3月4日安全热点 - follow.user窃取信息并将自己的广告添加到iOS应用中的任何网站

资讯类

follow.user跟踪用户的网站活动,窃取他们的数据和凭据,并将自己的广告添加到iOS应用中的任何网站

https://krausefx.com//blog/follow-user

 

如何安全地存储密码货币

https://hackernoon.com/how-to-store-cryptocurrencies-safely-256ca587b7ab

 

Java EE已被重命名为Jakarta EE

https://news.slashdot.org/story/18/03/04/035236/java-ee-has-been-renamed-jakarta-ee?utm_source=rss1.0mainlinkanon&utm_medium=feed

 

百度文库被发现上传了日企的内部机密文件

https://www.solidot.org/story?sid=55661

 

Equifax证书解除Windows 10操作系统安全性

https://leeneubecker.com/equifax-equimelt-vulnerability/

 

技术类

Apple macOS Sierra 10.12.1 IOFireWireFamily FireWire端口拒绝服务

https://cxsecurity.com/issue/WLB-2018030033

 

XSStrike – 先进的XSS模糊器和开发套件

https://www.darknet.org.uk/2018/03/xsstrike-advanced-xss-fuzzer-exploitation-suite/

 

 

Apple macOS High Sierra 10.13 ctl_ctloutput-leak信息泄漏

(完)