Clik here to view.
热点 | 慢雾区发布0day漏洞预警 可盗取交易所账号
慢雾区0day漏洞预警：某第三方知名 JS 库存在 XSS 0day 漏洞，可绕过 Cloudflare 等防御机制。该漏洞如果被恶意利用会导致数字货币交易所等平台的用户帐号权限被盗、恶意操作等资产损失。 经过慢雾安全团队确认该漏洞影响范围非常之广，漏洞利用过程简单，威力十足。...
View Article90后“黑客”盗取味多美电子券
原标题：90后“黑客”盗取味多美电子券 陈某和杨某两名90后是上海一家网络科技公司的网络维护人员，发现味多美网站后台漏洞后，两人侵入味多美服务器，盗取了36万余元的蛋糕券电子兑换码。后陈某将部分兑换码在网上打折出售，获利18万元，给味多美公司造成25万余元损失。日前，陈某和杨某在西城法院出庭受审。 程序员盗30多万电子兑换券...
View ArticleZero Exposure Team Advisory: Micro Focus Operations Orchestration, Remote...
Tenable Research's Zero Exposure team just released an advisory for an information disclosure and denial-of-service vulnerability in Micro Focus Operations Orchestration software . This post provides...
View ArticleClik here to view.
Code42 to Exhibit and Speak at Microsoft Ignite 2018
Data security company to showcase its Code42 Forensic File Search product MINNEAPOLIS (BUSINESS WIRE) #MSIgnite ― Code42 , a leading data security company,today announced it will be exhibiting at...
View ArticleReal World Applications of Cryptocurrencies ― User Authentication
It has been almost a couple of months since my last Real World Applications of Cryptocurrencies post, but its back with a bang. Following on from my previous post on Art & Collectibles & the...
View Article4 Benefits of a Security Operations Center
You can install and implement great cybersecurity solutions and follow established cybersecurity best practices, but that won’t make you invulnerable. As important as it is to have baseline defenses...
View ArticleClik here to view.
Microsoft and Imperva Collaboration Bolsters Data Compliance and Security...
This article explains how Imperva SecureSphere V13.2 has leveraged the latest Microsoft EventHub enhancements to help customers maintain compliance and security controls as regulated orsensitive data...
View ArticleClik here to view.
Internet-Connected CCTV Cameras Vulnerable to 'Peekaboo' Hack
Zero-day flaw in China-based NUUO's video recorder technology still unfixed three months after vendor was alerted. A security flaw in a widely used network video recorder technology has put potentially...
View ArticleClik here to view.
DevOps and Security Practices Equals DevSecOps
On today’s episode of The New Stack Makers, TNS founder Alex Williams sat down for a discussion with tCell co-founder and vicepresident of engineering Boris Chen to learn more about the impact of what...
View ArticleClik here to view.
Ripple’s Exec Talks about a New Product Launch, Crypto-friendly Regulations...
The market for cryptocurrencies has made its way into the world of traditional finance. Not only is there more exposure of the public to cryptocurrencies, but also the markets have been able to gain...
View ArticleClik here to view.
信息安全的高富帅认证- 国际注册信息安全经理
CISM-Certified Information Security Manager国际注册信息安全经理，（认证机构为：ISACA）是在信息安全认证市场独一无二的，因为它是专为在信息安全项目管理方面有经验的人员设计的。 从2002年开始全球已有 33000 多位管理精英获得此认证，其中有超过600名CEO，超过2000名CIO或CISO，超过8000个安全总监或安全经理，2000个咨询顾问。...
View ArticleClik here to view.
What Security Leaders Can Do To Stay Relevant
During this year’s Exabeam Spotlight18 conference in Las Vegas, amid the conversations about building a modern SOC or a successful insider threat program, Steve Moore, chief cybersecurity strategist...
View ArticleClik here to view.
5 ways DevSecOps changes security
There’s been an ongoing kerfuffle over whether we need to expandDevOps to explicitly bring in security. After all, the thinking goes,DevOps has always been something of a shorthand for a broad set of...
View ArticleClik here to view.
Your Business Should Be More Afraid of Phishing than Malware
The headlines love to talk about sophisticated hacking gangs, exploiting zero-day vulnerabilities to break their way into businesses and steal corporate data. It seems not a day goes past without a...
View ArticleBlog Review: Sept. 19
Applied Materials’ David Thompson shares the new DARPA program that is focused on using correlated electrons to develop a new type of switch with quantum effects, potentially leading to unprecedented...
View ArticleUsing your service desk system to track and schedule important &...
Most IT departments would have some type of service desk system in place, but are they using it for more than just the basic support scenarios and change control? Any modern service desk system should...
View ArticleClik here to view.
SensorBot：利益驱动下的病毒营销
近日，360烽火实验室的异常数据检测系统捕获到一类名为“SensorService”的应用存在异常行为。分析发现其通过某广告SDK传播，安装后无图标，并且伪装成系统服务，利用系统漏洞进行提权，接收云端服务器控制命令进行静默安装推广应用、刷量等恶意操作。这类恶意应用不仅给用户的隐私及财产安全带来了极大风险，而且静默推广的方式严重损害了软件厂商的品牌形象。根据应用名及恶意功能等特点，我们将其命名为Sen...
View ArticleClik here to view.
"安全至上 全局为王" 思科参加2018国家网络安全宣传周
最新安全理念强势登场 应对网络威胁势在必行 由中宣部、中央网信办等十部门联合举办的2018国家网络安全宣传周，于9月17日在成都揭开序幕。今年的盛会主要聚焦数据安全、个人信息等热门话题，是创办五年来规模最大、博览会展区面积最广、高峰论坛体量最大的一届。思科作为网络安全领域的创新引领者，不仅以"安全至上...
View ArticleClik here to view.
360谭晓生获2018年网络安全优秀人才奖 全国仅10人上榜
9月19日，备受业界瞩目的“2018年网络安全优秀人才奖”获奖榜单，在2018年国家网络安全宣传周开幕式上揭晓，360集团技术总裁、首席安全官谭晓生榜上有名。此次全国共有10名来自政府机构、研究机构、高校、企业等组织的安全行业从业者获此殊荣。...
View Article