Overview Recently, NSFOCUS CERT detected that a researcher disclosed an EXP that exists in the Linux kernel privilege escalation vulnerability (CVE-2022-2588) on the Internet. Due to improper operation of the route4_filter linked list, there is a use-after-free vulnerability in the route4_change function of the net/schedule/cls_route.c filter. By exploiting this vulnerability,...
Year: 2022
APT Group Evilnum Launched a New Round of Cyberattacks on Online Transactions
Overview NSFOCUS Security Labs detected a string of related phishing attacks recently. The analysis confirmed that these activities were staged by the APT group Evilnum and they were a continuation of the group's recent operation DarkCasino. This round of cyberattacks occurred in late July and lasted until early August. Evilnum...
Description of the Server Name Indication Feature on NSFOCUS WAF
The early SSLv2 was designed based on the classic public key infrastructure. By default, a server or an IP address could provide only one service so that the server could know which certificate to serve during the SSL handshake. The widespread use of virtual hosts leads to the situation where...
Mind the Sec 2022
The 8th edition of Mind The Sec was held from September 20 to 22, 2022 at the Transamerica Expo, in São Paulo. it is one of the largest and most qualified corporate events of information security and cyber security in Latin America. Mind The Sec presents three tracks of content,...
Security Knowledge Graph | Application in Integration of Functional Safety with Information Security in Industrial Control Systems
The security knowledge graph, a knowledge graph specific to the security domain, is the key to realizing cognitive intelligence in cyber security, and it also lays an indispensable technological foundation for dealing with advanced, continuous and complex threats and risks in cyberspace. NSFOCUS published a series of articles about the...
MyNOG-9 2022
MyNOG-9 was held in Kuala Lumpur, Indonesia on September 19, 2022. MyNOG, the Malaysia Network Operators Group, provided a good platform for network operators and experts in other industries who came together to share knowledge, learn about up-to-date technologies, and promote communication and collaboration. Link to the event: https://www.mynog.org/
