九维我操你爹
#security CVE-2025-68926
一个 CVSS 9.8 的洞是因为什么呢？一个库硬编码了默认验证令牌。
https://github.com/rustfs/rustfs/security/advisories/GHSA-h956-rh7x-ppgj
security
#security
OpenSSH 发现 RCE。影响范围 8.5p1 <= OpenSSH < 9.8p1 。
现代amd64 ASLR保护下也不至于一下子就boom，可能需要一个星期左右。
https://www.qualys.com/2024/07/01/cve-2024-6387/regresshion.txt
security
#security
Google Pixel 内置截图编辑器存在严重的隐私泄露bug。
当编辑截图时，编辑器仅仅覆盖原文件相应的区域而不是全部重写，另外由于裁剪过的图片一般小于原图片，于是原图片的部分数据还存留在文件里。

1. https://vxtwitter.com/itssimontime/status/1636857478263750656
2. @Henryzhao
security
https://twitter.com/Quad9DNS/status/1572684577382211584

https://vxtwitter.com/Quad9DNS/status/1572684577382211584
vxTwitter
Quad9 (@Quad9DNS)
Quad9 (@Quad9DNS)
Quad9 Joins the Cyber Threat Alliance (@CyberAlliance) as Leading #DNS Service to Improve the #Cybersecurity of Our Global Digital Ecosystem
https://www.quad9.net/news/press/quad9-joins-the-cyber-threat-alliance-as-leading-dns-service-to-improve-the-cybersecurity…
#TIL #security
https://github.com/odacavo/enhanced-iframe-protection
GitHub
GitHub - MalwareCube/enhanced-iframe-protection: A lightweight extension to automatically detect and provide verbose warnings for…
GitHub - MalwareCube/enhanced-iframe-protection: A lightweight extension to automatically detect and provide verbose warnings for…
A lightweight extension to automatically detect and provide verbose warnings for embedded iframe elements in order to protect against Browser-In-The-Browser (BITB) attacks. - MalwareCube/enhanced-i...
TIL security
https://twitter.com/Quad9DNS/status/1392979113443479554?s=09
Twitter
Quad9
Quad9
.@Quad9DNS and @GslGlobal's partnership will increase Quad9's international capacity by leveraging GSL’s expansive interconnected backbone network and server resources. Read more about it here: quad9.net/news/press/aus… #privacy #security #DNS #securedlocally…
好棒，继网站可以用上免费的 TLS 证书以后，开发者也能用上免费的数字签名服务了~

https://twitter.com/linuxfoundation/status/1369335086500446208?s=09
Twitter
The Linux Foundation
NEWS: New @projectsigstore offers free signing service to developers to confirm origin and authenticity of software. Effort led by @redhat @google and Purdue https://t.co/uoZDiELlXq #oss #security
https://twitter.com/Gartner_IT/status/1320738486698315776?s=09
Twitter
Gartner for IT
Gartner for IT
#Security leaders: Here are 3 technologies from the Gartner Hype Cycle for #Cloud Security, 2020, to action right now 💡 Read on: https://t.co/HdKANOB8TI #GartnerSEC
 
 
Back to Top