Clik here to view.
Arlo unveils wireless Ultra security cam with 4K resolution & 180-degree...
By Roger Fingas Friday, November 30, 2018, 06:33 am PT (09:33 am ET) Arlo on Friday announced its latest iPhone-connected security camera, the Ultra, an upcoming wireless model distinguished by...
View ArticleClik here to view.
Marriott Claims Up to 500 Million Guests Had Their Records Hacked
Photo: Getty Marriott, one of the world’s largest hotel chains, announced on Friday that it has experienced a jaw-dropping data breach that may have exposed the personal data of up to 500 million...
View ArticleClik here to view.
解析XP版永恒之蓝中的一个Bug
0x00 背景 永恒之蓝漏洞刚出来时，我可以顺利搞定windows 7，但在攻击Windows XP时我一直没有成功。我尝试了各种补丁和Service Pack的组合，但利用程序要么无法成功，要么会导致系统蓝屏。当时我没有深入研究，因为FuzzBunch（NSA泄露工具集）还有待探索许多点。 直到有一天，我在互联网上找到了一个Windows...
View ArticleClik here to view.
成为“黑客”前，必须掌握的“网络协议端口”
上篇文章中，我们针对“网络通信原理”做了详细描述，在通信原理里也提到了端口这个概念，但是没有详细讲解，今天我详细讲解一下“网络协议端口”，因为这个“东东”也是黑客们常常利用渗透入侵的手段。 一、先讲一讲几种不同的“端口”的定义 计算机"端口"是英文port的译义，可以认为是计算机与外界通讯交流的出口。其中硬件领域的端口又称接口，如：USB端口、串行端口等。...
View ArticleClik here to view.
赛门铁克Altiris权限提升漏洞分析（CVE-2018-5240）
前言 在近期的一项渗透测试实践中，我们在最新版本赛门铁克Management Agent（Altiris）中发现了一个安全漏洞，而这个安全漏洞将允许攻击者实现提权。 概述 当Altiris代理执行任务扫描时（例如软件扫描），SYSTEM级服务会在扫描任务执行完毕之后向NSI和OutBox目录重新申请权限。即： C:\ProgramFiles\Altiris\Inventory\Outbox...
View ArticleClik here to view.
警惕！新型“撒旦”病毒来袭，360率先支持解密 “基因”编辑之后，Satan病毒离降维打击 ...
基因编辑，对于人类来说，可谓是“潘多拉魔盒”，是悬在人类头顶的“达摩克利斯之剑”。毕竟这祖传的基因，不是你想改造就改造，想加buff就加buff的。 然鹅，对于撒旦（Satan）这样的勒索病毒来说，编辑“基因”，算不上什么神仙操作。过去几天，360互联网安全中心监测到Satan勒索病毒进行了一次更新。 很显然，黑客为了“勒索事业”的年底冲刺，又双S
View ArticleClik here to view.
用R分析光荣《三国志》系列人物数据
前言 写这篇文章有两个原因，第一个是最近在看吴秀波演的《军师联盟》，这部剧剧情紧凑，演员演技精湛，有很多令人惊艳的细节， 再一次勾起了我对三国的兴趣。从小到大玩过不少三国游戏，看过很多三国的书，电视剧如央视版三国，高希希版新三国也都不在话下，而这些年除了偶尔玩玩《三国志10》并没有再对三国有什么研究， 想通过这个分析再重温下三国里的那些人物和故事。第二个原因是自己有比较长一段时间没怎么写R，...
View ArticleClik here to view.
曲速未来 消息：Oracle数据库勒索病毒死灰复燃
2018-11-30 16:45 区块链 技术 615 收藏 区块链安全咨询公司曲速未来表示：近日，Oracle数据库勒索病毒又活跃了，其实这并非新病毒，早在2年前，即2016年11月就发现了，期间沉寂了1年多，直到最近，该病毒突然呈现出死灰复燃之势。 一、事件背景 区块链安全咨询公司 曲速未来...
View ArticleNet Core security - NWebSec to the rescue!
A quick overview of securing a Net Core webapp using NWebSec and the web.config First up, let's install NWebSec middleware from nuget via the package manager PM> Install-Package...
View ArticleClik here to view.
Threat Hunting: Improving Bot Detection in Enterprise SD-WANs
How security researchers tracked down Kuai and Bujoi malware through multiple vectors including client type, traffic frequency, and destination. For over a year, security researchers at Cato Networks...
View ArticleClik here to view.
This Week in Security News: Ethics and Law in the Dark Web
Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn how Trend Micro software can aid in...
View Article收个Word文档也会丢币？如何拯救被30万黑客盯上的钱包
在加密货币的世界里，你的资产就是链上的一串代码。 这里，是黑客敛财的新天地。据网络安全公司Carbon Black最新调查数据的调查数据显示，2018年上半年，有价值约11亿美元的数字加密货币被盗。2018年下半年，这个数字还在不断攀升。 而加密货币钱包，是黑客们肆虐的重点领域之一。 无论是热钱包、冷钱包，中心化、去中心化钱包，云端钱包、HD钱包，只要有利可图，都能在其中看到黑客狡黠的身影。...
View ArticleClik here to view.
New PowerShell-based Backdoor Found in Turkey, Strikingly Similar to...
MuddyWater is a well-known threat actor group that has been active since 2017. They targetgroups across Middle East and Central Asia, primarily using spear phishing emails with malicious attachments....
View ArticleClik here to view.
Arlo is planning to launch a 4K smart home security camera next year
Arlo plans to launch a 4K security camera in 2019, potentially stealing a lead on competitors and kicking off a new race in thesmart home security market. The Arlo Ultra camera looks similar to the...
View ArticleNetgear's new Arlo Ultra security camera will monitor your home in 4K
Netgear has announced the Arlo Ultra, a 4K HDR wireless security camera that looks to be a serious upgrade over the Arlo Pro 2 . The biggest upgrade is in the resolution. This is Netgear's first Arlo...
View ArticleAttackers Up Their Game with Latest NPM Package Compromise
The software supply-chain attacks targeting development ecosystems and package repositories like npm are getting increasingly sophisticated. In the latest incident, an attacker combined social...
View ArticleStarwood hacked with over 500 million customer details accessed
If you’ve stayed at a Starwood hotel in the past few years, it’s time to buy some credit monitoring. The Marriott International-owned hotel brand has reported a massive hack that saw the details of...
View ArticleClik here to view.
3 Steps to Get on the Right Side of GDPR Compliance
American small businesses may not have paid much attention when the European Union finalized its new data privacy law. Many assumed the General Data Protection Regulation (GDPR) applies only to...
View ArticleThe Marriott Hack: How to Protect Yourself
Early Friday morning, the hotel behemoth Marriott announced amassive hack that impacts as many as 500 million customers who made a reservation at a Starwood hotel. Marriott acquired the Starwood...
View ArticleNumber of births in the twentieth century by @ellis2013nz
Motivation A couple of weeks back, Branko Milanovic asked on Twitter : “Does anyone know a link to a calculation on how many people were born … in the entire 20th century?” Somewhat surprisingly,...
View Article