360CERT - 每日安全简报 (2020-03-05)

<<Previous Next>>

漏洞 Vulnerability

cve-2020-6418 Chrome远程代码执行0day 演示

https://twitter.com/james0x40/status/1234478389651759104

安全资讯 Security Information

委内瑞拉又停电断网了，35％的电信基础设施宕机

https://netblocks.org/reports/venezuela-suffers-major-power-outage-knocking-out-internet-connectivity-W80JljBK

俄罗斯特工人肉入侵海底电缆

https://www.thetimes.co.uk/article/russian-agents-plunge-to-new-ocean-depths-in-ireland-to-crack-transatlantic-cables-fnqsmgncz

毕威马给澳大利亚政府审计安全，澳政府方只满足基本的安全，澳政府安全级别较低。

https://www.abc.net.au/news/2020-02-13/leaked-report-describes-parliament-cyber-security-low-maturity/11953860

安全报告 Security Report

普华永道2019年网络威胁分析报告

https://www.pwc.co.uk/issues/cyber-security-data-privacy/insights/cyber-threats-2019-retrospect.html

crowdstrike2019年网络威胁报告

https://go.crowdstrike.com/WC-2020-Global-Threat-Report_LP-SP-Thank-You.html

2019年Android 恶意软件专题报告

https://cert.360.cn/report/detail?id=0d66c8ba239680d6674f2dba9f2be5f7

司法部阐明威胁研究人员应如何与执法部门合作

https://www.justice.gov/criminal-ccips/page/file/1252341/download

安全研究 Security Research

Kimsuky APT 组织研究分析

https://blog.yoroi.company/research/the-north-korean-kimsuky-apt-keeps-threatening-south-korea-evolving-its-ttps/

Gaza Cybergang APT组织向8个政府和电信组织植入后门

https://unit42.paloaltonetworks.com/molerats-delivers-spark-backdoor/

安天对“超高能力网空威胁行为体”系列分析回顾

https://mp.weixin.qq.com/s/N0LxStDpc6GyzpyszYnguQ

恶意软件 Malware

ATM 特马分析

https://vimeo.com/394794583

Golang特马分析

https://sysopfb.github.io/malware/2020/02/28/Golang-Wrapper-on-an-old-malware.html

APT29 恶意软件分析

https://medium.com/@ryancor/extracting-embedded-payloads-from-malware-aaca8e9aa1a9

CIA 在VT上的样本

https://github.com/RedDrip7/APT_Digital_Weapon/tree/master/Lamberts

<<Previous Next>>