智能运维
-
How to Fix CVE-2021-39144- A Critical RCE Vulnerability in VMware Cloud Foundation
VMWare published an advisory on 25th Oct 2022 in which it disclosed two vulnerabilities in VMware Cloud Foundation. The flaw tracked as CVE-2022-31678 is rated Critical with a CVSS score of…
-
使用 DEVOPS CLI 创建服务连接
向我的技术倡导者和专家同事致以问候。 在此会话中，我将演示如何使用 DevOps CLI 创建服务连接。 使用案例：- 创建DevOps服务连接，提示PAT（个人访问令牌） 创建DevOps服务连接，无需提示PAT（个人访问令牌） 自…
-
使用 Jolie 和 Docker 构建（开发）容器化微服务的 3 个简单步骤
1. 使用 npm 创建项目 为遵循本教程创建一个新目录（例如，）并输入它。tutorial 壳1 mkdir tutorial 2 cd tutorial 现在从终端在该目录中运行以下命令。 壳1 npm init jolie 系统将询问您随之而来的…
-
Patch Your Apple Devices To Fix Two New Out-of-Bound Vulnerabilities in iOS, iPadOS, and macOS
On Aug 17th, tech giant Apple rolled out security updates for their iOS, iPadOS, and macOS platforms to fix two new out-of-bound vulnerabilities in iOS, iPadOS, and macOS. Apple didn&#…
-
什么是网络安全态势感知？
什么是网络安全态势感知？ 态势感知（SA，Situational Awareness or Situation Awareness）是对一定时间和空间内的环境元素进行感知，并对这些元素的含义进行理解，最终预测这些元素在未来的发展状态。当前，大家提…
-
How To Fix CVE-2022-42948- A Critical RCE Vulnerability in Cobalt Strike
HelpSystems published its news on an out-of-band Cobalt Strike update to address a critical RCE vulnerability in Cobalt Strike. The CVE-2022-42948 is a remote code vulnerability that hackers can expl…
-
5 Best C2 Framework for Red Teaming
The red team is regarded as the aggressive part of the security apparatus. Red teams adopt the attacker’s mindset; they simulate real-world assaults and emulate the strategies and procedures of…
-
支持JDK19虚拟线程的web框架，之五（终篇）：兴风作浪的ThreadLocal
关于ThreadLocal 既然提到了线程，自然绕不开ThreadLocal类，它提供了线程本地变量，此变量和一般的变量不同。通过get & set 方法，每个线程可以获取到自己独立的变量。这个变量实例通常是私有且静态的，可以存…
-
How to be Protected From Caffeine, A Shared Phishing-as-a-Service Platform (PhaaS)
Phishing as a Service (PaaS) is when Cyber criminals become service providers instead of executing cyber-attacks on their own, they provide phishing services for a fee. A new and unique Shared Phishi…
-
How to Fix CVE-2022-3602 and CVE-2022-3786- The Two New Buffer Overflow Vulnerabilities in OpenSSL
On 1st November, OpenSSL published an advisory that talks about two high-severity vulnerabilities in its software library. The vulnerabilities in OpenSSL allow attackers to carry out buffer…
