Collaboration Achievement: NSFOCUS and China University of Geosciences Article Secures Spotlight in Acclaimed Journal TIFS
janeiro 26, 2024
In a recent achievement, the paper BABD: A Bitcoin Address Behavior Dataset for Pattern Analysis, a collaboration between the NSFOCUS research team and Professor Ren Wei’s team at the Computer School of China University of Geosciences, has been featured in the prestigious journal IEEE Transactions on Information Forensics and Security (TIFS). IEEE Transactions on Information […]
GitLab Arbitrary File Write Vulnerability (CVE-2024-0402) Alert
janeiro 26, 2024
Overview Recently, NSFOCUS CERT detected that GitLab officially released a security announcement and fixed an arbitrary file write vulnerability (CVE-2024-0402) in GitLab Community Edition (CE) and Enterprise Edition (EE). Due to path traversal issues, authenticated attackers can copy files to any location on the GitLab server when creating workspaces. The CVSS score is 9.9, affected […]
NSFOCUS SecLLM: A Paradigm Shift in Network Security
janeiro 25, 2024
SANTA CLARA, Calif., January 25, 2024 – NSFOCUS, a leading innovator in cybersecurity solutions, is proud to announce the release of a cutting-edge Technical White Paper titled “Enhancing Network Security with Security Large Language Model (SecLLM).” This paper unveils NSFOCUS’s latest technology, developed through years of expertise in artificial intelligence and security, designed to revolutionize the landscape […]
Configuring Management IP Address for ADS M Portal
janeiro 25, 2024
After installing the ADS M portal, configuring a management IP address is necessary to deploy the portal on the ADS M and access its webpage. Follow the steps below to set up the management IP for the portal: 1. Access the Backend of the ADS M Portal: Log in to the backend of the ADS […]
Making Secure Boot Even More Secure
janeiro 18, 2024
Secure Boot lays the foundation for the security of the entire computer system. However, in practice, there are potential security risks in secure boot. I. Overview In the previous post “Secure Boot 101: Getting Started with Secure Boot”, we introduced several core concepts of Secure Boot. In reality, users’ computers are often encrypted, and using […]
Key Patch Updates for All Series of Oracle Products in January
janeiro 18, 2024
Overview Recently, NSFOCUS CERT found that Oracle officially released a Critical Patch Update announcement (CPU) in January. A total of 413 vulnerabilities of different levels were fixed this time. This security update involves Oracle WebLogic Server, Oracle MySQL, Oracle Java SE, Oracle Fusion Middleware, Oracle HTTP Server and other commonly used products. Oracle strongly recommends […]
NSFOCUS WAF Disguised Response File Management
janeiro 18, 2024
For a specific protection policy, NSFOCUS WAF can configure five actions. For more details, please view NSFOCUS WAF Protection Actions. When configuring a policy with Action set to Disguise, you need to select an existing disguised response file or upload a new one. Such files, whether existing or newly uploaded, will be displayed on the […]
Confluence Remote Code Execution Vulnerability (CVE-2023-22527) Alert
janeiro 17, 2024
Overview On January 16, NSFOCUS CERT detected that Atlassian officially released a security announcement fixing the remote code execution vulnerability (CVE-2023-22522) in Confluence Data Center and Confluence Server. This vulnerability is caused by template injection. Unauthenticated attackers can inject malicious requests into Confluence pages to implement remote code execution on affected targets. The CVSS score […]
NSFOCUS Reveals New Botnet Family RDDoS
janeiro 16, 2024
1. Introduction of the New Botnet RDDoS In early November 2023, NSFOCUS’s Global Threat Hunting System detected that an unknown elf file was spreading widely, which aroused our vigilance. After further analysis, we confirmed that this batch of elf samples belonged to a new botnet family. NSFOCUS Security Research Labs named the botnet Trojan as […]
GitLab Arbitrary User Password Reset Vulnerability
janeiro 13, 2024
Overview Recently, NSFOCUS CERT detected that GitLab officially released a security announcement and fixed multiple security vulnerabilities in GitLab Community Edition (CE) and Enterprise Edition (EE), including two serious vulnerabilities. Affected users should take protective measures as soon as possible. CVE-2023-7028: In GitLab CE/EE, users can reset their passwords through the auxiliary email address. Due […]
