这里记录每周值得分享的科技内容，周五发布。 本杂志开源（GitHub: ruanyf/weekly），欢迎提交 issue，投稿或推荐科技内容。 周刊讨论区的帖子《谁在招人？》，提供大量程序员就业信息，欢迎访问或发布工作/实习岗位。 封面图 “武汉超算中心”使用集装箱搭建，是国内最大的集装箱超算中心，8月15日正式接入“中国算力网”。（via） 本周话题：如何防止帐号被黑 上周有一起安全事件。两家著名的美国互联网公司——Twillo 和 Cloudflare——被攻击了，前者还被攻破了。 这两家都不是普…

Contribute to wavestone-cdt/EDRSandblast development by creating an account on GitHub.

Open Source Vulnerability Management Platform. Contribute to infobyte/faraday development by creating an account on GitHub.

RedGuard is a C2 front flow control tool,Can avoid Blue Teams,AVs,EDRs check. - wikiZ/RedGuard

Real-time, container-based file scanning at enterprise scale - target/strelka

Plex is an American streaming media service and a client–server media player platform.

A Poc on blocking Procmon from monitoring network events - NUL0x4C/EtwSessionHijacking

As experts in firmware security, the Binarly team is frequently asked why endpoint solutions can’t detect threats originating below the operating system such as firmware implant payloads. Unfortunately, the problem requires a more complex approach and the…

如何从从扫描器萌新，成长为入侵检测的“青年”油条？

Security ML models encoded as Yara rules. Contribute to sophos/yaraml_rules development by creating an account on GitHub.

全文约1万字 阅读约30分钟这是一篇关于安全框架的集大成之作。结合了9种具体框架进行了综述：ISO 27