从某种意义来看，ATT\x26amp;CK框架包含了太多的安全场景，从“元宇宙”的现实表达和普遍包容性这个点上来看，ATT\x26amp;CK可能是安全领域的“元宇宙”层面的存在。

Microsoft took action against the ZLoader trojan by working with telecommunications providers around the world to disrupt key ZLoader infrastructure. In this blog, we detail the various characteristics for identifying ZLoader activity, including its associated…

FrostByte is a POC project that combines different defense evasion techniques to build better redteam payloads - pwn1sher/frostbyte

A recent(ish) rant about mentoring on Twitter led to an awesome thread of Cyber Threat Intelligence (CTI) resources and reading plans. That…

A Year in Review of 0-days Used In-the-Wild in 2021 Posted by Maddie Stone, Google Project Zero ...

A fully automated, reliable, and accurate scanner for finding Spring4Shell and Spring Cloud RCE vulnerabilities - fullhunt/spring4shell-scan

Details of the NIST SP 800-53 Rev. 5 Regulatory Compliance built-in initiative. Each control is mapped to one or more Azure Policy definitions that assist with assessment.