52 matches found
Preparation-Guide-to-OSCP
OSCP 가이드 저는 이 가이드를 작성하여 OSCP의 모든 주제와 기타 정보보안 지식을 자세히 다루고, 각 섹션마다 치트 시트를 제공하여 주제/도구를 이해한 후 바로 명령어를 사용할 수 있도록 할 것입니다. 하지만 좋은 펜테스터가 되기 위해서는 어떻게 작동하는지 알아야 한다고 생각합니다. 펜테스팅은 매우 광범위한 분야입니다. 예를 들어 웹앱 펜테스팅에 관심이 있다면 애플리케이션이 데이터베이스와 어떻게 상호작용하는지, 데이터베이스의 기본, 웹앱 언어를 알아야 합니다. 마찬가지로 시스템/플랫폼OS 펜테스터가 되고 싶다면 OS 설정...
security-interview-questions
情報源 QUIZ: https://quizlet.com/231268221/general-information-security-questions-flash-cards/ SANSチートシート: https://www.sans.org/blog/the-ultimate-list-of-sans-cheat-sheets/ Offensive Security（OSCP）: https://411hall.github.io/OSCP-Preparation/...
Incident response for AI: Same fire, different fuel
In this article 1. The fundamentals still hold 2. Where AI changes the equation 3. Closing the gaps in telemetry, tooling, and response 4. The human dimension 5. Looking ahead When a traditional security incident hits, responders replay what happened. They trace a known code path, find the defect...
Applying security fundamentals to AI: Practical advice for CISOs
What to know about the era of AI The first thing to know is that AI isn’t magic The best way to think about how to effectively use and secure a modern AI system is to imagine it like a very new, very junior person. It’s very smart and eager to help but can also be extremely unintelligent. Like a...
A Bootiful Podcast: Dan Vega on the fundamentals of software engineering
Hi, Spring fans! I'm so excited to chat with fellow Spring developer advocate Dan Vega about his new book, Fundamentals of Software Engineering...
offsec
Offensive Security - Parcours en sécurité offensive !Difficu...
EUVD-2025-14468
Malicious code in bioql PyPI...
CVE-2025-29969
Time-of-check time-of-use toctou race condition in Windows Fundamentals allows an authorized attacker to execute code over a network...
CVE-2025-29969
Time-of-check time-of-use toctou race condition in Windows Fundamentals allows an authorized attacker to execute code over a network...
CVE-2025-29969
Time-of-check time-of-use toctou race condition in Windows Fundamentals allows an authorized attacker to execute code over a network...
MS-EVEN RPC Remote Code Execution Vulnerability
Time-of-check time-of-use toctou race condition in Windows Fundamentals allows an authorized attacker to execute code over a network...
CVE-2025-29969: Time-of-check Time-of-use (TOCTOU) Race Condition
Time-of-check time-of-use toctou race condition in Windows Fundamentals allows an authorized attacker to execute code over a network...
PT-2025-20972
Name of the Vulnerable Software and Affected Versions Microsoft Windows versions 2008 SP2 through 2025 Microsoft Windows 10 versions 1607 through 22H2 Microsoft Windows 11 versions 22H2 through 24H2 Microsoft Azure Site Recovery agent affected versions not specified Trend Micro Apex One affected...
Introducing the Rapid7 Command Platform
Integrated Security Operations for the Next-Generation Attack Surface As cybercrime and attack surfaces have sprawled, Rapid7 has been able to grow with our customers because we are relentlessly focused on relevance. The way we see it, relevance doesn’t mean aligning to market definitions of...
Mallox Ransomware A Resurgent Threat Exploiting MS-SQL Flaws
Summary: Mallox is a resilient Ransomware-as-a-Service RaaS threat, utilizing tactics like exploiting MS-SQL vulnerabilities and employing brute force attacks. Operating with a prolonged presence, Malloxs recent variant, "Mallox.Resurrection," exhibits consistent functionalities, emphasizing the...
FREE Cybersecurity Education Courses
Navigating the nuanced realm of digital defense doesn't need to feel like a herculean task. This section aims to shed light on the intricacies of digital defense and aid you in leveraging freely available Cybersecurity Learning Programs. Deciphering Digital Defense Digital defense, also referred ...
Not All Sandboxes Are for Children: How to Secure Your SaaS Sandbox
When creating a Sandbox, the mindset tends to be that the Sandbox is considered a place to play around, test things, and there will be no effect on the production or operational system. Therefore, people don't actively think they need to worry about its security. This mindset is not only wrong, b...
Global Cyberattacks Tied to the Russian Invasion of Ukraine
Cyber-risk management and security fundamentals are the key to cyber-resilience. 5 best practices to manage your cyber risk...