360CERT - 每日安全简报 (2020-04-03)

<<Previous Next>>

漏洞 Vulnerability

CVE-2020-4273：IBM Spectrum Scale提权漏洞

https://www.ibm.com/blogs/psirt/security-bulletin-a-vulnerability-has-been-identified-in-ibm-spectrum-scale-where-an-unprivileged-user-could-execute-commands-as-root-cve-2020-4273/

安全工具 Security Tools

Frida API Fuzzer-用于API内存模糊测试的工具

http://feedproxy.google.com/~r/PentestTools/~3/gjVqcWYaBMY/frida-api-fuzzer-this-experimetal.html

安全事件 Security Incident

黑客利用IE和Firefox漏洞攻击日本，中国的披露

https://securityaffairs.co/wordpress/100960/hacking/ie-firefox-flaws.html

Zoom视频会议软件安全性和隐私保障遭质疑，可能违反GDPR

http://feedproxy.google.com/~r/Securityweek/~3/cTi8sguD9vw/zooms-security-and-privacy-woes-violated-gdpr-expert-says

WordPress流行插件Rank Math存在安全问题

https://nakedsecurity.sophos.com/2020/04/02/dont-get-locked-out-of-your-own-website-update-this-wordpress-plugin-now/

安全资讯 Security Information

暗网虐待儿童团伙破灭：缴获15TB文件

https://www.hackread.com/dark-web-child-abuse-gang-busted-15tb-files-seized/

安全研究 Security Research

WAF机制及绕过方法总结：注入篇

https://www.freebuf.com/articles/web/229982.html

一种工控蜜罐识别与反识别技术研究与应用实践

https://www.freebuf.com/articles/ics-articles/230402.html

基于VBS的恶意软件传播样本

https://www.malware-traffic-analysis.net/2020/04/02/index.html

重新思考VPN: Tailscale Wireguard新型VPN协议

https://go.theregister.co.uk/feed/www.theregister.co.uk/2020/04/02/rethinking_vpn_tailscale_startup_packages/

<<Previous Next>>