Clik here to view.
Clik here to view.
比特币收益高达700% 惹黑客眼红
比特币收益高达700% 惹黑客眼红 昨天来源：汇金网 摘要Tianjia多年来的投资收益让其他投资者羡慕不已。直到上周，这位29岁的北京程序员，在香港的Bitfinex比特币交易所账户中存有价值44万美元的比特币。比特币上涨的那几天，他每天醒来会发现账户比睡觉前多了好几千美元。 php?url=0E9nhXCn2O" alt="比特币收益高达700% 惹黑客眼红"...
View ArticleClik here to view.
“匿名者”对世界反兴奋剂机构和国际体育仲裁法庭发起网络攻击
“匿名者”对世界反兴奋剂机构和国际体育仲裁法庭发起网络攻击 16分钟前来源：cnBeta 摘要：据外媒报道，近日国际黑客组织“匿名者”(Anonymous）波兰分支对世界反兴奋剂机构(WADA)和国际体育仲裁法庭(CAS)发起了网络攻击。“匿名者”已经成功攻击了国际体育仲裁法庭(CAS)网站服务器,并泄露了相关数据及发布其成员攻击CAS服务器过程的视频。 php?url=0E9xS3nYVJ"...
View ArticleExpression based security with Spring
Spring Security Many web apps have a very simple security concept based on user roles. You might have some admin , some common users and maybe some more roles like a moderator or a super-user . Such a...
View ArticleClik here to view.
锁了也没用！大众免钥系统被曝严重漏洞，波及1亿辆汽车
英国伯明翰大学的一波研究人员与大众汽车集团“杠上”了。三年前，他们发现了大众汽车启动点火装置的一个漏洞，被大众起诉，被迫推迟研究成果发表。结果，这一团队“越挫越勇”，本周再次披露了大众汽车免钥入车系统的重大漏洞，波及全球1亿辆汽车，令人咂舌。 锁了也白锁：两种攻击 2013年，英国伯明翰大学（University of Birmingham）的计算机科学家Flavio...
View ArticleClik here to view.
周鸿yN：世界首次机器人黑客比赛举办，安全领域可借力人工智能
安全领域在 8 月份有不少值得关注的黑客大会，比如 Black Hat，以及 DEF CON。当然，也包括国内 8 月 16-17 日即将举办的中国互联网安全大会（ISC 2016）。 其中，DEF CON 黑客大会上，我们看到了网络安全行业对人工智能技术的关注和探索。大会不仅将主题定义成了“Rise of the Machines（机器的崛起）”，会上还有 4...
View ArticleClik here to view.
关于Symfoware的透明加密
Symfoware V12基于PostgreSQL，并提供了一些功能增强，其中包括表空间级的透明加密。 概述 加密key和keystore 每个表空间的数据由各自的Key加密 表空间Key由Master Key加密 Master Key整个数据库实例只有1个，使用者通过密码加密保存在keystore中 加密算法 采用AES算法，利用Intel Xeon内置的AES-NI（Advanced...
View ArticleClik here to view.
全国高校网安联赛 Xnuca_CTF Writeup
Xnuca CTF WEB Writeup 全国大学生网安联赛官网：http://xnuca.erangelab.com/ 7月份的主题是WEB，自然团队由我来打了。只是这次比赛发生了很奇葩的现象，刚开始的几乎两个小时，赛事平台挂了，拿着flag不能提交……很多对都是这样。不多说，上主题吧！ 团队：枫林SEC 0x01 题目：Sign...
View ArticleClik here to view.
I hung around with hackers for a week, and now I'm completely paranoid
REUTERS I was somewhere around the Paris Hotel on the edge of the Las Vegas Strip when the paranoia began to take hold. I glanced down at my phone. Sitting in a talk by Lavabit CEO Ladar Levison, I...
View ArticleClik here to view.
暴风雨的降临：WordPress挑战黑客的权威！
0x00 介绍 这是个续集，如果想一起看得快要看下第一节: 暴风雨的前夕：渗透高度安全环境前的准备 http://bbs.ichunqiu.com/thread-9780-1-1.html 那么这个网站的程序是WordPress的程序，所以在渗透测试的过程中，一直在挑衅黑客的权威！(小小的吹个牛) 0x01 渗透计划的实行 首先在前一节文章中说到了这些计划: 进行第一步密码字典生成:...
View ArticleClik here to view.
Your hard drive's sounds could help hackers crack your system
Weirdly enough, the DiskFiltration hack, as it's called, works by taking control of a hard drive's actuator. Much like the arm of a record player it moves back and forth across a hard drive's platters...
View ArticleDIY bank account raiding trojan kit touted in dark web dive bars
Cybercrooks are touting a new DIY financial crime kit that lets you roll your own ZeuS-like software nasty. The Scylex malware kit lets you build malicious code that, once running on a victim's windows...
View ArticleClik here to view.
顶着史上最安全手机的帽子，360Q5要放哪些大招？
顶着史上最安全手机的帽子，360Q5要放哪些大招？ 3小时前来源：驱动中国 360手机将于8月份发布年度旗舰新机360Q5。虽然还没有发布，但是这款新机已经凭借着各种宣传要素顶上了史上最安全手机的帽子。然而新机能否肩挑大任，扛得起安全手机的大旗？或许这才是大家现在最关心的问题吧。 php?url=0EA9soWh79" alt="顶着史上最安全手机的帽子，360Q5要放哪些大招？"...
View ArticleClik here to view.
Nemucod Downloader Returns, Spreads Ad-Clicking Backdoor
Researchers are warning Nemucod one of the most active Trojans this year has resurfaced with a new campaign. This time, the malicious downloader appears to be infecting victims with an ad-clicking...
View ArticleClik here to view.
Vivaldi's tweaky grinders fire out another release: Add themes, security
The Vivaldi browser continues its rapid progress its third release in four months. The new binary largely contains bug fixes, with theme support the biggest new feature. In addition to the eight...
View ArticleTanium: The company planning to be the Google of cyber security
On a cyber security professional’s wish list, visibility over the enterprise’s network would rank consistently near the top and a company called Tanium is determined to reinvent it. Since it hit the...
View ArticleClik here to view.
SourceClear's Commit Watcher
Someone accidentally commits private AWS keys to an open-source project and ends up handing candy to a bitcoin miner. Once committed, these secrets are easily discoverable through GitHub Search, which...
View ArticleClik here to view.
电信诈骗来袭 重庆保监局手把手教你如何防范
电信诈骗来袭 重庆保监局手把手教你如何防范 2天前来源：中国网事 php?url=0E9poGJYBW" alt="电信诈骗来袭 重庆保监局手把手教你如何防范" /> 近段时间，全国出现了一些涉及保险领域的电信诈骗，骗子手段多、套路深、骗钱坑爹不含糊。8月12日，重庆保监局专门发出了防范涉保电信诈骗的风险提示，从多个方面提醒大家，赶快来看看吧！...
View ArticleNew Scylex Banking Trojan Kit Surfaces on the Dark Web
Threat-intel experts from Heimdal Security and the CSIS Security Group have uncovered a new banking trojan called Scylex, currently advertised on Dark Web hacking forums, but not yet seen in...
View Article