身份已经成为云端的主要攻击面。然而，身份的保护依然非常缺乏，因为传统工具主要被用于边界防护，而非用户或者服务账 […]
四月 30, 2021
China-linked APT uses a new backdoor in attacks at Russian defense contractor
Cybereason researchers reported that a China-linked APT group targets a Russian defense contractor involved in designing nuclear submarines for the Russian Navy.
四月 30, 2021
中国最大地级市农商行要上市啦！股权结构分散或成“绊脚石”
本文来源于前瞻IPO微信公众号。2021年4月20日，港交所官网披露了东莞农村商业银行递交的上市申请，招商证券国际、招银国际、农银国际、工银国际担任联席保荐人。
四月 30, 2021
UNC2447 cybercrime gang exploited SonicWall Zero-Day before it was fixed
Researchers from FireEye’s Mandiant revealed that a sophisticated cybercrime gang tracked as UNC2447 has exploited a zero-day issue (CVE-2021-20016) in [...]
四月 30, 2021
Saving World Health Day: UNICC and Group-IB take down scam campaign impersonating the World Health Organization
Group-IB, a global threat hunting and adversary-centric cyber intelligence company that specializes in investigating hi-tech cybercrimes, and the United [...]
四月 30, 2021
Microsoft warns of BadAlloc flaws in OT, IoT devices
Researchers from Microsoft’s Section 52 team recently uncovered several critical memory allocation flaws, collectively tracked as BadAlloc, affecting IoT [...]
四月 30, 2021
HUAWEI P30 JavaScript注入漏洞 (CVE-2021-22331) 预警
一、基本情况 近日，华为发布安全公告，修复了P30智能手机中存在的一个JavaScript注入漏洞，相关漏洞编 […]
四月 30, 2021
Ubuntu内核OverlayFS权限逃逸漏洞 (CVE-2021-3493) 分析
背景 根据官方介绍，OverlayFs漏洞允许Ubuntu下的本地用户获得root权限。这个漏洞是Ubuntu […]
四月 29, 2021
Command injection flaw in PHP Composer allowed supply-chain attacks
The maintainers of the PHP Composer package have addressed a critical vulnerability, tracked as CVE-2021-29472, that could have allowed an attacker to [...]
四月 29, 2021
An alleged ransomware attack hit the Italian Banca di Credito Cooperativo causing chaos
Banca di Credito Cooperativo (BCC), one of the largest Italian cooperative credit banks, was hit by a cyberattack allegedly carried out by one of the most [...]
四月 29, 2021
An issue in the Linux Kernel could allow the hack of your system
An information disclosure flaw in the Linux kernel, tracked as CVE-2020-28588, could allow attackers to bypass the Kernel Address Space Layout [...]
四月 29, 2021
Purple Lambert, a new malware of CIA-linked Lambert APT group
Cybersecurity firm Kaspersky has discovered a new malware that experts attribute to the US Central Intelligence Agency.
四月 29, 2021
RotaJakiro Linux backdoor has flown under the radar since 2018
RotaJakiro is a Linux backdoor recently discovered by researchers at Qihoo 360’s Network Security Research Lab (360 Netlab). The malware remained [...]
四月 28, 2021
渗透测试之地基内网篇：域森林中权限提升（中）
专辑：渗透测试之地基篇渗透测试-地基篇该篇章目的是重新牢固地基，加强每日训练操作的笔记，在记录地基笔记中会有很多跳跃性思维的操作和方式方法，望大家能共同加油学到东西。
四月 28, 2021
Naikon APT group uses new Nebulae backdoor in attacks aimed at military orgs
The Naikon APT group is a China-linked cyber espionage group that has been active at least since 2010 and that remained under the radar since 2015 while [...]
四月 28, 2021
Google addresses a high severity flaw in V8 engine in Chrome
Google has released security updates for Chrome 90 that address a new high severity vulnerability, tracked as CVE-2021-21227, that resides in the V8 [...]
四月 28, 2021
隐秘的交易：暗藏危机的智能合约恶意调用
作者：Al1ex@七芒星实验室
本文为作者投稿，Seebug Paper 期待你的分享，凡经采用即有礼品相送！
投稿邮箱：paper@seebug.org
四月 28, 2021
UK rail network Merseyrail hit by ransomware gang
UK rail network Merseyrail, which operates rail services across Merseyside, announced it was a victim of a cyber attack. A ransomware gang has also [...]
四月 28, 2021
Cloud misconfiguration, a major risk for cloud security
Fugue’s new State of Cloud Security 2020 report reveals that misconfigured cloud-based databases continue to pose a severe security risk to organizations.
四月 27, 2021
[CVE-2021-1732] win32k内核提权漏洞分析
作者：曹 磊（@iamelli0t）/ 深信服南研安全研究团队
原文链接：https://mp.weixin.qq.com/s/sFWUK4HwctLRgnLEIvUBuw
四月 27, 2021