Вот такую уязвимость обнаружил пользователь нашего форума (AndreyG1992)

[ATTACH]


Уязвимость. Как заблокировать любого пользователя WhatsApp.

"В...

If exploited, this router vulnerability can allow a remote attacker to take control of the router's configuration without authentication, putting personal and business data at risk.

Hello Windows Insiders, today we’re releasing Windows 10 Insider Preview Build 19536 to Windows Insiders in the Fast ring. The Fast ring going forward Back in early November, we announced that Windows Insiders who had opted into Skip Ahead would be migrated back into the Fast ring with the goal of providing everyone in the […]

Advanced unofficial client based on Telegram API.


Features:

• Create your own chat tabs with icon support from png.
• Direct chats: you can make new folder and set it as Direct chats, which will be shown in sidebar and as a tab.
• Batch actions with chats (mark read, delete, etc.) and contacts.
• Auto-merge your messages sent in a row.
• Confirmation of sending audio, video messages, GIFs, stickers.
• Change interface fonts with viewing and setting ttf from chat.
• Hidden chats with telegram password protection and fingerprint login.
• Auto-selecting proxy based on ping and connection speed.
• Built-in TOR.
• Forward messages without quoting, with editing, or adding caption to media.
• Copy part of the message.
• Improved formatting panel (with quote and reply to selected phrase).
• Create links in two clicks.
• Increase the limit of pinned chats to 100.
• All types of shared media in the profile.
• Photo in chat for the entire width of the screen.
• Hide bottom panel in channels.
• Search button in each…

Rich Communication Services promises to be the new standard for texting. Thanks to sloppy implementation, it's also a security mess.

December 16, 2019
Peleg Hadar
Security Researcher, SafeBreach Labs
Introduction
SafeBreach Labs discovered a vulnerability in Intel(R) Rapid Storage Technology Service.
In this post, we will d…

Telerik UI for ASP.NET AJAX insecurely deserializes JSON objects resulting in arbitrary RCE. Learn how to patch and securely configure this software.

背景介绍
2019年10月25号，360Netlab未知威胁检测系统发现一个可疑的ELF文件(80c0efb9e129f7f9b05a783df6959812)。一开始，我们以为这是在我们发现的Unknown
Botnet中比较平凡的一个，并且在那时候VirusTotal上有2款杀毒引擎能够识别。当我们关联分析它的相关样本特征和IoC时，我们发现这个案例跟Lazarus
Group有关，并决定深入分析它。

目前，业界也从未公开过关于Lazarus
Group针对Linux平台的攻击样本和案例。通过详细的分析，我们确定这是一款功能完善，行为隐蔽并适用于Windows和Linux平台的RAT程序，并且其幕后攻击者疑似Lazarus
Group。

事实上，这款远程控制软件相关样本早在2019年5月份就已经出现，目前在VirusTotal上显示被26款杀毒软件厂商识别为泛型的恶意软件，但它还是不为人所知，我们也没有找到相关分析报告。所以，我们会详细披露它的一些技术特征，并根据它的文件名和硬编码字符串特征将它命名为Dacls。

Dacls 概览
Dacls是一款新型的远程控制软件，包括Wi

Перевод статьи подготовлен специально для студентов курса «Безопасность Linux». В этой статье мы хотели бы сосредоточиться на Docker и обсудить советы и реко...