today.md

每日安全资讯（2023-08-27）

• Sec-News 安全文摘
  • JDK CVE-2023-21939 分析利用
• HackerOne Hacker Activity
  • jdbc apache airflow provider code execution vulnerability
  • odbc apache airflow provider code execution vulnerability
• Security Boulevard
  • BSides Cheltenham 2023 – James Bore – Reserving The Right To Be Wrong
  • 2023 OWASP Top-10 Series: API5:2023 Broken Function Level Authorization
• SecWiki News
  • SecWiki News 2023-08-26 Review
• unSafe.sh - 不安全
  • 2023 OWASP Top-10 Series: API5:2023 Broken Function Level Authorization
  • 激活基底前脑的星形胶质细胞让小鼠不休不眠
  • Midnight Sun CTF 2023 Finals - Writeups
  • Windows 最近更新导致的蓝屏死机与微星主板相关
  • [Technical Paper] Pepsi 2.0 Unpacking
  • NYT、CNN 和 ABC 屏蔽 OpenAI 的 GPTBot 爬取内容
  • Overview of Content Published in July
  • 玄 - 利用DLL通知回调函数注入shellcode（下） - zha0gongz1
  • JDK CVE-2023-21939 分析利用
  • 首款开源仿宋字体「朱雀仿宋」发布预览测试版及问卷调查
  • 内容的未来，是广告还是用户付费？
  • leonardo.ai免费的AI绘画网站 每天可画150张
  • 播客 | 对话老麦：请回答什么是少数派的下一个十年
  • 左右的概念及难点
  • 允许函数接收 ChatGPT 响应
  • 家庭常备药清单
• CXSECURITY Database RSS Feed - CXSecurity.com
  • Business Directory Script 3.2 SQL Injection
  • Bus Reservation System-1.1 Multiple-SQLi
  • SPA-Cart eCommerce CMS 1.9.0.3 - Reflected XSS
  • SPA-Cart eCommerce CMS 1.9.0.3 - SQL Injection
• Recent Commits to cve:main
  • Update Sat Aug 26 10:59:35 UTC 2023
• Sploitus.com Exploits RSS Feed
  • Exploit for CVE-2023-38388 exploit
  • Exploit for Vulnerability in Oracle Jre exploit
• obaby@mars
  • WordPress cookie保存用户信息失败–战五渣抓虫记
• 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com
  • 揭露路由协议的隐藏风险
  • 远程访问安全技术及最佳实践指南
• CTFするぞ
  • Midnight Sun CTF 2023 Finals - Writeups
• 博客园 - zha0gongz1
  • 玄 - 利用DLL通知回调函数注入shellcode（下） - zha0gongz1
• SAP Blogs
  • Um conteúdo para maratonar! Recapitulando o SAP Inside Track São Paulo 2023 #sitsp2023
  • Access Request Service Configuration in SAP IAG for Target SAP S4Hana Private Cloud
  • Chief Data Officer – Why should you care?!
  • SYSTEM User account password reset HANA
  • Scenario specific my Inbox configuration and Fiori elements app based approval screen integration
• Reverse Engineering
  • [Technical Paper] Pepsi 2.0 Unpacking
  • Spare Change (4am & san inc crack)
• CCC Event Blog
  • Camp 2023 – Feedback
• Hexacorn
  • Writing better Yara rules in 2023…
• Didier Stevens
  • Overview of Content Published in July
• Wallarm
  • 2023 OWASP Top-10 Series: API5:2023 Broken Function Level Authorization
• 空星星的备忘录
  • 密码保护：第二届陇剑杯tcpdump_2 writeup
  • 密码保护：第二届陇剑杯tcpdump_1 writeup
• 看雪学苑
  • CVE-2021-4034分析
• 奇客Solidot–传递最新科技情报
  • 激活基底前脑的星形胶质细胞让小鼠不休不眠
  • Windows 最近更新导致的蓝屏死机与微星主板相关
  • NYT、CNN 和 ABC 屏蔽 OpenAI 的 GPTBot 爬取内容
  • 守护者的零之曙光：Hardened SIEM/XDR
  • Gitlab 支持将 ActivityPub 协议用于合并请求
• 黑海洋 - WIKI
  • leonardo.ai免费的AI绘画网站 每天可画150张
  • 左右的概念及难点
  • 允许函数接收 ChatGPT 响应
  • 家庭常备药清单
  • 年度订阅清单（Notion模板）
  • GFPGAN-腾讯开源AI老照片修复工具
  • Artalk是一款简洁的自托管评论系统
• 天御攻防实验室
  • 组建和运营世界级安全运营中心的11个策略
• 极客公园
  • 美监管将公布特斯拉自动驾驶调查结果；Hugging Face 估值达到 45 亿美元；科学家实现「真空声音传播」 | 极客早知道
• 山石网科安全技术研究院
  • 山石网科入选“零信任实验室”成员单位
• 丁爸 情报分析师的工具箱
  • 【资料】降低知识密集型组织的知识泄漏风险：移动设备的角度来看
• 网安国际
  • 【InForSec学术报告】卢康杰：加固开源系统和其他系统的原则性和实用性方法（8月30日@清华大学）
• 安全内参
  • 全球高级持续性威胁总体态势、典型手法及趋势研判
• 中国信息安全
  • 专题·商密新时代 | 深入贯彻落实《商用密码管理条例》 推进电信行业商用密码应用
  • 发布 | 中国移动发布《智慧城市数据安全白皮书》（附下载）
  • 自然资源部：推动测绘地理信息数据安全有序开放
  • 前沿 | 审慎应对生成式人工智能新发展
  • 评论 | 规范平台行为是依法管网的重点
• Over Security - Cybersecurity news aggregator
  • A Brazilian phone spyware was hacked and victims’ devices 'deleted' from server | TechCrunch
• /dev/random
  • [SANS ISC] macOS: Who’s Behind This Network Connection?
• Il Disinformatico
  • Chi c’è nello spazio? Aggiornamento 2023/08/26: 14 persone
• Security Affairs
  • Cloud and hosting provider Leaseweb took down critical systems after a cyber attack
  • French employment agency Pôle emploi data breach impacted 10M people
  • Crypto investor data exposed by a SIM swapping attack against a Kroll employee
• netsecstudents: Subreddit for students studying Network Security and its related subjects
  • Certified Ethical Hacker (CEH) Exam Cheat Sheet
  • Hack Hard: A Retro RPG Educational Hacking Game with A Die Hard Tribute
  • Sqli functions
• Social Engineering
  • “The allure of conspiracy theories lies in the idea that underneath our superficial and mundane reality is an enchanting truth veiled by a carefully constructed facade, adding a touch of magic and mystery to ordinary experience.” — Conspiracism as Serious Play
  • How to find email addresses of social media accounts?
  • Practice Social Engineering
  • Easy to cancel Spokeo?
• SANS Internet Storm Center, InfoCON: green
  • macOS: Who?s Behind This Network Connection?, (Sat, Aug 26th)
• Your Hacking Tutorial by Zempirians
  • how to analyze file with .hgkey extension
  • cracking websites (blocked content)
  • Can anyone tell me if the hackers on IG are all scammers? Is it possible to hack a phone with just a phone number undetected and get access as they advertise?
  • I NEED HELP
• 迪哥讲事
  • 一个登陆框引起的血案
• 4ra1n
  • JDK CVE-2023-21939 分析利用
• The Hacker News
  • LockBit 3.0 Ransomware Builder Leak Gives Rise to Hundreds of New Variants
  • Kroll Suffers Data Breach: Employee Falls Victim to SIM Swapping Attack
• Technical Information Security Content & Discussion
  • CVE-2020-19909 is everything that is wrong with CVEs
  • Fake Email Validation NPM Package Contains C2 and Sophisticated Data Exfiltration
  • Making security keys post quantum resilient
  • CVE-2023-36844 And Friends: Unauth RCE In Juniper Devices
  • Threat Hunting Newsletter - Excel for Threat Hunters
• Computer Forensics
  • the usage of write-blocker
  • MD5/SHA1 hash not matching from EZ Hasher and FTK Imager
  • Cfdi
  • Where does DFIR fit into working in a SOC?