摘要：随着计算机技术、通信技术以及互联网技术的飞速发展，社会信息化进程逐步加快。为满足新的全球范围内的数字化生 […]
三月 31, 2021
US CISA warns of DoS flaws in Citrix Hypervisor
US CISA warns that Citrix has released security updates to address flaws in Hypervisor that could be exploited by threat actors to execute code in a [...]
三月 31, 2021
智能设备分析第二篇： 华为智联旗下小豚 AI 摄像头的完整分析（下）
作者：Yimi Hu & Light @ PwnMonkeyLab
原文链接：https://mp.weixin.qq.com/s/Vag9k6feE9IONJYWhkq_pw
三月 31, 2021
智能设备分析第一篇： 华为智联旗下小豚 AI 摄像头的完整分析（上）
作者：Yimi Hu & Light @ PwnMonkeyLab
原文链接：https://mp.weixin.qq.com/s/tBzJH2fN2UadWxgDnpLGvg
三月 31, 2021
再谈Laravel Debug mode RCE（CVE-2021-3129）漏洞
前言 Laravel是一套简洁、开源的PHP Web开发框架，旨在实现Web软件的MVC架构。 2021年01 […]
三月 31, 2021
North Korea-linked hackers target security experts again
The cyberspies used fake Twitter and LinkedIn social media accounts to get in contact with the victims. Experts identified two accounts impersonating [...]
三月 31, 2021
President Biden extended Executive Order 13694 regarding cyberattack sanctions
President Joe Biden this week has extended Executive Order 13694 regarding sanctions issued in response to cyberattacks.
三月 31, 2021
5-star customer service: fraudsters launch massive campaign against Indonesia’s major banks on Twitter
Group-IB, a global threat hunting and adversary-centric cyber intelligence company, warns of an ongoing fraudulent campaign targeting Indonesia’s largest [...]
三月 31, 2021
Apache Druid远程代码执行漏洞(CVE-2021-26919)预警
一、基本情况 3月29日，Apache发布了Apache Druid远程代码执行漏洞的风险通告，漏洞CVE编号 […]
三月 31, 2021
Chinese experts earned $20,000 for reporting a Chrome Sandbox Escape
Experts from the Chinese cybersecurity company Qihoo 360 have reported to Google another sandbox escape vulnerability (CVE-2021-21194) affecting the Chrome [...]
三月 31, 2021
智能门锁与网关第四篇： 海康萤石智能门锁的网关分析（4）
作者：Yimi Hu & Light @ PwnMonkeyLab
原文链接：https://mp.weixin.qq.com/s/22kNqVtPDqObC3MslaxYdQ
三月 31, 2021
Email accounts of DHS members were compromised in the SolarWinds hack
Russia-linked hackers were able to access email accounts belonging to US Department of Homeland Security (DHS) officials during the SolarWinds supply chain [...]
三月 30, 2021
智能门锁与网关第三篇： 海康萤石智能门锁的网关分析（3）
作者：Yimi Hu & Light @ PwnMonkeyLab
原文链接：https://mp.weixin.qq.com/s/VL0FNkndDKdYcoVF6-libg
三月 30, 2021
IETF deprecates TLS 1.0 and TLS 1.1, update to latest versions
The Internet Engineering Task Force (IETF) formally deprecates Transport Layer Security (TLS) versions 1.0 (RFC 2246) and 1.1 (RFC 4346). Both versions [...]
三月 30, 2021
智能门锁与网关第二篇： 海康萤石智能门锁的网关分析（2）
作者：Yimi Hu & Light @ PwnMonkeyLabs
原文链接：https://mp.weixin.qq.com/s/3abqBSq53ATFKAZmvFKBPw
三月 30, 2021
智能门锁与网关第一篇： 海康萤石智能门锁的网关分析(1)
作者：Yimi Hu & Light @ PwnMonkeyLabs
原文链接：https://mp.weixin.qq.com/s/ekNDsy3UzRMH0iXAm3Wc-w
三月 30, 2021
VMware addresses SSRF flaw in vRealize Operations that allows stealing admin credentials
VMware has published security updates to address multiple vulnerabilities in VMware vRealize Operations that could allow threat actors to steal admin [...]
三月 30, 2021
来了！专家解读延迟退休如何进行：平稳衔接 不会一刀切
“十四五”规划和2035年远景目标纲要明确提出要按照小步调整、弹性实施、分类推进、统筹兼顾等原则，逐步延迟法定退休年龄。为此，人社部中国劳动和社会保障科学研究院院长金维刚专家具体解读了延迟退休如何进行。
三月 30, 2021
丧心病狂！吊牌写含96%羊毛实际一根羊毛都没 多家知名品牌被点名！
你买衣服的时候会看衣服的标签吗？对于里面写的所谓xx含绒量，xx含羊毛量，你信还是不信？据央视新闻报道，有些品牌衣服的吊牌写含96%羊毛实际一根羊毛都没。
三月 30, 2021
Reflected XSS Vulnerability In “Ivory Search” WP Plugin Impact Over 60K sites
On March 28, 2021, Astra Security Threat Intelligence Team responsibly disclosed a vulnerability in Ivory Search, a WordPress Search Plugin installed on [...]
三月 30, 2021
Experts found 2 Linux Kernel flaws that can allow bypassing Spectre mitigations
Kernel updates released in March have addressed a couple of vulnerabilities that could be exploited by an attacker to bypass mitigations designed to [...]
三月 30, 2021
CNCERT：2020年虚假小额贷款类网络诈骗的态势情况分析
前言 虚假小额贷款诈骗是一类互联网上流行的网络诈骗。其典型的诈骗套路为：诈骗分子通过泄露的用户个人信息，拨打受 […]
三月 30, 2021
Hundreds of thousands of projects affected by a flaw in netmask npm package
A vulnerability in the netmask npm package, tracked as CVE-2021-28918, could expose private networks to multiple attacks. The flaw is caused by the [...]
三月 30, 2021
30 Docker images downloaded 20M times in cryptojacking attacks
Palo Alto Network researcher Aviv Sasson discovered 30 malicious Docker images, which were downloaded 20 million times, that were involved in cryptojacking [...]
三月 29, 2021
智能门锁与BLE设备安全番外 1：idapython 编写和调试
作者：Yimi Hu & Light @ PwnMonkeyLabs
原文链接：https://mp.weixin.qq.com/s/PPWd5wGwbPLffgMNPO70EA
三月 29, 2021
智能门锁与 BLE 设备安全 Part 8：果加智能门锁的全面分析（下）
作者：Yimi Hu & Light @ PwnMonkeyLabs
原文链接：https://mp.weixin.qq.com/s/F5YHjG1t67Np53_kobG73Q
三月 29, 2021
智能门锁与 BLE 设备安全 Part 7：果加智能门锁的全面分析（中）
作者：Yimi Hu & Light @ PwnMonkeyLabs
原文链接：https://mp.weixin.qq.com/s/SJhFVndjqTpSbZCN_sFW1g
三月 29, 2021
智能门锁与 BLE 设备安全 Part 6：果加智能门锁的全面分析（上）
作者：Yimi Hu & Light @ PwnMonkeyLabs
原文链接：https://mp.weixin.qq.com/s/_-CUaJJnrWlcDuUGVL4x8w
三月 29, 2021