绿盟科技技术博客

你的云安全吗？

2016-12-12江国龙云安全, 云环境防护, 创新中心, 弹性安全云, 扫描服务, 绿盟科技, 网关服务, 软件定义安全

近年来，随着虚拟化技术的不断发展与完善，云计算得到了广泛的认可与接受，许多组织已经或者计划进行云平台建设。因此，一大批云计算服务提供商也涌现了出来，包括知名的Amazon AWS、Google GCE以及Microsoft Azure；同时，国内也出现了像阿里云、腾讯云、移动云、云杉网络等一批优秀的云服务提供商。

NSFOCUS 2016 Q3 Report on DDoS Situation and Trends

2016-12-09蒋红梅Attack Duration, Attack Type Distribution, DDoS Attack Trend, EnglishVersion, NSFOCUS 2016 Q3 Report, NSFOCUS 2016 Q3 Report on DDoS Situation and Trends, Peak Traffic of DDoS Attacks, Reflection Attacks

In Q3, the global distributed denial-of-service (DDoS) attacks increased by 40%.

In Q3, a total of 71,416 DDoS attacks were detected, up 40% from Q2 (50,988).

2016 NSFOCUS Security Report Regarding Network Video Surveillance Systems

2016-12-09蒋红梅2016-nsfocus-security-report-regarding-network-video-surveillance-systems, DDoS attack events, Distribution of NVSSs, EnglishVersion, High-Risk Vulnerabilities

With the robust development of the Internet of Things (IoT), more and more security issues are found with IoT devices. These imminent threats, especially those from network video surveillance systems (NVSSs) that account for a large majority of IoT devices, have drawn attention from security professionals from home and abroad. (In this paper, network video monitors (NVMs), web cameras, and digital video recorders (DVRs) are all referred to as NVSSs.)

【威胁通告】Firefox跨域设置cookie漏洞

2016-12-09绿盟科技cookie漏洞, Firefox 漏洞, Firefox跨域设置cookie漏洞, 漏洞验证, 绿盟科技

2016年12月6日，insert-script.blogspot.gr网站发布了一条关于Firefox跨域设置cookie的消息，该漏洞的成因是火狐浏览器允许元标签对浏览器cookie进行设置。

Firefox Remote Code Execution Vulnerability Technical Analysis and Solution

2016-12-08郝秀文EnglishVersion, Firefox Remote Code Execution Vulnerability, Unaffected Versions, Vendor Solutions, Vulnerability Analysis

On November 30, 2016, Mozilla Firefox released an emergency update on its official website to fix a vulnerability assigned CVE-2016-9079.

Nginx Local Privilege Escalation Vulnerability Technical Analysis and Solution

2016-12-08蒋红梅EnglishVersion, INC, Nginx, NSFOCUS, Vendor Solutions, Vulnerability Analysis, Vulnerability Verification

On November 15, 2016 (local time), legalhackers.com released an advisory about a privilege escalation vulnerability, assigned CVE-2016-1247, found in the Nginx server. Nginx web server packaging on Debian-based distributions, such as Debian or Ubuntu, was found to allow creating log directories with insecure permissions.