iptables is a classic firewall tool developed for the Linux system based on the netfilter kernel framework, focusing on IPv4 packet filtering and NAT rule configuration. As a built-in component of the Linux kernel, it features efficiency and flexibility, supporting core capabilities such as state detection and fine-grained traffic control. It is the most commonly … Read more
“Can the system go live right after installation?”“Is it secure just because the firewall is enabled?” Wrong! The first thing a security evaluator checks is your Linux baseline! In a certain government cloud project, due to the lack of configuration for password complexity and login failure lockout, today, we have compiled a “Level 3 Linux … Read more
Original link: http://www.hyspot.com.cn/article/view/1166 <SSH Authentication Failure Log> With the widespread use of Linux servers, SSH bruteforce attacks have become a common threat that operations and maintenance teams must face. Attackers attempt to illegally access servers by brute-forcing combinations of usernames and passwords. Once successful, all data and functionalities of the server are at serious risk. … Read more
Recently, the Zigbee protocol stack based on TaiLing Microelectronics’ TLSR9 series SoC officially received the compatibility platform certification issued by the CSA Alliance for Zigbee PRO R23 + Zigbee Direct, making it the first chip company in China to obtain this certification. It is worth mentioning that the protocol stack used for this certification was … Read more
1.“Air Key Theft”: Real Scenarios of Replay Attacks on Smart Locks A user installed aBLE (Bluetooth) smart lock at home, which supports unlocking via a mobile Bluetooth key. However, due to a replay attack vulnerability, it faced an intrusion without physical contact: Signal Sniffing: The attacker carries a low-cost Bluetooth sniffing device (such as theNordic … Read more
1.Invisible Eavesdropping Within 10 Meters: Real Scenarios of Bluetooth Headset Vulnerabilities A user regularly uses a well-known brand of true wireless Bluetooth headset (equipped with the Airoha chipset) for commuting to listen to music and making calls, unaware that the device has a critical security vulnerability. An attacker exploited the systemic security flaw in the … Read more
The Rust Marvel! This Agent Provides DevOps with Unmatched Security Brothers, have you ever had this experience: At 2 AM, the online service crashes. You rub your eyes while typing commands in the terminal,<span>kubectl logs</span>, <span>docker ps</span>, <span>tail -f /var/log/app.log</span>… frantically troubleshooting, thinking to yourself, “If only there were an AI that could help me … Read more
To sell wireless or IoT devices in the European Union, compliance with the Radio Equipment Directive (RED) is mandatory. RED not only focuses on radio frequency performance but also requires devices to have adequate protection measures in terms of network security, user privacy, and software updates. Overview of RED Certification • Scope: Wireless devices in … Read more
Impacted Component Dahua ICC Smart IoT Comprehensive Management Platform Vulnerability Description The Dahua ICC Smart IoT Comprehensive Management Platform download has a file reading vulnerability, allowing attackers to read sensitive configuration file information. Recommended Fix Install Changting Leichi interception and upgrade to the latest version promptly. Starry巡平台 Platform Usage Instructions: https://ruisika.github.io/xunxing/intro/ Join the community to … Read more
Automated irrigation for the garden: droughts kill the dry, floods kill the wet, and weeds thrive.