Cybersecurity information flow

一定要及时更新系统安装补丁，减少系统漏洞带来的风险。

Write safer FFI code in Rust without polluting it with unsafe code

Bypass EDR Hooks by patching NT API stub, and resolving SSNs and syscall instructions at runtime

本文主要讲解基于arduino的badusb植入技术

文章精选了本周知识大陆公开发布的10条优质资源，让我们一起看看吧。

[GitHub]Elasticsearch Stack Overflow Vulnerability

CatDDoS处在“创业初期”阶段，活跃度并不稳定，其每天的指令从几百到几千不等。

关于 IR 在程序分析和优化中应用的一些思考 https://mp.weixin.qq.com/s/qqojOakSX7EyqX2DNn4HZQ
我国当前面临的主要网络认知威胁分析 https://mp.weixin.qq.com/s/6E0esw99esAQu8YP9i4F-A
MDR如何开展？以CrowdStrike为例 https://mp.weixin.qq.com/s/l9sGQxWxil_tUtTCUK745w
MSS如何评价？以MITRE最新评估方法为指引 https://mp.weixin.qq.com/s/dTa7PvC_vW4nvj5FX3hYhg
NIST网络安全框架2.0草案解读 https://mp.weixin.qq.com/s/YC8mfjm2WG6scp6p1ryRDw

红队笔记

A privacy-first, lightweight note-taking service. Easily capture and share your great thoughts

Welcome to the 10th post in our weekly series on the new 2023 OWASP API Security Top-10 list, with a particular focus on security practitioners. This post will focus on API9:2023 Improper Inventory Management. In this series we are taking an in-depth look at each category – the details, the impact and what you can [...]
The post 2023 OWASP Top-10 Series: API9:2023 Improper Inventory Management appeared first on Wallarm.

The City of Dallas revealed that the Royal ransomware gang that hit the city system in May used a stolen account. In May 2023, a ransomware attack hit the IT systems at the City of Dallas, Texas. To prevent the threat from spreading within the network, the City shut down the impacted IT systems. The […]
The post City of Dallas has set a budget of $8.5 million to mitigate the May Royal ransomware attack appeared first on Security Affairs.

.NET port of Leron Gray's azbelt tool.

作者:David Albert 程序:Samsung 漏洞类型:Android,Account takeover 赏金:-

作者:Piotr Bazydło (@chudyPB) 程序:SolarWinds 漏洞类型:RCE,Insecure deserialization,Security code review 赏金:-

作者:Anirudh Krishnakumar 程序:- 漏洞类型:XSS,SQL injection 赏金:691

作者:Rohaangupta (@roohaa_n) 程序:- 漏洞类型:MFA bypass 赏金:1,000

作者:Paul Gerste 程序:Tutanota 漏洞类型:XSS,CSP bypass,Parsing issue,Electron,RCE,Security code review 赏金:-

作者:Tobias Ospelt (@floyd_ch),Martin Schobert 程序:Wind River 漏洞类型:Path traversal,Security code review 赏金:-

作者:Thomas Delfino 程序:- 漏洞类型:Account takeover,Android,Hardcoded credentials,Weak crypto,Authentication bypass,Client-side enforcement of server-side security 赏金:-

作者:Amjad Ali 程序:- 漏洞类型:Privilege escalation 赏金:-

作者:Peter Szot 程序:Hikvision 漏洞类型:IoT,UDP,SIP,DoS,Authentication bypass,Bruteforce,Restricted shell escape 赏金:-

作者:Rémi Matasse (@_remsio_) 程序:doctrine-bundle (Symfony package) 漏洞类型:Insecure deserialization,Security code review 赏金:-

作者:Paul Gerste 程序:Skiff 漏洞类型:XSS,Sandbox bypass,CSP bypass,Security code review 赏金:-

作者:Mischa Bachmann (@MischaBachmann) 程序:Eclipse Foundation 漏洞类型:DoS,Memory leak 赏金:-