每日安全动态推送(7-24)

预览

Tencent Security Xuanwu Lab Daily News

• New TE.0 HTTP Request Smuggling Flaw Impacts Google Cloud Websites:
https://gbhackers.com/te-0-http-request-smuggling-flaw/

   ・ 介绍了关于HTTP请求走私漏洞的新发现，该漏洞影响了谷歌云基础设施，涉及负载均衡器和身份验证代理，并强调了不断进行安全研究在云基础设施中的重要性。 – SecTodayBot

• Attackers Abuse Swap File to Steal Credit Cards:
https://sucur.it/4bOkQu5

   ・ 通过分析一个针对Magento电子商务网站的攻击事件，揭示了攻击者如何利用交换文件来保持持久性信用卡窃取器的详细根本原因。  – SecTodayBot

• Type confusion attacks in ProseMirror editors:
https://blog.calif.io/p/type-confusion-attacks-in-prosemirror

   ・ ProseMirror编辑器中的类型混淆漏洞导致的存储型跨站脚本攻击 – SecTodayBot

• JNDI Injection Remote Code Execution via Path Manipulation in MemoryUserDatabaseFactory:
https://srcincite.io/blog/2024/07/21/jndi-injection-rce-via-path-manipulation-in-memoryuserdatabasefactory.html

   ・ 介绍了一种通过JNDI注入实现远程代码执行的新向量 – SecTodayBot

• CyberSecurityUP/Awesome-Red-Team-Operations:
https://github.com/CyberSecurityUP/Awesome-Red-Team-Operations

   ・ 一系列在GitHub上可用的网络安全工具和脚本，涵盖了涉及网络安全技术的多种工具和脚本，包括模糊测试、已知软件的利用等。 – SecTodayBot

• Technical Details: Falcon Update for Windows Hosts | CrowdStrike:
https://www.crowdstrike.com/blog/technical-details-on-todays-outage

   ・ CrowdStrike的Falcon平台针对Windows系统的传感器配置更新问题，导致系统崩溃的技术细节及解决方案。 – SecTodayBot

• Dock Tile Plugins Could Be Used to Escalate Privileges:
https://blog.kandji.io/dock-tile-plugins-persistence

   ・ macOS的Dock Tile插件存在提权漏洞，可以被利用进行提权攻击。 – SecTodayBot

• Introduction:
https://github.com/m0n0ph1/Process-Hollowing

   ・ 介绍了一种名为'进程空壳化'的技术，用于隐藏进程的存在， – SecTodayBot

• Researchers find ‘Port Shadow’ flaws in VPN platforms:
https://www.scmagazine.com/news/researchers-find-port-shadow-flaws-in-vpn-platforms

   ・ VPN平台存在严重的安全漏洞，研究团队发现并详细分析了名为'Port Shadow'的漏洞，该漏洞可能导致中间人攻击，窃听和解密VPN流量 – SecTodayBot

* 查看或搜索历史推送内容请访问：
https://sec.today

* 新浪微博账号：腾讯玄武实验室
https://weibo.com/xuanwulab