Discover how a subdomain takeover on saostatic.uber.com led to a successful SSO (Single Sign-On) bypass attack against Uber's authentication system. Learn about

Proofpoint research group warns of 8 Chrome extensions being hijacked by unknown attackers to spread malicious ads and steal payment credentials. Learn about th

This article discusses the 'GuessMe' virus that disguises as popular guessing games in app markets to trick users into installing malicious apps. Learn about it

介绍Netman实验室研发的基于机器学习的KPI自动化异常检测系统Opprentice，通过监督式分类问题解决异常检测算法选择和参数调整难题。

了解如何在Java代码中避免SQL注入，学习PreparedStatement的安全用法。加入我们交流更多网络安全知识。

了解如何通过IP策略和第三方软件有效阻止特定IP地址访问服务器共享文件。本文介绍详细步骤，确保网络安全。

文章探讨了美国国家安全局是否提前知晓WPA2协议的KRACK漏洞，以及相关技术细节和专家观点。

本文详细介绍了Tiny Shell后门的使用与分析，包括正向连接模式和反向连接模式。该工具体积小、功能强大且通信加密，适合网络安全专业人士研究学习。

This article provides a detailed analysis of Vuzzer, an advanced fuzzing tool developed by Vrije Universiteit Amsterdam. It covers the tool's unique features, s

This article provides a comprehensive overview of side channel attacks targeting Intel's SGX technology. It discusses the threat models and various attack surfa

了解2017年黑帽大会上介绍的新型Process Doppelgänging攻击技术，以及360安全卫士如何通过多维度拦截实现完美防御。

A new concept APP developed by Princeton researchers can track user locations without accessing GPS permissions. Utilizing sensors like gyroscopes and WiFi conn