Cloud Security

Pwn2Own hackers' conference: Firefox, Edge and Safari were all cracked On the second day of the Pwn2Own 2018 hacker competition in Vancouver, Canada, Safari had been cracked twice. One team broke the browser defense line after three attempts

AMD promises to fix the vulnerability caused by CTS in the next few weeks. Welcomia It was revealed ten days ago by the Israeli company CTS Labs that, the platform's security processor has 13 vulnerabilities that may allow hackers to steal

Ubuntu 14.04 LTS New Internal Nuclear Security Update to fix Spectre V2 Vulnerability Canonical today announced the release of a new kernel-safe update for the Ubuntu 3.13 LTS (Trusty Tahr) operating system running Linux 14.04 kernel, to fix the

Security researchers announced the Ryzen vulnerability and only notified AMD 24 hours in advance.   Due to the emergence of Meltdown and Spectre, there is a shortage of potential security vulnerabilities for modern high-performance processors,

Tested by: mx60 VoIP Voice Gateway Bug: getting the administrator password to log on to control the entire gateway. Impact scope: no device test is available for users with MX and operators, haha MX60 introduction Figure 1 Brief Description: MX60 is

InPrevious postWe introduced "Information Collection". Today we will talk about "fake identities.To avoid misunderstanding, it is necessary to clarify in advance that "Information Collection", "fake identity", and "exert influence" are not isolated,

Attack principle: SYN Flood is one of the most popular DoS (Denial of Service Attack) and DDoS (Distributed Denial of Service Attack) methods, send a large number of forged TCP connection requests, and send the first handshake packet (SYN Packet) of

The combination of ARP spoofing and ICMP redirection can basically achieve the goal of cross-network segment spoofing. This article introduces ARP spoofing Analysis and Countermeasures for different network segments. ARP spoofing Analysis for

As the saying goes: suitable is the best. Depending on the features of various anti-virus software, you may wish to select and integrate a set of anti-virus systems that best suit you.Internet access is most afraid of various viruses that cannot be

Firewall Builder (fwbuilder) is a graphical application that helps you configure IP packet filtering. It can compile filtering policies of various specifications you define, including iptables and Cisco and Linksys routers in various languages. This

Although it can minimize the losses caused by Trojans and backdoors, the best way is to prevent them from happening. 1. Basic backdoor defense skills First, you must disable unnecessary ports on the local machine or only allow access from specified

Advanced malware is the latest and most potentially destructive threat in the online world. They are confidential, targeted, and extremely patient ". Although some well-known malware usually carry signatures that are easy to identify, they can

Comments: What we put up today is to prevent tampering with user account settings. When hackers attack the server, they often get the session to escalate permissions, as a security worker, We need to deny all means for hackers to escalate

Without using third-party software, it is indeed difficult for Windows to encrypt a single folder. However, since Windows Vista, BitLocker has been added to protect disk security. After upgrading to Windows 8, you can directly attach it to a virtual

Comments: Common encryption algorithms include symmetric encryption algorithms, asymmetric encryption algorithms, and Hash algorithms. Symmetric encryption is an encryption algorithm that uses the same key for encryption and decryption. The

Affected Versions:Trellian FTP Client 3.01 vulnerability description:Trellian FTP is a common FTP client. The Trellian FTP client has the stack overflow vulnerability when processing FTP responses. If a user is cheated to connect to a malicious FTP

Text/graph non-zero solution & Zhou LinCurrently, PHP security has become a hot topic in the PHP field. To ensure that scripts are safe, you must start with the most basic-input filtering and secure output. If you do not fully perform these basic

Author: Lao Wang    When writing code, programmers should pay attention to TDD (test-driven development): Before implementing a function, they will first write a test case and then write the code to make it run through. In fact, when the hacker SQL

0x00 permission escalation EnvironmentThis is a machine of oil to ask me how to take off my pants ~~~Then try Elevation of Privilege.After reading the ports, 80 and 3389 are enabled.Windows 2003x86Now that you have your pants off, you can imagine

0x00 Preface Currently, some injection prevention programs are built in mainstream CMS systems, such as Discuz and dedeCMS. This article mainly introduces the bypass method. 0x01 Discuz x2.0 anti-Injection   Anti-injection Principle Here, we take