According to an industry report, over 75% of cybersecurity attacks target the web application layer. Additionally, statistics indicate that more than two-thirds of websites lack adequate security measures. With digital transformation, organizations are moving more business operations to the Internet. New-generation applications are accessed through various channels like the Web and APIs, leading to increased […]

Secure Boot aims to add an additional layer of protection to the boot process, laying the foundation for overall computer security. Secure Boot technology, much like a vigilant guardian, ensures that only digitally signed and trusted components are allowed to initiate the system boot process, fortifying the system against unauthorized and potentially malicious software. As […]

SANTA CLARA, Calif., Dec 27, 2023 – NSFOCUS, a global provider of intelligent hybrid security solutions, today announced that NSFOCUS is included in the Security Service Edge Solutions Landscape for Q4 2023 recently published by Forrester, an internationally authoritative research and consulting firm. Forrester believes that security service edge (SSE) solutions can provide Zero Trust […]

Overview Recently, NSFOCUS CERT detected that OpenSSH released a security update and fixed a command injection vulnerability caused by malicious shell characters (CVE-2023-51385), with a CVSS score of 9.8; Since there is no security filtering of username and hostname input represented by %h,%u in OpenSSH’s ProxyCommand command, command injection may occur if the username or […]

Overview Recently, NSFOCUS CERT detected that Apache officially released a security announcement and fixed two high-risk vulnerabilities in Apache Ofbiz. CVE-2023-50968: Due to problems in Apache Software Foundation, unauthorized attackers can read files and carry out SSRF attacks when operating uri calls; CVE-2023-51467: Due to a privilege verification logic error in Apache Ofbiz, an attacker […]

SANTA CLARA, Calif., Dec 21, 2023 – NSFOCUS proudly announces its recognition in Frost & Sullivan’s latest report Insights for CISOs: Modernizing Security Operations Centers with Security Orchestration and Automated Response as a representative vendor. This insightful report delves into the growth environment, enterprise application value, SOAR solution benefits, the vendor ecosystem, and growth opportunities […]

I. Background of xorbot In November 2023, NSFOCUS Global Threat Hunting System detected that a type of elf file was being widely distributed and accompanied by a large amount of suspected encrypted outbound communication traffic. However, the detection rate of mainstream antivirus engines on this file was close to zero, which aroused our curiosity. After further […]

Cybersecurity Symposium 2023, Dec 14, Convention Hall @Hong Kong Convention and Exhibition Centre, Hong Kong The Cybersecurity Symposium is co-organised by the Office of the Government Chief Information Officer (OGCIO) and Hong Kong Internet Registration Corporation Limited (HKIRC). It aims to unite quangos, enterprises and other local organizations in Hong Kong to address the cybersecurity challenges of the digital […]

Introduction On November 26, 2023,  the Guidelines for secure AI system development was jointly released by the UK National Cyber Security Centre (NCSC), the US Cybersecurity and Infrastructure Security Agency (CISA), in collaboration with the US National Security Agency (NSA), the Federal Bureau of Investigation (FBI), and the cybersecurity and information security departments of over […]

What is Zero Trust Security? Zero-trust security is not a specific technology or product, but a security model based on the concept that “All entities are untrusted”. Forrester defines zero trust as “Zero Trust is an information security model that denies access to applications and data by default. Threat prevention is achieved by only granting […]