⚡ Weekly Recap: Chinese Spy Proxy, AI Agents Go Off-Task, Router Backdoors and More
The boring parts caused most of the trouble. A router shipped ready to listen. A fake check turned the user into the…
Practical guides on speed, connectivity, privacy and networking.
The boring parts caused most of the trouble. A router shipped ready to listen. A fake check turned the user into the…
Threat actors with ties to the Democratic People's Republic of Korea (aka DPRK or North Korea) have been observed seeking job opportunities…
从零基础小白,到打 CTF、做 AI 安全、进大厂实习、正式入职——这是我从 2025 年 7 月到 2026 年 7 月,学网络安全整整一年的真实记录。
本文详细记录了对Hack The Box靶机Blackfield的完整渗透过程。攻击者从基础的Nmap端口扫描起步,通过SMB共享枚举提取潜在用户名,结合AS-REP Roasting攻破未启用预认证的support账户。借助BloodHound分析域内关系,利用ForceChangePassword权限接管audit2020账户,进而访问到存有LSASS进程内存转储的forensic共享。通过P
Security experts have been sounding the alarm for years about the risks of using generic TV boxes that promise unlimited content streaming…
Cybersecurity researchers have shed light on a previously undocumented Go-based loader framework called HollowFrame and a Rust-based malware family tracked as Matryoshka.…
A Chinese-speaking threat actor is suspected to be behind a fresh wave of cyber attacks targeting government organizations mainly located in Central…
An evolving how-to guide for securing a Linux server that, hopefully, also teaches you a little about security and why it matters.…
Introduction In today’s accelerated digital transformation era, more and more entrepreneurs and businesses are expanding their operations to overseas markets. However, successful…