52 matches found
Preparation-Guide-to-OSCP
OSCPガイド このガイドでは、OSCPの全トピックに加え、その他の情報セキュリティの知識についても詳細にカバーします。各セクションにはチートシートも用意するので、トピックやツールを理解したらすぐにコマンドを使用できるようにします。しかし、優れたペネトレーションテスターになるためには、物事がどのように動作するかを知るべきだと思います。ペネトレーションテスティングは非常に広い分野です。例えば、Webアプリケーションのペネトレーションテスティングに興味があるなら、アプリケーションがデータベースとどのようにやり取りするのか、データベースの基本、Webアプリケーション言語について知るべきです。...
security-interview-questions
Sources QUIZ: https://quizlet.com/231268221/general-information-security-questions-flash-cards/ SANS Cheat Sheets: https://www.sans.org/blog/the-ultimate-list-of-sans-cheat-sheets/ Offensive Security OSCP: https://411hall.github.io/OSCP-Preparation/...
Incident response for AI: Same fire, different fuel
In this article 1. The fundamentals still hold 2. Where AI changes the equation 3. Closing the gaps in telemetry, tooling, and response 4. The human dimension 5. Looking ahead When a traditional security incident hits, responders replay what happened. They trace a known code path, find the defect...
Applying security fundamentals to AI: Practical advice for CISOs
What to know about the era of AI The first thing to know is that AI isn’t magic The best way to think about how to effectively use and secure a modern AI system is to imagine it like a very new, very junior person. It’s very smart and eager to help but can also be extremely unintelligent. Like a...
A Bootiful Podcast: Dan Vega on the fundamentals of software engineering
Hi, Spring fans! I'm so excited to chat with fellow Spring developer advocate Dan Vega about his new book, Fundamentals of Software Engineering...
offsec
Offensive Security - Parcours en sécurité offensive !Difficu...
EUVD-2025-14468
Malicious code in bioql PyPI...
CVE-2025-29969
Time-of-check time-of-use toctou race condition in Windows Fundamentals allows an authorized attacker to execute code over a network...
CVE-2025-29969
Time-of-check time-of-use toctou race condition in Windows Fundamentals allows an authorized attacker to execute code over a network...
CVE-2025-29969
Time-of-check time-of-use toctou race condition in Windows Fundamentals allows an authorized attacker to execute code over a network...
MS-EVEN RPC Remote Code Execution Vulnerability
Time-of-check time-of-use toctou race condition in Windows Fundamentals allows an authorized attacker to execute code over a network...
CVE-2025-29969: Time-of-check Time-of-use (TOCTOU) Race Condition
Time-of-check time-of-use toctou race condition in Windows Fundamentals allows an authorized attacker to execute code over a network...
PT-2025-20972
Name of the Vulnerable Software and Affected Versions Microsoft Windows versions 2008 SP2 through 2025 Microsoft Windows 10 versions 1607 through 22H2 Microsoft Windows 11 versions 22H2 through 24H2 Microsoft Azure Site Recovery agent affected versions not specified Trend Micro Apex One affected...
Introducing the Rapid7 Command Platform
Integrated Security Operations for the Next-Generation Attack Surface As cybercrime and attack surfaces have sprawled, Rapid7 has been able to grow with our customers because we are relentlessly focused on relevance. The way we see it, relevance doesn’t mean aligning to market definitions of...
Mallox Ransomware A Resurgent Threat Exploiting MS-SQL Flaws
Summary: Mallox is a resilient Ransomware-as-a-Service RaaS threat, utilizing tactics like exploiting MS-SQL vulnerabilities and employing brute force attacks. Operating with a prolonged presence, Malloxs recent variant, "Mallox.Resurrection," exhibits consistent functionalities, emphasizing the...
FREE Cybersecurity Education Courses
Navigating the nuanced realm of digital defense doesn't need to feel like a herculean task. This section aims to shed light on the intricacies of digital defense and aid you in leveraging freely available Cybersecurity Learning Programs. Deciphering Digital Defense Digital defense, also referred ...
Not All Sandboxes Are for Children: How to Secure Your SaaS Sandbox
When creating a Sandbox, the mindset tends to be that the Sandbox is considered a place to play around, test things, and there will be no effect on the production or operational system. Therefore, people don't actively think they need to worry about its security. This mindset is not only wrong, b...
Global Cyberattacks Tied to the Russian Invasion of Ukraine
Cyber-risk management and security fundamentals are the key to cyber-resilience. 5 best practices to manage your cyber risk...