Evading WinDefender ATP credential-theft: a hit after a hit-and-miss start
www.matteomalvica.com • Windows

作者介绍了一种绕过 WDATP 获取 LSASS 进程数据的方式 – 靓仔 • 8 hours ago

0   

Stable Channel Update for Desktop
chromereleases.googleblog.com • Browser

Chrome 发布 79.0.3945.79，修复多个高危漏洞 – Jett • 18 hours ago

0   

Detecting unsafe path access patterns with PathAuditor
Google Online Security Blog • Tools

Google 开源了一个工具 - PathAuditor，用于检测 root 等特权用户访问不安全路径的漏洞 – Jett • 18 hours ago

0   

AAAI-20 论文解读：基于图神经网络的二进制代码分析
paper - Last paper

利用AI算法解决大规模二进制程序函数相似性分析的问题，本文将深入对该论文进行解读 – Jett • 19 hours ago

0   

A Deep Dive Into Samsung's TrustZone (Part 1)
Quarkslab's blog • Android

A Deep Dive Into Samsung's TrustZone (Part 1) – Jett • 19 hours ago

0   

Azure Privilege Escalation via Cloud Shell
NetSPI Blog • Virtualization

Azure Cloud Shell 跨用户命令执行与提权漏洞分析 – Jett • 19 hours ago

0   

Amazon’s Blink Smart Security Cameras Open to Hijack
Threatpost • IoT

Amazon Blink 智能安全摄像头被发现命令注入漏洞 – Jett • 19 hours ago

0   

About the security content of iOS 13.3 and iPadOS 13.3
support.apple.com • iOS

iOS 发布 13.3 版本，修复多个安全漏洞 – Jett • 19 hours ago

0   

About the security content of macOS Catalina 10.15.2, Security Update 2019-002 Mojave, Security Update 2019-007 High Sierra
support.apple.com • macOS

macOS Catalina 发布 10.15.2 版本，修复多个安全漏洞 – Jett • 19 hours ago

0   

Adobe Fixes 17 Critical Acrobat, Photoshop and Brackets Flaws
Threatpost

Adobe 发布补丁更新，修复涉及 Acrobat Reader、Photoshop 和 Brackets 产品的 17 个严重漏洞 – Jett • 19 hours ago

0   

SockPuppet: A Walkthrough of a Kernel Exploit for iOS 12.4
googleprojectzero.blogspot.com • iOS

Ned Williamson 对 iOS 12.4 内核任意地址读写漏洞（CVE-2019-8605）的分析 – Jett • 19 hours ago

0   

December 2019 security updates are available
Microsoft Security Response Center • Windows

微软发布 12 月份 Windows 补丁更新 – Jett • 19 hours ago

0   

Windows 0-day exploit CVE-2019-1458 used in Operation WizardOpium
Securelist • Windows

微软今天修复的 Win32k CVE-2019-1458 漏洞被发现已经被用于 WizardOpium APT 攻击行动中 – Jett • 19 hours ago

1   

Android security checkup: 16 steps to a safer phone
www.computerworld.com • Android

Android安全检查：使用手机安全注意四个重要问题： 应用智能，密码和认证，设备访问，最终考虑。 – lanying37 • 1 day ago

0   

App permissions in Android 8: The complete guide
www.kaspersky.com • Android

Android 8 应用权限：安全建议指导 – lanying37 • 1 day ago

0   

patch 8.1.2136: using freed memory with autocmd from fuzzer · vim/[email protected]
github.com • Tools Fuzzing

8.1.2136 补丁：释放window内存与fuzzer的 autocmd命令一起使用 – lanying37 • 1 day ago

0   

LTE to 3G circuit switched fallback — CSFB
medium.com • Wireless

从LTE服务退回到3G-CSFB详解 – lanying37 • 1 day ago

0   

Reversing Windows Internals (Part 1) - Digging Into Handles, Callbacks & ObjectTypes
rayanfam.com • Windows

Reversing Windows Internals (Part 1) – Digging Into Handles, Callbacks & ObjectTypes – Jett • 1 day ago

0   

Understanding Windows Access Token Manipulation
www.slideshare.net • Windows

Understanding Windows Access Token Manipulation – Jett • 1 day ago

0   

Interrupt Descriptor Table - IDT
ired.team • Windows

Windows 内核 IDT（中断描述符表）的介绍 – Jett • 1 day ago

1   

Tags

Tools Malware Windows Browser Android Vulnerability Web Attack iOS Linux Pentest Conference macOS Defend Network IoT Wireless Reverse Engineering Fuzzing Crypto Virtualization CTF Programming Machine Learning Firmware Data Breach Report Forensics PoC Mitigation Backdoor SCADA Threat Intelligence Blockchain Side Channel Exploit Hardware Supply Chain Bug Bounty Privacy Power Analysis
Loading