360CERT - 每日安全简报 (2020-07-29)

<<Previous Next>>

安全研究 Security Research

从零开始探究IOS内核漏洞

https://secfault-security.com/blog/chain3.html

"失控”的 IPv6：观察 IPv6 网络环境安全现状

https://paper.seebug.org/1277/

从红队视角看MOTW

https://outflank.nl/blog/2020/03/30/mark-of-the-web-from-a-red-teams-perspective/

恶意软件Valak的发展历程

https://unit42.paloaltonetworks.com/valak-evolution/

使用SDR Radio接收NOAA卫星图像

https://publiclab.org/notes/sashae/06-26-2020/diy-satellite-ground-station

探索MS-DOS stub

https://osandamalith.com/2020/07/19/exploring-the-ms-dos-stub/

使用单个".terminal"文件攻击MacOS应用

https://medium.com/@metnew/exploiting-popular-macos-apps-with-a-single-terminal-file-f6c2efdfedaa

安全资讯 Security Information

18家公司3.86亿条用户信息泄漏

https://www.bleepingcomputer.com/news/security/hacker-leaks-386-million-user-records-from-18-companies-for-free/

Lazarus开发出了自己的勒索软件

https://www.darkreading.com/vulnerabilities---threats/lazarus-group-shifts-gears-with-custom-ransomware/d/d-id/1338469?_mc=rss_x_drr_edt_aud_dr_x_x-rss-simple

黑客Ghost Exodus，服刑十年后分享自己的故事

https://darknetdiaries.com/episode/70/

<<Previous Next>>