[每日信息流] 2023-08-22

[Yof3ng]

每日安全资讯（2023-08-22）

• SAP Blogs
  • Data takes Center Court at the WTA with SAP BTP
  • What’s new in the SAP Ariba Shopping Mobile App 1.8.0 with Ariba 2308
  • SAP E-Mobility: New App to Create and Manage Charging Authorizations
  • Automatic Freight Unit Planning
  • Begin Enjoying an Enhanced Supplier Experience on SAP Business Network
  • SAP BTP ABAP Environment – Release 2308
  • SAP Maintenance Assistant 2308 Now Available – What’s New?
  • What’s New in Purchase Requisitions – SAP S/4HANA Cloud 2308
  • SAP S/4HANA Business Partner implement custom field check
• Malware Archives - Security Affairs
  • BlackCat ransomware group claims the hack of Seiko network
  • New HiatusRAT campaign targets Taiwan and U.S. military procurement system
• MalwareTips Blog
  • Got A “Geek Squad Renewal Processed” Email? It’s A Scam!
  • Sellxcoin Investigated: Scam or Legit? Our Findings
  • Is Nirexcrypto A Scam? The Hard Facts You Need To Know
  • MoneyEasily Exposed: Don’t Get Scammed by This Website
  • ‘Your Device is Hacked: Evidence (Files) Are Available’ Scam Alert
  • “We Hacked & Extracted Information From Your Device” Scam Exposed
  • Remove CirrusCastellanus Extension [Virus Removal Guide]
  • “I Regret to Inform You About Some Sad News for You” Scam
  • Remove Doukoula.com Pop-up Ads [Virus Removal Guide]
  • Remove Rtmladweb.com Pop-up Ads [Virus Removal Guide]
• Malwarebytes Labs
  • Chrome will soon start removing extensions that may be unsafe
  • QR codes used to phish for Microsoft credentials
  • A week in security (August 14 - August 20)
• 90Sec - 最新话题
  • 渗透测试之http数据包加解密
• LoRexxar's Blog
  • Joern与CPG是什么？
• 先知安全技术社区
  • BossCms V2.2 代码审计
• SecWiki News
  • SecWiki News 2023-08-21 Review
• bunnie's blog
  • Name that Ware, August 2023
  • Winner, Name that Wäre July 2023
• Sploitus.com Exploits RSS Feed
  • Color Prediction Game v1.0 - SQL Injection exploit
  • OVOO Movie Portal CMS v3.3.3 - SQL Injection Vulnerability exploit
  • Crypto Currency Tracker (CCT) 9.5 - Admin Account Creation (Unauthenticated) exploit
  • TSplus 16.0.0.0 - Remote Work Insecure Files and Folders exploit
  • TSPlus 16.0.0.0 - Remote Work Insecure Credential storage exploit
  • EuroTel ETL3100 - Transmitter Default Credentials Vulnerability exploit
  • TSPlus 16.0.0.0 - Remote Work Insecure Credential storage Vulnerability exploit
  • Jorani Remote Code Execution exploit
  • Evsanati Radyo 1.0 Shell Upload exploit
  • Crypto Currency Tracker (CCT) 9.5 Add Administrator exploit
  • Crypto Currency Tracker (CCT) 9.5 - Admin Account Creation (Unauthenticated) Vulnerability exploit
  • Emaar Real Estate Agency Directory System 5.7 Shell Upload exploit
  • EuroTel ETL3100 - Transmitter Unauthenticated Config/Log Download Vulnerability exploit
  • TSplus 16.0.2.14 - Remote Access Insecure Files and Folders Permissions Vulnerability exploit
  • OVOO Movie Portal CMS v3.3.3 - SQL Injection exploit
  • Credit Lite 1.5.4 SQL Injection exploit
  • Fara Melk Estate CMS 1.5.0 Information Disclosure exploit
  • Event Locations CMS 1.0.1 Shell Upload exploit
  • PHPJabbers Business Directory Script v3.2 - Multiple Vulnerabilities exploit
  • Inosoft VisiWin 7 2022-2.1 - Insecure Folders Permissions exploit
  • Taskhub CRM Tool 2.8.6 - SQL Injection Vulnerability exploit
  • Dolibarr Version 17.0.1 - Stored XSS exploit
  • Linux/x64 - memfd_create ELF loader Shellcode (170 bytes) exploit
  • Jorani Remote Code Execution Exploit exploit
  • Global - Multi School Management System Express v1.0- SQL Injection exploit
  • Credit Lite 1.5.4 SQL Injection Vulnerability exploit
  • Exploit for Vulnerability in Amd Amd Uprof exploit
  • Exploit for Vulnerability in Minio exploit
• Tenable Blog
  • Tenable Cyber Watch: White House Tackles Cyber Skills Shortage, Cost of Data Breaches Keeps Rising, and more
• Security Boulevard
  • News Alert: airSlate partners with Forthright to launch automated business-efficiency, workflow tool
  • By Following the Crypto, Cyfirma Identifies Developer Behind CraxsRAT
  • Legit Security ASPM Platform Update: Accelerating AppSec Efficiency and Effectiveness
  • BSidesTLV 2023 – Andy Ellis – Hacking Harry Potter: The Untold Story Of Fantastical Social Engineering
  • Salt Wins Prestigious SC Magazine Award – “Best API Security Solution”
  • GUEST ESSAY: Lessons to be learned from the waves of BofA phone number spoofing scams
  • Randall Munroe’s XKCD ‘Electron Holes’
  • Cuba Ransomware Group Exploiting Veeam Flaw in Latest Campaign
  • LOL WinRAR: Serious One-Click Bug (Patch NOW)
  • BSidesTLV 2023 – Aviad Carmel – Uh-OAuth! – Breaking (And Fixing) OAuth Implementations
• 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com
  • 实力认可！海云安荣获“金融开源治理工具应用效果评估先行机构”
  • 奇安信软件安全人工智能开放创新平台团队获哈佛商业评论高能团队奖
  • XCon2023议题：Find Vulnerability From The Fix Of Vulnerability
  • CVE-2023-40477：WinRAR远程代码执行漏洞
  • 为什么速度是事件响应和缓解的关键
• Hacker Noon
  • Facebook’s Not-So-Happy Birthdays Offer New App Opportunity
  • Keep Up With Tech - Meet The Tech Company News Pages
  • How to Extract and Generate JSON Data With GPTs, LangChain, and Node.js
  • The Noonification: Escaping the Golden Cage, Strapped to Polters Chest (8/21/2023)
  • From Pixelated to Perfect: Comparing 7 AI Upscalers
  • A Hitchhiker’s Guide to the Future of AI
  • The transistor burst upon the electronic scene in the 1950s
  • Lasers by Hal Hellman - Table of Links
  • Women in Tech: Ilknur on Building for People with Disabilities and Grappling with Imposter Syndrome
  • How AWS CloudTrail Enhances Monitoring, Compliance, and Cost Management
  • 78 Stories To Learn About Operating Systems
  • 55 Stories To Learn About Peace Itimi
  • 34 Stories To Learn About Pc
  • Building a Web3 Play-To-Earn Money Dapp with React, Solidity, and CometChat
  • Building Secure Open Referral Systems: Harnessing HashMaps for Effective Fraud Prevention
  • Google Bard Answers the Ultimate Question.. by Mistake
  • Pioneering Online Bookings: A Talk with Nachum Kligman, CEO of Book Like A Boss
  • The Beginner's Guide to Feature Engineering
  • Meet the Writer: Hacker Noon's Contributor Igor Khomyanin, Data Scientist and AI enthusiast
• Dancho Danchev's Blog
  • Where Is Anton Nikolaevich Korotchenko (Антон Николаевич Коротченко) Also Known as Koobface Botnet Master KrotReal?
  • Exposing a Currently Active Personally Identifiable Cybercriminals XMPP/Jabber Account IDs Portfolio - Part Three
  • Bed Time Reading Courtesy of the Bad Guys
• unSafe.sh - 不安全
  • Public Report – Penumbra Labs R1CS Implementation Review
  • XLoader’s Latest Trick | New macOS Variant Disguised as Signed OfficeNote App
  • Decoding the Enigma: A Journey into Minesweeper’s Reverse Engineering
  • Adobe开心版软件作者@VPOSY退圈 已无时间维护因此暂停更新
  • Geotab signal compression as known as curve algorithm
  • Application Security Report: Q2 2023
  • 芯片上的激光雷达
  • An August reading list about online security and 2023 attacks landscape
  • 用 DockX 在 macOS 程序坞与菜单栏显示「任何内容」，内购限免
  • MSSqlPwner - An Advanced And Versatile Pentesting Tool Designed To Seamlessly Interact With MSSQL Servers And Based On Impacket
  • How to Secure Generative AI: Uncovering Forcepoint’s Data Security Capabilities
  • 喜报+2！新建「付费知识帮会」 3天带起千人社群
  • 特斯拉回应100G数据泄露事件：内部员工违规操作
  • 游戏续作的开发时间间隔愈来愈长
• Wallarm
  • Take Care of Orphan APIs with Wallarm
• Exploit-DB.com RSS Feed
  • [webapps] Taskhub CRM Tool 2.8.6 - SQL Injection
  • [webapps] OVOO Movie Portal CMS v3.3.3 - SQL Injection
  • [webapps] Global - Multi School Management System Express v1.0- SQL Injection
  • [webapps] Color Prediction Game v1.0 - SQL Injection
  • [webapps] Crypto Currency Tracker (CCT) 9.5 - Admin Account Creation (Unauthenticated)
  • [webapps] PHPJabbers Business Directory Script v3.2 - Multiple Vulnerabilities
  • [remote] EuroTel ETL3100 - Transmitter Unauthenticated Config/Log Download
  • [remote] EuroTel ETL3100 - Transmitter Authorization Bypass (IDOR)
  • [remote] EuroTel ETL3100 - Transmitter Default Credentials
  • [webapps] Dolibarr Version 17.0.1 - Stored XSS
  • [local] Inosoft VisiWin 7 2022-2.1 - Insecure Folders Permissions
  • [remote] TSPlus 16.0.0.0 - Remote Work Insecure Credential storage
  • [remote] TSplus 16.0.0.0 - Remote Work Insecure Files and Folders
  • [remote] TSplus 16.0.2.14 - Remote Access Insecure Files and Folders Permissions
• Dark Reading
  • Tesla Data Breach Investigation Reveals Inside Job
  • Fed Warning: US Space Industry Subject To Foreign Spying, Disruptions
  • Energy One Investigates Cyberattack
  • Generative AI Is Scraping Your Data. So, Now What?
  • DEF CON's AI Village Pits Hackers Against LLMs to Find Flaws
  • Visibility Is Just Not Enough to Secure Operational Technology Systems
• FreeBuf网络安全行业门户
  • 喜报+2！新建「付费知识帮会」 3天带起千人社群
  • 特斯拉回应100G数据泄露事件：内部员工违规操作
  • FreeBuf早报 | 谷歌浏览器推出全新功能；特斯拉数据泄漏影响
  • 改变网络安全，最火爆的黑客工具：武器化人工智能FraudGPT
  • 国际刑警组织逮捕 14 名涉嫌盗窃 4000 万美元的网络罪犯
  • 信安标委就国家标准《信息安全技术 基于个人信息的自动化决策安全要求》征求意见
  • 谷歌浏览器推出全新功能：可自动检测恶意软件！
  • 抗议核废水入海，Anonymous对日本核电机构发动攻击
• Black Hills Information Security
  • Talkin’ About Infosec News – 8/14/2023
• 博客园 - 郑瀚Andrew
  • 关于TCP滑动窗口下流量拥塞控制导致的分包问题的相关研究 - 郑瀚Andrew
• 黑海洋 - WIKI
  • 免费无限流量上网工具 基于Cloudflare Warp+ Clash
  • 在线图片处理工具 模糊图片变清晰 抠图 压缩 证件照处理
• obaby@mars
  • JEB-5.1.0.202308171141 Cracked
  • 囚笼
• 安全牛
  • 全球知名的10大网络安全协会（联盟）组织
  • 安全头条 |北京网警约谈第三方链接被篡改单位；国家标准《信息安全技术 基于个人信息的自动化决策安全要求》公开征求意见
• 信息时代的犯罪侦查
  • 您的个人信息有没有被泄露？
• 奇客Solidot–传递最新科技情报
  • 芯片上的激光雷达
  • 游戏续作的开发时间间隔愈来愈长
  • 美国大学开始教学生 ChatGPT 和 AI 相关知识
  • Threads 准备推出 Web 版本
  • 蓝光过滤眼镜可能无效
  • 电动汽车杀死了备用轮胎
  • 受挫折的年轻一代
  • Twitter 改名 X 后应用商店下载排名大幅下降
• Files ≈ Packet Storm
  • Jorani Remote Code Execution
  • Debian Security Advisory 5481-1
  • Debian Security Advisory 5480-1
  • Academy LMS 6.1 Cross Site Scripting / File Upload
  • Credit Lite 1.5.4 SQL Injection
  • Ubuntu Security Notice USN-6303-1
  • Ubuntu Security Notice USN-6302-1
  • Ubuntu Security Notice USN-6267-3
  • Crypto Currency Tracker (CCT) 9.5 Add Administrator
  • Fara Melk Estate CMS 1.5.0 Information Disclosure
  • Evsanati Radyo 1.0 Shell Upload
  • Event Locations CMS 1.0.1 Shell Upload
  • DoorGets CMS 7.0 Information Disclosure
  • Emaar Real Estate Agency Directory System 5.7 Shell Upload
• 丁爸 情报分析师的工具箱
  • 【资料】开源信息，未来情报
• 代码卫士
  • 速修复！Juniper Junos OS 漏洞使设备易受攻击
• 看雪学苑
  • 遍历FSD驱动派遣函数与Hook检测
  • 来 SDC 展示你的创意吧，【极客市集】展商招募开启
  • WinRAR解压缩软件存在漏洞，允许黑客执行任意代码
  • 课程AI字幕上线！今日更新至2-21，30小时教你玩转CTF
• 安全内参
  • 网络攻击迫使英国数百家零售商业务瘫痪
  • 北京网警约谈网站第三方链接被篡改单位
• 绿盟科技研究通讯
  • Service Mesh未来发展趋势浅析
• 奇安信威胁情报中心
  • 红雨滴云沙箱：针对蓝队人员的陷阱，多层Python攻击样本分析
• 情报分析师
  • 美国基础设施现状
  • 情报分析师出品《俄情要闻》开放订阅
  • 关注小号，谨防失联！
• 吾爱破解论坛
  • 吾爱破解安卓逆向入门教程《安卓逆向这档事》十三、是时候学习一下Frida一把梭了(上)
• CNCERT国家工程研究中心
  • CNCERT国家工程研究中心安全资讯周报20230821期
  • 确定漏洞优先级排序的操作指南
  • 我国当前面临的主要网络认知威胁分析
• 安全研究GoSSIP
  • G.O.S.S.I.P 阅读推荐 2023-08-21 UnTrustZone 攻击
• 字节跳动安全中心
  • 正式开源！字节安全团队自研云原生容器沙箱 vArmor
• 关键基础设施安全应急响应中心
  • 关键基础设施安全资讯周报20230821期
  • 共建数据网络安全环境 推动数字经济可持续发展
  • 日本原子能相关机构网络因福岛放射水排放问题遭匿名者黑客攻击
• 极客公园
  • Anthropic 创始人：可以给大模型「照 X 光」，AGI 2-3 年可实现
• 三六零CERT
  • 安全事件周报 2023-08-14 第33周
  • 安全日报（2023.08.21）
• 默安科技
  • 两项成果入选！默安科技云原生安全创新实力再获认可
• LoRexxar自留地
  • Joern与CPG是什么？
• 程序师
  • 5 个实用的 Vue 技巧
  • GPT-4被骗进「盗梦空间」！IBM发现ChatGPT极易受骗，微软发起红队攻击
  • 「Adobe之父」离世，享年82岁！车库起家，首创PostScript，用传奇一生改变世界
  • JavaScript 前景展望：值得期待的那些新功能
  • Adobe联创去世，没他就没有PDF，乔布斯也因他逆风翻盘
  • 把Android手机变成电脑摄像头，开发者倒苦水：40行代码搞定，但需要40个项目文件支持！
• 火绒安全
  • 回顾：后门病毒Gh0st近年变种演化
• 奇安信 CERT
  • 安全热点周报（2023.8.14-2023.8.20）
• 个人博客-蚊子-前端博客
• 嘶吼专业版
  • XCon2023议题：Find Vulnerability From The Fix Of Vulnerability
  • CVE-2023-40477：WinRAR远程代码执行漏洞
  • 为什么速度是事件响应和缓解的关键
• 白宦成
  • 使用飞书消息卡片变量功能，批量数据快速录入消息卡片
  • 使用飞书消息卡片模板，减少代码硬编码 JSON
  • 如何巧用飞书消息卡片输入框实现一套业务交互逻辑
  • 使用 fresh 来提升你的 Golang 开发效率
• CNVD漏洞平台
  • CNVD漏洞周报2023年第33期
  • 上周关注度较高的产品安全漏洞(20230814-20230820)
• 可可托海没有海的RSS
  • 一本典型的中式社科书
• 欧雷流
  • 我做付费内容是在割韭菜？
• 游研社
  • 《黑神话：悟空》，在漩涡的中心
• Markon Review
  • Markon Review Express Weekly #4
• 葉開三言兩語
  • "但愿人长久"叶开新动态
• Bboysoul's Blog
  • 我关注的项目这周更新了什么-20230821
• 木鸟杂记
  • 知新的关键——类比
  • 数据库面试的几个常见误区
  • 生活工程学（一）：多轮次拆解
  • 数据处理的大一统——从 Shell 脚本到 SQL 引擎
  • NUMA-Aware 执行引擎论文解读
• 懒得勤快的博客_互联网分享精神
  • 个人信息管理软件 Essential PIM Pro v11.6.6多语言学习版
• 喵喵博客志
  • MyLife主题介绍篇——文章类型
• Android Performance
  • OS 设计之性能设计
• Surmon.me
  • 当心诱惑本身
  • 牛洞冥思录
• 拾月
  • 我哥
• Zikin 的独立博客
  • 本站不再提供RSS订阅
• Bright LGM's Blog
  • 每日一思
• 7Wate‘s blog
  • 家里的三块地
• 陈少文的网站
  • HuggingFace 的模型和数据操作
• 如有乐享
  • 自己动手”破解”思维导图软件Xmind，支持官网最新版
• Lei Mao's Log Book
  • 小浣熊干脆面水浒英雄卡