[每日信息流] 2023-07-04

[BruceFeIix]

每日安全资讯（2023-07-04）

• hackndo
  • Blockchain 101
• 先知安全技术社区
  • 如何测试加密站点
• HackerOne Hacker Activity
  • Error Page Content Spoofing or Text Injection
  • The stripe/veneur GitHub repository links to a domain veneur.org, which is not under stripe's control
• CXSECURITY Database RSS Feed - CXSecurity.com
  • Microsoft 365 MSO (Version 2305 Build 16.0.16501.20074) 32-bit Remote Code Execution (RCE)
  • Super Socializer 7.13.52 Reflected XSS
  • NCH Express Invoice Clear Text Password Storage and Account Takeover
  • POS Codekop v2.0 Authenticated Remote Code Execution (RCE)
  • WBCE CMS 1.6.1 Open Redirect & CSRF
• Tenable Blog
  • Tenable Cyber Watch: Feds Offer $10 Million Reward for CL0P Info, Best Practices for Ransomware Incident Response, and more
• Twitter @nicolas Krassas
  • Wanderer - An Open-Source Process Injection Enumeration Tool Written In C# http://www.kitploit.com/2023/07/wanderer-open-source-process-injection.html
  • CVE-2023-35829 Linux kernel before 6.3.2. A use-after-free PoC https://github.com/ChriSanders22/CVE-2023-35829-poc
  • Researcher Discloses Linux Kernel Code Execution (CVE-2023-35829) PoC Exploit https://securityonline.info/linux-kernel-code-execution-cve-2023-35829-p...
  • Find DLLs with RWX sections https://www.reddit.com/r/netsec/comments/14pp7rz/find_dlls_with_rwx_sections/
  • RT Julien | MrTuxracer 🇪🇺: How I patch diffed CVE-2023-28121 to compromise a WooCommerce. https://www.rcesecurity.com/2023/07/patch-diffing-cve-...
  • Dublin Airport staff pay data 'compromised' by criminals https://go.theregister.com/feed/www.theregister.com/2023/07/03/dublin_airport_data/
  • Microsoft Edge upgrades built-in Cloudflare VPN with 5GB of data https://www.bleepingcomputer.com/news/microsoft/microsoft-edge-upgrades-built-in-clou...
  • Neo_Net | The Kingpin of Spanish eCrime https://www.sentinelone.com/blog/neo_net-the-kingpin-of-spanish-ecrime/
  • select * from projectdiscovery join steampipe https://sensepost.com/blog/2023/select-from-projectdiscovery-join-steampipe/
  • Chinese Hackers Use HTML Smuggling to Infiltrate European Ministries with PlugX https://thehackernews.com/2023/07/chinese-hackers-use-html-smuggling-t...
  • Anti Forensics Tool For Red Teamers, Used For Erasing Footprints In The Post Exploitation Phase. https://github.com/PaulNorman01/Forensia
  • Technical Details of CVE-2023-30990 - Unauthenticated RCE in IBM i DDM Service https://www.reddit.com/r/netsec/comments/14pgt9x/technical_details_of_c...
  • Self-Driving Cars Are Surveillance Cameras on Wheels https://www.schneier.com/blog/archives/2023/07/self-driving-cars-are-surveillance-cameras-on-whee...
  • 300,000+ Fortinet firewalls vulnerable to critical FortiOS RCE bug https://www.bleepingcomputer.com/news/security/300-000-plus-fortinet-firewalls-vuln...
  • CISA Flags 8 Actively Exploited Flaws in Samsung and D-Link Devices https://thehackernews.com/2023/07/cisa-flags-8-actively-exploited-flaws.html
  • Snappy: A tool to detect rogue WiFi access points on open networks https://www.bleepingcomputer.com/news/security/snappy-a-tool-to-detect-rogue-wifi-a...
  • Building a Red Team Infrastructure in 2023 https://www.securesystems.de/blog/building-a-red-team-infrastructure-in-2023/
  • Evasive Meduza Stealer Targets 19 Password Managers and 76 Crypto Wallets https://thehackernews.com/2023/07/evasive-meduza-stealer-targets-19.html
  • CVE-2023-36812: OpenTSDB Faces High-Risk Security Vulnerability https://securityonline.info/cve-2023-36812-opentsdb-faces-high-risk-security-vulnerabi...
  • Chinese Threat Actors Targeting Europe in SmugX Campaign https://research.checkpoint.com/2023/chinese-threat-actors-targeting-europe-in-smugx-campaign...
• unSafe.sh - 不安全
  • Valve 确认它限制使用 AI 生成内容的游戏
  • Linux 6.5 将支持龙芯即将发布的 3A6000
  • How did I hacked the Dutch government and made it into the Hall of Fame?
  • 15 Essential Tools for Hackers: Supercharge Your Penetration Testing Toolkit!
  • Testing and Bypassing Technique for IDOR
  • GIMP 项目 2019 年以来首次举行线下会议
  • We want to check out your BChecks ...
  • The Unexpected “0” Master ID for Account Data Manipulation
  • Hacking CSRF: Bypass Same Site Cookie Restriction
  • Key Factors to Investigate in Ransomware Attacks
  • Ultimate Roadmap to Get Started in Web-Penetration Testing!
  • 维基百科切换到 CC BY-SA 4.0 许可证
  • 在线短信压力测试/短信轰炸（仅供学习）
  • 基于QQ NT架构的腾讯QQ正式版发布 没有扫盘的Q盾模块
  • 消息称因制造复杂良品率低 苹果不得不削减Vision Pro产量预测
  • 2200 台被遗忘的古董电脑重获新生
  • Wanderer - An Open-Source Process Injection Enumeration Tool Written In C#
  • Neo_Net | The Kingpin of Spanish eCrime
• 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com
  • KCon 2023 议题大众评选火热来袭！近50个议题等你打分！
  • 全新升级！《时维鹰扬·履践致远：数据安全细分市场调研报告2023》即将发布
  • 攻击者使用网络钓鱼和勒索软件，针对新加坡企业继续攻击
  • 剖析组织中六大关键攻击面相关的威胁趋势和挑战
• Recent Commits to cve:main
  • Update Mon Jul 3 00:13:30 UTC 2023
• Sec-News 安全文摘
  • CVE-2023-2982: WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.6.4 - Authentication Bypass
• Security Boulevard
  • What is a Data Protection Strategy? Components, Best Practices and Benefits
  • BSidesSF 2023 – Naveen Srinivasan, Brian Russell – How Do You Trust Your Open Source Software?
  • Celebrating Arkose Labs’ Net Promoter Score of 100 for Q2 2023
  • Randall Munroe’s XKCD ‘Actual Progress’
  • Grip Security Blog 2023-07-03 12:03:04
  • BSidesSF 2023 – Nika Korchok Wakulich – MTV Reboot — My Super Sweet 16-Bit Malware ~ MS-DOS Edition ~ [TSR Remix]
  • Who’s Behind the DomainNetworks Snail Mail Scam?
  • Google To Replace the “Padlock Icon” with the “Tune Icon” in Chrome 117 Version
  • How Silverfort Helps Healthcare Providers Gain Visibility into Their Consolidated Environments
  • Ensuring a Seamless and Secure Cloud Transformation
• gynvael.coldwind//vx.log (en)
  • Live: On Leaving Google and What's Next
• 安全客-有思想的安全新媒体
  • “ISC 2023早鸟票+BDS权威注册认证证书”联名礼包正式限量发售！
  • 1折学生票！环球影城免费玩！ISC 2023八月北京只等你来
  • 报名热度持续爆表！ISC 2023创新独角兽沙盒大赛延长招募
  • 通信强国，安全有我！北卡科技硬核亮相国防电子展！
• 喵喵喵喵
  • Intentions - HackTheBox
• gynvael.coldwind//vx.log (pl)
  • Live: Życie po Google, czyli co dalej
• Forcepoint
  • ChatGPT on Preparing for the Future of Generative AI in Cybersecurity
• Bug Bounty in InfoSec Write-ups on Medium
  • How did I hacked the Dutch government and made it into the Hall of Fame?
  • 15 Essential Tools for Hackers: Supercharge Your Penetration Testing Toolkit!
  • Testing and Bypassing Technique for IDOR
  • The Unexpected “0” Master ID for Account Data Manipulation
  • Hacking CSRF: Bypass Same Site Cookie Restriction
  • Key Factors to Investigate in Ransomware Attacks
  • Ultimate Roadmap to Get Started in Web-Penetration Testing!
• Orange Cyberdefense
  • select * from projectdiscovery join steampipe
• Twitter @bytehx
  • RT 33Audits | Solidity Auditor: This repo contains a comprehensive list of known attack vectors and common anti-patterns that every Smart Contract Aud...
• SAP Blogs
  • How to Setup Postman for consuming SAP DATASPHERE APIs?
  • Data ingestion from SAP HANA to Databricks Cloud and visualize in Tableau
  • SAP Plant Maintenance Work Or‍der: How to Attach Files
  • SAP S4 HANA Business Partner (BP) end to end configurations
  • Experience at SAP Inside Track Kolkata 2023
  • True randomness with Quantum ( Quantum Random number generator )
  • Unlocking the Power of SAP BRIM: Monetizing Subscription-based Billing
  • Transports setup between environments and usage for SAP S/4HANA Cloud, private edition customers
  • Employee and Org Replication using BIB from EC to SAP
  • What The Sriracha Sause Shortage Can Teach Us About Climate Change
• Malwarebytes Labs
  • Of sharks, surveillance, and spied-on emails: This is Section 702, with Matthew Guariglia
  • Brave browser will prevent websites from port scanning visitors
  • A week in security (June 26 - July 2)
• Exploit-DB.com RSS Feed
  • [webapps] WBCE CMS 1.6.1 - Open Redirect & CSRF
  • [webapps] PodcastGenerator 3.2.9 - Blind SSRF via XML Injection
  • [webapps] Alkacon OpenCMS 15.0 - Multiple Cross-Site Scripting (XSS)
  • [webapps] Prestashop 8.0.4 - Cross-Site Scripting (XSS)
  • [webapps] Vacation Rental 1.8 - Stored Cross-Site Scripting (XSS)
  • [dos] TP-Link TL-WR940N V4 - Buffer OverFlow
  • [webapps] WP AutoComplete 1.0.4 - Unauthenticated SQLi
  • [webapps] GZ Forum Script 1.8 - Stored Cross-Site Scripting (XSS)
  • [webapps] Time Slot Booking Calendar 1.8 - Stored Cross-Site Scripting (XSS)
  • [webapps] spip v4.1.10 - Spoofing Admin account
  • [webapps] D-Link DAP-1325 - Broken Access Control
  • [remote] Microsoft 365 MSO (Version 2305 Build 16.0.16501.20074) 32-bit - Remote Code Execution (RCE)
  • [webapps] WebsiteBaker v2.13.3 - Directory Traversal
  • [webapps] WebsiteBaker v2.13.3 - Stored XSS
  • [remote] Microsoft 365 MSO (Version 2305 Build 16.0.16501.20074) 64-bit - Remote Code Execution (RCE)
  • [webapps] POS Codekop v2.0 - Authenticated Remote Code Execution (RCE)
  • [webapps] FuguHub 8.1 - Remote Code Execution
  • [webapps] Sales of Cashier Goods v1.0 - Cross Site Scripting (XSS)
  • [webapps] Rukovoditel 3.4.1 - Multiple Stored XSS
• PortSwigger Blog
  • We want to check out your BChecks ...
• • Captain’s Log: June 2023
• SentinelOne
  • Neo_Net | The Kingpin of Spanish eCrime
• Security Café
  • Command and Control Frameworks: Metasploit and Havoc
• Reverse Engineering
  • /r/ReverseEngineering's Weekly Questions Thread
  • Desuperpacking Meta Superpacked APKs
• SAUCERMAN
  • android studio动态调试apk
• FreeBuf网络安全行业门户
  • FreeBuf 早报 | 推特色情机器人账号泛滥；WordPress爆高危漏洞插件
  • 人民大学大量学生信息被盗，官方&警方回应来了
  • 警惕： 新的 "RustBucket "恶意软件变种针对macOS用户
  • WordPress爆高危漏洞插件，可被用来创建非法管理员帐户
  • 推特色情机器人账号泛滥，马斯克的“治推谋略”何在？
• 绿盟科技技术博客
  • Smartbi商业智能软件登录代码逻辑漏洞通告
  • 绿盟科技威胁周报（2023.06.26-2023.07.02）
• HackerNews
  • 俄罗斯卫星网络被黑：观测到连接持续中断 攻击者“声援”瓦格纳集团
  • 人民大学大量学生信息被盗，官方&警方回应来了
  • 推特色情机器人账号泛滥，马斯克的“治推谋略”何在？
  • WordPress 爆高危漏洞插件，可被用来创建非法管理员帐户
  • 警惕： 新的 “RustBucket” 恶意软件变种针对 macOS 用户
  • LockBit 团伙索要 7000 万美元赎金，台积电已承认网络遭到攻击
• 黑海洋 - WIKI
  • 在线短信压力测试/短信轰炸（仅供学习）
  • Microsoft 365 A1/A1P/E3/E5/商业版搭建域名邮局，实现无限别名邮箱
• Seebug漏洞平台
  • 404星链计划 | Viper、CF、afrog 项目版本更新
• 奇客Solidot–传递最新科技情报
  • Valve 确认它限制使用 AI 生成内容的游戏
  • Linux 6.5 将支持龙芯即将发布的 3A6000
  • GIMP 项目 2019 年以来首次举行线下会议
  • 维基百科切换到 CC BY-SA 4.0 许可证
  • 2200 台被遗忘的古董电脑重获新生
  • 胎盘哺乳动物幸免于小行星撞击地球
  • Perl 5.38 释出
  • 科学家公布首位接受转基因猪心脏移植患者的死因
  • Steam Linux 玩家中近七成使用 AMD CPU
  • 为什么美国人开着字幕看电视？
  • Red Hat 延长 RHEL 7 的支持时间至 2028 年
• 懒人在思考
  • Web3 安全入门（重点智能合约安全）
• 安全牛
  • 安全头条 | 中国人民大学回应学生信息泄露传言；《商用密码管理条例》（修订版）正式施行
  • 网络安全渗透测试的7种主要类型
  • 当防火墙遇上SD-WAN，“一举多得”实现制造业网络安全
  • 社区分享｜金融类公司选择JumpServer的契机
  • 青藤NPatch今日发布，超强人气吸引3+人在线围观咨询
• dotNet安全矩阵
  • .Net Core 反序列化攻击面
  • .NET矩阵星球优惠活动持续进行
• 安全学术圈
  • 香港中文大学 | TChecker：用于检测PHP应用程序中的污点式漏洞的精确静态跨过程分析
• 58安全应急响应中心
  • 榜单｜6月英雄榜及额外奖励名单公布
• 安全研究GoSSIP
  • G.O.S.S.I.P 阅读推荐 2023-07-03 HubFuzzer
• 安全攻防团队
  • ​云安全风险情报（06.26-07.02）
• 长亭安全应急响应中心
  • 0day速修｜Smartbi 远程代码执行漏洞
• CNVD漏洞平台
  • CNVD漏洞周报2023年第26期
  • 上周关注度较高的产品安全漏洞(20230626-20230702)
• 看雪学苑
  • CUDA程序之逆向
  • 黑客索要7000万美元赎金，台积电疑似遭受勒索软件攻击
  • CVE复现漏洞精讲-从基础到入门
• 安全内参
  • 台积电遭遇天价数据勒索：硬件供应商被黑，泄露少数内部数据
  • 全国超2500家企业遭“木马”攻击：企业营销号被控制 用户信息全泄漏
• 代码卫士
  • 黑客利用WordPress 插件中的提权0day攻陷网站
  • 台积电称供应商遭勒索攻击
• M01N Team
  • 钓鱼手法鉴赏 | 绕过微软账号的多因素认证
• 中通安全应急响应中心
  • 专项活动 | 最高3倍积分奖励
• 绿盟科技CERT
  • 【安全通告】Smartbi商业智能软件登录代码逻辑漏洞
• 安全圈
  • 【安全圈】推特虚假机器人账户泛滥尚未解决，色情机器人账号又开始泛滥！
  • 【安全圈】人大一名毕业生在校期间盗取其他学生个人信息，警方通报：刑拘！
  • 【安全圈】macOS 用户注意了！ 新的 “RustBucket” 恶意软件变种正在针对
  • 【安全圈】WordPress爆高危漏洞插件！可被用来创建非法管理员帐户
• 微步在线
  • 北京市工商联副主席江岚一行到访微步调研
  • 2023微步合作伙伴会议在全国多地召开
• 雷神众测
  • 雷神众测漏洞周报2023.06.26-2023.07.02
• 奇安信 CERT
  • Smartbi 登录代码逻辑漏洞安全风险通告
  • 安全热点周报(2023.6.26-2023.7.2)
• RainSec
  • 2022西湖论剑线下赛部分题解
• 阿里安全响应中心
  • 阿里云高危严重双倍活动上线，持续两周
• 数世咨询
  • 转变安全思维，加强“咽喉点”防御，暴露点数从1.1万跌至几百个！
  • 赛博昆仑完成近亿元A轮融资 | 从源头，根本防护
  • 【互联网】优秀案例：某互联网行业客户移动安全建设案例
• CNCERT国家工程研究中心
  • CNCERT国家工程研究中心安全资讯周报20230703期
  • 俄罗斯卫星网络被黑：观测到连接持续中断 攻击者“声援”瓦格纳集团
  • 数据跨度长达10年！这款Android 应用遭重大数据泄露
• 山石网科安全技术研究院
  • Go语言特性引发的安全问题的思考
• 深信服千里目安全技术中心
  • APT高级威胁六月热点跟踪
  • 【勒索防护】台积电遭Lockbit 3.0勒索，被索要7000万美元！
  • 【漏洞通告】Parse Server远程代码执行漏洞(CVE-2023-36475)
• 嘶吼专业版
  • 全新升级！《时维鹰扬·履践致远：数据安全细分市场调研报告2023》即将发布
  • 剖析组织中六大关键攻击面相关的威胁趋势和挑战
  • 攻击者使用网络钓鱼和勒索软件，针对新加坡企业继续攻击
• Securityinfo.it
  • ArcServe risolve una vulnerabilità critica dopo mesi dalla segnalazione
  • Proton Pass, il password manager open-source che cripta anche gli indirizzi email
• 关键基础设施安全应急响应中心
  • 关键基础设施安全资讯周报20230703期
  • 赎金7000万美元--台积电遭LockBit勒索！
  • Andariel组织开始借助新的恶意软件发起攻击
• 中国信息安全
  • 预告 | BCS2023北京网络安全大会将于7月6日召开
  • 四部门关于调整《网络关键设备和网络安全专用产品目录》的公告
  • 关注 | 公安部组织开展“鄂湘鲁豫”区域会战 依法严厉打击电信网络诈骗犯罪
  • 评论 | 与时俱进维护清朗网络空间
  • 国际 | 欧盟《人工智能法案》进入最终谈判阶段
  • 评论 | 惩治“键盘伤人”要做到“法也责众”
• 情报分析师
  • 《朝鲜的网络战略》2023年6月（附下载）
  • 【地理定位】挖掘机试图阻止瓦格纳集团叛乱车队前往俄罗斯
• KitPloit - PenTest & Hacking Tools
  • Wanderer - An Open-Source Process Injection Enumeration Tool Written In C#
• 长亭科技
  • 长亭安全大模型正式推出，首位虚拟员工上线
• Schneier on Security
  • Self-Driving Cars Are Surveillance Cameras on Wheels
• Over Security - Cybersecurity news aggregator
  • Cosa è successo a Kolektiva.social: database sequestrato durante un raid dell’FBI al noto server Mastodon
  • Microsoft denies data breach, theft of 30 million customer accounts
  • Chinese hackers target European embassies with HTML smuggling technique
  • WordPress plugin lets users become admins – Patch early, patch often!
  • Hackers target European government entities in SmugX campaign
  • Decryptor publicly released for Akira ransomware used in several high-profile incidents
  • Carte fedeltà, i dati devono essere trattati correttamente: cosa impariamo dalla sanzione a Benetton
  • Creazione di uno shellcode custom in ASM con Keystone-Engine
  • Who’s Behind the DomainNetworks Snail Mail Scam?
  • Microsoft Edge upgrades built-in Cloudflare VPN with 5GB of data
  • Hacks targeting British exam boards raise fears of students cheating
  • ArcServe risolve una vulnerabilità critica dopo mesi dalla segnalazione
  • BlackCat ransomware pushes Cobalt Strike via WinSCP search ads
  • Snappy: A tool to detect rogue WiFi access points on open networks
  • Twitter's bot spam keeps getting worse — it's about porn this time
  • 300,000+ Fortinet firewalls vulnerable to critical FortiOS RCE bug
  • Cyber spionaggio, così la Cina protegge i suoi interessi strategici: il caso dell’attacco al Kenya
  • ChatGPT e le altre intelligenze artificiali stanno influenzando la cyber security: ecco come
  • Proton Pass, il password manager open-source che cripta anche gli indirizzi email
  • Melius Form, Cybersecurity & Compliance Security Management
  • Risky Biz News: Prigozhin troll farms in limbo following Wagner mutiny
• Pentestmag
  • Good, Bad and the Ugly of HTTP/2
• Troy Hunt's Blog
  • Weekly Update 354
• 丁爸 情报分析师的工具箱
  • 【资料】恐怖主义与加密货币
  • 【通知】中国国防科学技术信息学会征集青年创新创意方案
  • 【通知】全国执法机关情报能力及业务体系建设高级实操培训班
• 黑伞安全
  • 伙伴1期就业报告：30天就业80%
• 极客公园
  • 微软、谷歌、亚马逊，正在打响大模型时代的云战争
  • 马斯克：限流推特是在做好人好事；Meta 为 VR 开发者开出百万美元年薪；比亚迪上半年交付 125 万辆 | 极客早知道
• Social Engineering
  • Hidden gem books on social skills, social engineering, negotiation, etc?
  • How do I find a person's online presence using a pic?
• Technical Information Security Content & Discussion
  • Open Source CSP Report Listener
  • CISA Launches CyberSentry. A CISA-managed threat detection and monitoring capability. Anyone else think this is a terrible idea?
  • Technical Details of CVE-2023-30990 - Unauthenticated RCE in IBM i DDM Service
  • Find DLLs with RWX sections
  • Desuperpacking Meta Superpacked APKs
• Deep Web
  • Deepmarket?
  • deep web
  • is there someone in this sub that uses only Windows and tor to search in the deep web?
• Information Security
  • Do you use a password manager to store your passwords?
• TorrentFreak
  • Soap2Day Shut Down By Federal Court Following Hollywood Legal Action
• TG Soft Software House - News
  • Phishing: i tentativi di furto credenziali e/o dati maggiormente diffusi nel mese di LUGLIO 2023...
• KitPloit - PenTest Tools!
  • Wanderer - An Open-Source Process Injection Enumeration Tool Written In C#
• Your Hacking Tutorial by Zempirians
  • Seeking help to identify vulnerabilities and secrets in a website backup file
• Computer Forensics
  • what field should i study to become a cyber forensic investigator ?
  • Degree or education
  • Masters in forensics
  • Do SANS certification exams usually have questions from content that only exists in the labs?
• The Hacker News
  • Chinese Hackers Use HTML Smuggling to Infiltrate European Ministries with PlugX
  • Improve Your Security WordPress Spam Protection With CleanTalk Anti-Spam
  • CISA Flags 8 Actively Exploited Flaws in Samsung and D-Link Devices
  • Evasive Meduza Stealer Targets 19 Password Managers and 76 Crypto Wallets
  • BlackCat Operators Distributing Ransomware Disguised as WinSCP via Malvertising
• SANS Internet Storm Center, InfoCON: green
  • Controlling network access to ICS systems, (Mon, Jul 3rd)
• Security Affairs
  • Anonymous Sudan claims to have stolen 30 million Microsoft’s customer accounts
  • SmugX: Chinese APT uses HTML smuggling to target European Ministries and embassies
  • The Impacts of Data Loss on Your Organization
  • CISA adds Samsung and D-link bugs to its Known Exploited Vulnerabilities catalog
  • New Windows Meduza Stealer targets tens of crypto wallets and password managers
  • Experts detected a new variant of North Korea-linked RUSTBUCKET macOS malware
• Blackhat Library: Hacking techniques and research
  • High quality GPS spoofing app for android?
  • Naughty Users & SSH Tunnels | HackTheBox | Tier 1 | Funnel | Walkthrough
  • The perfect bumble dating app setup for onlyfans models!!
  • I want to learn hacking plz guide me
  • Best way to fabricate google reveiws
• Krebs on Security
  • Who’s Behind the DomainNetworks Snail Mail Scam?
• The Register - Security
  • You've patched right? '340K+ Fortinet firewalls' wide open to critical security bug
  • TSA wants to expand facial recognition to hundreds of airports within next decade
  • Dublin Airport staff pay data 'compromised' by criminals
  • US authorities warn on China's new counter-espionage law
  • Japan rebukes Fujitsu for cloud security fails
• Graham Cluley
  • Dublin Airport staff pay details stolen by hackers after MOVEit attack at third-party provider Aon
• Instapaper: Unread
  • Jake Roberts - The Tale Of Phineas Fisher
  • Guerre di Rete - Le verità su Encrochat
• Silent Signal Techblog
  • Technical Details of CVE-2023-30990 - Unauthenticated RCE in IBM i DDM Service
• Paul's Security Weekly
  • Russian Satellites, Cl0p, CISA, YouTube, ArcServ, EarlyRat, Aaran Leyland, & More - SWN #307
  • The Fifth Domain - Richard Clarke - BSW Vault