Clik here to view.
Android 9 Pie security and privacy detailed
It’s only four days before Christmas and you’re probably done planning your menu. So what’s for dessert? Don’t go with the usual cake. Go for something special as Pie à la mode. Well, we won’t teach...
View ArticleResearcher Drops Third Windows Zero-Day Exploit in Four Months
A security researcher who uses the online handle SandboxEscaper has published proof-of-concept exploit code for an unpatched vulnerability in windows. The flaw is located in the “MsiAdvertiseProduct”...
View Article5 Types of Cryptocurrency Entrepreneurs Should Know About
Opinions expressed by Entrepreneur contributors are their own. You can classify every digital currency in existence as one of these fivetypes of cryptocurrency. These distinctions are of the utmost...
View Article5 Ways Hackers Killed the Sandbox ― and What to Do About It
Sandboxes, the standard go-to cyberthreat protection module for many organizations, aren’t what they used to be. Once considered a premiere tool for cybersecurity protection, hackers have figured out...
View ArticleClik here to view.
美国政府支付软件漏洞遭滥用：近30万条付款记录泄露并被售卖
Click2Gov是美国各地政府用以接收从公共事业账单、税收、罚款等费用的支付门户系统。它由Superion开发，该公司已于2018年7月与其他公司合并成立一家名为CentralSquare Technologies的新公司。根据Risk Based Security，大约600到6,000个Click2Gov的安装记录。...
View ArticleClik here to view.
第四篇翻译：XSS漏洞
现在开始…. 首先，我检查了可用的子域名，但是最开始我并没有发现什么有趣的东西。直到当我开始测试ucweb.com的子域名时，我发现了这个子域 samsung.ucweb.com ，samsung 三星？似乎有点意思，所以我尝试用浏览器去访问它 很不幸，这是一个403...
View ArticleClik here to view.
新型诈骗花样多，使用多种混淆方法绕过安全检测
前言 大家在使用浏览器浏览网页时，很可能会遇到某些伪装成微软或Google的网站，并告诉你你的电脑遇到了某些异常问题，然后让你拨打页面中给出的电话来寻求帮助。虽然目前大多数反病毒产品都能够检测到这种类型的攻击，即技术支持诈骗（TSS），但网络攻击者现在又开始采用各种新的技术来绕过这种安全检测了。 手法解构...
View ArticleClik here to view.
Windows任意文件读取0day漏洞处置手册
阅读： 3 近日，国外安全研究员 SandboxEscaper又一次在推特上公布了新的windows 0 day漏洞细节及PoC。这是2018年8月开始该研究员公布的第三个windows 0...
View ArticleClik here to view.
CVE-2018-20129: DedeCMS V5.7 SP2前台文件上传getshell漏洞预警
0x00 漏洞背景 2018-12-11 在 CVE中文申请站 公布了一个 DEDECMS 5.7 SP2 最新版本中存在文件上传漏洞，具有管理员权限者可利用该漏洞上传并getshell执行任意php代码。 经过分析验证。该漏洞要求管理员权限登录。并且要开启会员功能，这个功能在默认情况下是不开启，需要管理员手动开启。...
View ArticleBrandPost: Think Your SD-WAN Solution is Secure? Think Again
Digital transformation is about much more than moving workflows to the cloud and adopting IoT. It is about retooling the entire network, from the data center to the branch office to mobile devices, to...
View ArticleTerm Sheet Readers Predict a Recession In 2019
This article originally ran in Term Sheet, Fortune’s newsletter about deals and dealmakers. Sign up here. Thank you to everyone who responded to the question: “What’s your top business-related...
View ArticleClik here to view.
NAVEX:针对动态web应用的精确可扩展的漏洞利用生成工具
作者： {wh1t3p1g}@ArkTeam 原文作者： Abeer Alhuzali, Rigel Gjomemo, Birhanu Eshete, and V.N. Venkatakrishnan, University of Illinois at Chicago 原文标题： NAVEX: Precise and Scalable Exploit Generation for Dynamic...
View ArticleIDG Contributor Network: Real life, why people escape it and bringing them ba...
Real life is difficult. It’s tedious, filled with peaks of excitement, troughs of desperation, and long valleys of sameness. It’s also filled with repetitive tasks. Due to the modernization of the...
View ArticleClik here to view.
Cutting out the ‘false positive’ with Lexical Expression Qualifiers
By Guy Bunker When it comes to traditional Data Loss Prevention (DLP) solutions, the ‘false positive’ is frequently the downfall. This is where an event is triggered by a policy in error. For example,...
View ArticleClik here to view.
黑客披露了未修复的Windows 0-day漏洞
12月20日，一名黑客（Evil_Polar_Bear）披露了未修复的Microsoft windows 0-day漏洞。值得注意的是，该研究人员发现的缺陷未提交给微软。自该漏洞最初被披露以来，它一直对公众开放。 基于安全考虑，不允许许多系统级文件运行。甚至一些系统级文件夹用户也会被提示没有权限。 最新发现的安全漏洞是利用微软广告组件实现对任意文件的读取，但幸运的是，该漏洞的潜在危害不应该特别大。...
View ArticleApple changes how it reports U.S. national security requests
“Apple Inc on Thursday changed how it reports on U.S. national security requests for user data, bringing its procedures more in line with those of technology rivals such as Microsoft Corp and Alphabet...
View ArticleClik here to view.
Is quantum computing a cybersecurity threat?
Codes can be simple or advanced. Credit: Derek Rose/flickr.com , CC BY Cybersecurity researchers and analysts are rightly worried that a new type of computer, based on quantum physics rather than more...
View ArticleClik here to view.
Video sensors, medical devices and security worries -- IoT predictions for 2019
More and more devices in our homes and workplaces are gaining smart capabilities as the Internet of Things starts to move from niche to mainstream. But greater adoption also means an expanded threat...
View ArticleClik here to view.
US Lawmakers File Bill to Exclude Cryptocurrencies From Securities Definition
Regulation 1 min ago| By Kevin Helms - | US Lawmakers File Bill to Exclude Cryptocurrencies From Securities Definition Two U.S. congressmen have introduced a bill aimed at amending the country’s...
View ArticleWe Asked a Hacker Who Spoke to a Guy Through His Nest Cam Why He Did It
In early November, 22-year-old Hank Fordham logged into an Arizona man’s Nest security camera from his home in Calgary, Alberta, and started broadcasting his voice , talking to the owner directly and...
View Article
