5分钟
云安全
Real-Time Risk Mitigation in Google Cloud Platform
With Google Cloud Next happening this week, there’s been some recent water cooler talk where discussions about what makes Google Cloud Platform unique when it comes to security.
4分钟
新闻
状态-Sponsored Threat Actors Target Security 研究ers
周一, Google’s Threat Analysis Group published a blog on a widespread social engineering campaign that targeted security researchers working on vulnerability research 和 development.
5分钟
Cloud Infrastructure
How to Set Up InsightVM in Your Google Cloud Environment
在这篇博文中, we’ll go over how to set up our vulnerability scanner, InsightVM in your Google Cloud 和 how to tweak it for your environment.
2分钟
Metasploit
Metasploit, Google Summer of Code, 和 You!
Spend the summer with Metasploit
I'm proud to announce that the Metasploit Project has been accepted as a mentor
organization in the Google Summer of Code! For those unfamiliar with the
program, their about page [http://summerofcode.虽然.Com/about/]总结了一下
好:
> Google Summer of Code is a global program focused on introducing students to
open source software development. 学生s work on a 3 month programming project
with an open source organization during their break from univer
2分钟
安卓
R7-2015-02: Google Play Store X-Frame-Options (XFO) Gaps Enable 安卓 Remote Code Execution (RCE)
脆弱性 Summary
Due to a lack of complete coverage for X-Frame-Options
[http://developer.mozilla.org/en-US/docs/Web/HTTP/X-Frame-Options] (XFO)
support on Google's Play Store [http://play.谷歌.com/] web application
domain, a malicious user can leverage either a Cross-Site Scripting (XSS)
vulnerability in a particular area of the Google Play Store web application, or
a Universal XSS (UXSS) targeting affected browsers, to remotely install 和
launch the main intent of an arbitrary Play S
3分钟
Cloud Infrastructure
Securing the Shadow IT: How to Enable Secure Cloud 服务 for Your Business
You may fear that cloud services jeopardize your organization's security. 然而,
your business relies on cloud services to increase its productivity. 介绍
a policy to forbid these cloud services may not be a viable option. 更好的
option is to get visibility into your shadow IT 和 to enable your business to
use it securely to increase productivity 和 keep up with the market.
Step one: Find out which cloud services your organization is using
First, you'll want to figure out what is act