Clik here to view.
Introducing the Kernelheaping Package II
(This article was first published on INWT-Blog-RBloggers , and kindly contributed toR-bloggers) In the first part of <a target="_blank" style="text-decoration:underline;"...
View ArticleClik here to view.
美军都是纸老虎？水平一般的黑客居然偷走了大量机密资料
都说美国军队是世界上最强大的武装力量，不过在黑客眼中，它们却是纸老虎。 7月11日，DarkReading报道了一起机密资料被盗案：一名水平一般般的黑客不费吹灰之力地从美国陆军电脑中获取了捕食者无人机（MQ-9A）的训练材料和艾布拉姆斯主战坦克（M1）的操作手册等敏感资料后，把这些资料堂而皇之的放在暗网上售卖了。...
View ArticleClik here to view.
bugku-web-writeup
F12了解一下，flag就在源码里了。 flag KEY{Web-2-bugKssNNikls9100} 文件上传测试 直接上传报错，通过burp抓包，修改Content-Type为image/jpeg，成功上传获取flag. Flag:42e97d465f962c53df9549377b513c7e 计算器 这里将maxlength限制为了1，直接前端修改为3，口算点击提交即可获得flag...
View ArticleClik here to view.
'Zip Slip' Vulnerability Affects Thousands of Projects Across Many Ecosystems
Security researchers at British software firm Snyk have revealed details of a critical vulnerability that affects thousands of projects across many ecosystems and can be exploited by attackers to...
View Article2018_706_wp
两张图叠加，010处理下就出来了。 Misc2 png的长度设置长一点就出flag misc3 steg 打开，RGB三个最低色道分别来一次，flag组合下就出来了。 Misc4 流量包内有jsfuck编码的密码，log文件内有rar文件，拿密码去解压rar文件，就出flag re1 flag直接写在main函数里了。。 re2 题目算法似乎有问题，反正我是没解出来，好像有人解出来了- -，真流弊...
View ArticleClik here to view.
漏洞频现 你的虚拟币还安全吗？
代码漏洞几乎是不可避免的。从以太坊到EOS，区块链安全问题一波未平一波又起，平台漏洞不断爆出，价值百亿美金的资产平台安全岌岌可危。 据数据显示，全球仅2018年上半年就有19亿美元的加密货币因黑客攻击而造成损失。同时，据区块链安全信息平台Bcsec不完全统计，2年来（2016年7月份至今）区块链黑客攻击事件至少有100余起，公开曝出的金额损失达30亿美元，并且这个数字还在不断上升。...
View ArticleHackers increasingly targeting cloud infrastructure
As organisations move more of their IT estates and data to cloud environments, criminals are turning to the cloud to exploit its vast computational power and multiply their profits. This is one of the...
View ArticleClik here to view.
周鸿yN:至今不觉得懂区块链 自己像白痴一样听不太懂
5月30日，蓝港互动创始人、火星财经发起人王峰向360公司董事长周鸿yN发起对话。这场对话源于日前360发布的一则新闻：其团队发现区块链平台EOS多项高危安全漏洞。周鸿yN在微博上称，这一漏洞价值超过“百亿美金”。 周鸿yN在对话中表示，区块链技术很火，但安全问题还没有被大家重视起来，他认为真正的安全问题其实还没出来，...
View ArticleClik here to view.
从大佬向数据堂买数据说起，聊聊GAN加密
这几日国内曝出一件涉嫌数据泄露的要案，涉案公司多达 11 家，查获公民信息数据 4000 GB、数百亿条。其中，国内知名大数据公司、新三板上市公司「数据堂」涉案。 此案涉及的数据隐私性高，案件涉及的上网 URL 数据，包含了手机号、上网基站代码等 40 余项信息要素，记录手机用户具体的上网行为，甚至部分数据能够直接进入公民个人账号主页。国内外多家互联网企业包括...
View ArticleClik here to view.
Remove Supportantivirus.org Scam
This article will help you remove Supportantivirus.org fully. Follow the tech support scam removal instructions provided at the end of this article. Supportantivirus.orgis a website which is connected...
View ArticleDrop all tables sharing the same prefix in postgres
I would like to delete all tables sharing the same prefix ('supenh_agk') from the same database, using one sql command/query. To do this in one command you need dynamic SQL with EXECUTE in a DO...
View ArticleClik here to view.
SMBs are underprepared for cyberattacks
No business is immune from cyber attack, and smaller companies are often targeted as they lack the resources to put into first class protection. A new survey by cybersecurity company Webroot of 600 IT...
View ArticleClik here to view.
AppSec at the speed of DevOps in the age of open source
Gabriela Motroc and Tim Mackey at DevOpsCon Berlin 2018 In the world of DevOps, traditional application security is no longer enough. How can we improve AppSec? What are the newest security challenges...
View ArticleClik here to view.
【议题前瞻】基于EDR和MDR技术的新一代应急响应体系 | 2018 SOC&EDR应用建设高峰 ...
如今，面对安全威胁，企业已经改变了安全支出战略，从仅采取预防措施转向更侧重于检测和响应。 对于更好的检测和对安全事件响应的需求，也催生了新的安全产品和服务细分领域，例如端点检测和响应（EDR）、专有管理检测和响应（MDR）服务等。 终端安全是企业安全运营体系中必不可缺的一环，涵盖企业资产生命周期与漏洞管理、入侵检测、安全监控与基线稽查等。...
View Article动态|全球区块链黑客马拉松第三站7月14日将于纽约开幕
动态|全球区块链黑客马拉松第三站7月14日将于纽约开幕 纽约时间7月14日-15日，节点资本、本征资本、IDEAS、、CDC主办的全球区块链黑客马拉松第三站纽约站将开幕。北京和洛杉矶站已吸引了斯坦福、清华、前Google T5成员、Bloomberg专家等技术人才，本次纽约站将携手IBM，继续寻找技术极客。...
View ArticlePixie App Smart Contract Security Audit
Contents Introduction Coinfabrik has been hired to audit the Pixie token sale smart contracts. We started this PDF report writing a summary of the smart contracts provided by the client and a list of...
View ArticleClik here to view.
Cloudbric: Decentralized, Accessible, AI-based Cybersecurity for Individuals
Already an established enterprise and website cybersecurity provider, Cloudbric is launching a decentralized universal security platform which will provide a diverse suite of AI-based cybersecurity...
View ArticleCTF-RSA破解方式整理
其实对于RSA加密算法攻击的文章，互联网上已经有很多了，所以本文主要还是以整理为主，只列出每种攻击方式的攻击条件、需要的一些工具、具体操作步骤等。 算法基本概念 算法介绍 RSA加密算法属于公钥加密算法，是一种非对称密码算法，所谓非对称，就是一个密码用来加密，另一个密码用来解密，一般来说，用公钥加密，私钥解密，当然也有其他情况。 算法原理...
View ArticleUnsanctioned Apps Invite Fox into Cybersecurity Hen House
In this InfoSec Insider, Tim Bandos looks at why network admins will want to keep a close watch on network traffic within the enterprise. Conventional wisdom has shown there’s a short line between a...
View ArticleThe Difference between a Computer Virus and Computer Worm
Viruses and worms are often used interchangeably: there are a few key differences in how they work. Both viruses and worms are a type ofmalware: a worm is a type of virus. What’s a Computer Virus?...
View Article
