Clik here to view.
OneLogin SecureNotes Breach Exposed Data in Cleartext
Single sign-on company OneLogin began notifying customers this week that an attacker was able to take advantage of a bug in its system andview sensitive notes posted by users, thought to be secure. The...
View ArticleClik here to view.
Angler's obituary: Super exploit kit was the work of Russia's Lurk group
Ruslan Stoyanov was right: what could be history's most advanced financially-driven malware was the progeny of some 50 jailed hackers known as the Lurk group. It is a finding that solves the mysterious...
View ArticleClik here to view.
Data Security talk at NDC Oslo
Back in June I was fortunate enough to be selected to speak at NDC Oslo in Norway. This is a huge developer conference and I was humbled to have been selected to speak. Below is a link to a recording...
View ArticleClik here to view.
网安态势感知哪家强？安恒明鉴获大奖
摘要: 习总书记在4月19日中央网络安全和信息化工作座谈会的重要讲话中指出：“全天候全方位感知网络安全态势，增强网络安全防御能力和威慑能力。”由此可见，网络安全态势感知技术和平台的竞争，成为网络安全综合能力与技术水平的制高点。 态势感知系统究竟哪家强?最新的国内行业信......
View ArticleClik here to view.
IT Salary Outlook 2017: Starting Pay On The Rise
Starting salaries for IT professionals are expected to rise an average of 3.8% in 2017 compared with 2016. Find out which IT jobs are projected to see the greatest salary increases next year. Managing...
View ArticleClik here to view.
Attacking SS7: Mobile Operators Security Analysis
The interception of calls is quite a challenging task, but not only intelligence services can pull it off. A subscriber may become a victim of an average hacker who is familiar with the architecture of...
View ArticleClik here to view.
OS X同样存在Pegasus安全漏洞 苹果发布安全修复补丁
OS X同样存在Pegasus安全漏洞 苹果发布安全修复补丁 19小时前来源：苹果I派党 日前因阿联酋知名民权活动家艾哈迈德曼苏尔收到的一条短信，揭开了隐藏在iOS系统中超级大漏洞，名为“Pegasus”（天马）的恶意程序的进入了公众视野。在上周发布紧急修复补丁之后，苹果公司发现该OS X桌面系统中同样存在该漏洞，于是在本周四的时候面向OS X 10.10 Yosemite、OS X El...
View ArticleClik here to view.
网络战争比肩军备竞赛
2014年俄罗斯在乌克兰边境集结军队，但早在这场行动之前，俄罗斯的黑客就与乌克兰的政府网开战了。网络攻击已经成为所有国家和大型企业最警惕的危险。可是，当有一天，连家里的物联网都被黑客攻击了，我们又该如何应对？ 2012年8月15日，星期三，一个与伊朗政府有关的神秘组织攻击了世界上最大的能源公司，沙特阿美石油公司。他们选择的武器是：计算机病毒。...
View ArticleClik here to view.
漫画告诉你什么是DDoS攻击？
漫画告诉你什么是DDoS攻击？ 一点号疯子墨8小时前 如今大流量网络攻击正逐渐呈现增长趋势，前不久锤子科技的发布会以及9月12日苹果官网宕机的案例就印证了这一点。那什么是DDoS攻击？如何才能抵御DDoS攻击呢？本文通过一系列漫画图片为大家做了生动演示。 伤感的发布会...
View ArticleClik here to view.
学霸、黑客、嫌疑人、大学生，他到底经历了啥？
学霸、黑客、嫌疑人、大学生，他到底经历了啥？ 一点号新罗检察4小时前 人们常说，人生如戏，戏如人生，检察官们每天都面对形形色色的违法犯罪行为，在他们眼里，人生不应如戏，更不应该儿戏。本是万千宠爱于一身欧阳（化名），小鲜肉一枚，一表人才，学习成绩不错，是体育特长生，可谓文武双全，曾任班长。 但全面发展的欧阳并不止于此，还自学编程，构建网站等技术十分了得。 php?url=0ELEaXxWou"...
View ArticleClik here to view.
周鸿yN：回归是顺应大势的理性战略抉择
周鸿yN：回归是顺应大势的理性战略抉择 一点号人民政协报2小时前 php?url=0ELKXeJi6x" alt="周鸿yN：回归是顺应大势的理性战略抉择" />7月29日，中国最大的网络安全公司360的股票交易从纽交所摘牌。这意味着完成私有化的360公司，从一家在美上市的高科技公司变为一家纯粹中国内资公司。...
View ArticleClik here to view.
Code Injection and Its Types-Part 2
In Part One of this article , we learned about two injection techniques such as remote DLL injection and hollow process injection. In this article, we will learn about Remote Code injection and a...
View ArticleClik here to view.
A New Tor Bridge Authority
Posted September 1st, 2016 by isis in bridges censorship circumvention pluggable transports research After ten years of volunteer maintenance of Tonga , Tor's bridge Authority―a piece of critical...
View ArticleClik here to view.
More IoT botnets connected to DDoS attacks
Security researchers have discovered more powerful botnets exploiting internet of things (IoT) devices to carry out massive distributed denial of service (DDoS) attacks. Download this free guide Your...
View ArticleClik here to view.
The infamous hacker who exposed Clinton's email server is going to jail for 4...
NBC News/Screenshot The infamous Romanian hacker known as "Guccifer" has been sentenced to 52 months in prison for astring of high-profile hacks he carried out against everyone from former Secretary...
View ArticleClik here to view.
IoT Home Router Botnet Leveraged in Large DDoS Attack
We have been monitoring a large-scale Layer 7 HTTPS flood attack (i.e., application level DDoS) against a customer over the past few weeks. It is being distributed across 47,000 IP addresses and has...
View ArticleClik here to view.
：使用 chrome 的 web-custom-data 统一类型标识符 在 Slack 注入一个存储型 XSS
使用 chrome 的 web-custom-data 统一类型标识符 在 Slack 注入一个存储型 XSS 原文标题：《Using Chrome's web-custom-data UTI to inject a stored XSS in Slack 原文发表时间：2016.09.01 原文作者：labsdetectify 简介： 这是我几个月前发现的 Slack 的一个难以复现的 bug...
View ArticleCyber Criminals Set Sights On Carrier Networks
Can mobile carriers afford to put the loyalty of 47 percent of their customers at risk in the wake of a security breach? These are the stakes, according to a Nokia survey of more than 20,000 global...
View ArticleClik here to view.
Container Orchestration and the Network
The increasing complexity when setting up containers at scale is something that many developers can find challenging. In particular, they may encounter technology gaps such as how to integrate one’s...
View Article