With Stealthy Multi-Stage Attack
  • [ ] U.S. Charges Two Sudanese Brothers for Record 35,000 DDoS Attacks
  • [ ] Critical Kubernetes Image Builder Vulnerability Exposes Nodes to Root Access Risk
• Technical Information Security Content & Discussion
  • [ ] Escaping the Chrome Sandbox Through DevTools
  • [ ] CVE-2024-45844: Privilege escalation in F5 BIG-IP
  • [ ] Call stack spoofing explained using APT41 malware
  • [ ] DEF CON 32 talk recordings
  • [ ] DEF CON 32 - OH MY DC Abusing OIDC all the way to your cloud - Aviad Hahami
  • [ ] Finding Vulnerability Variants at Scale
  • [ ] [PoC] SAP Note 3433192 - Code Injection vulnerability in SAP NetWeaver AS Java
• netsecstudents: Subreddit for students studying Network Security and its related subjects
  • [ ] SDET/QA to PenTesting
  • [ ] Favorite OS for Laptop
  • [ ] Can I Build a Future in Cybersecurity While Working in Marketing?
• Information Security
  • [ ] GRVT Introduces New Hybrid Security Model for DeFi
• Your Open Hacker Community
  • [ ] How to siff through the trash when looking for vulnerabilities in web apps?
  • [ ] JohnTheZipper ZIP hash is far too long, and confused on hashcat commands on Windows
• Social Engineering
  • [ ] no bullshit criminal record sites
  • [ ] Building Relationship
• Krebs on Security
  • [ ] Sudanese Brothers Arrested in ‘AnonSudan’ Takedown
• Deeplinks
  • [ ] California Attorney General Issues New Guidance on Military Equipment to Law Enforcement
  • [ ] Prosecutors in Washington State Warn Police: Don’t Use Gen AI to Write Reports
• Blackhat Library: Hacking techniques and research
  • [ ] How are they fooling youtube's preview system?
• TorrentFreak
  • [ ] TorrentGalaxy Has a Rough Start Under New Owners
  • [ ] Pirate IPTV Server Shut Down as City of London Police Target UK ‘Bulk Seller’
• Security Weekly Podcast Network (Audio)
  • [ ] Effective Operational Outcomes - Ken Dunham - PSW #847