Inspired by 360CERT

恶意软件 Malware

Exchange已被新晋勒索软件Dearcry针对

https://www.bleepingcomputer.com/news/security/new-dearcry-ransomware-is-targeting-microsoft-exchange-servers/

安全研究 Security Research

DNS服务器漏洞分析

https://media.cert.europa.eu/static/SecurityAdvisories/2021/CERT-EU-SA2021-014.pdf

安全工具 Security Tools

正则安全评估工具

https://blog.doyensec.com/2021/03/11/regexploit.html

zip bomb工具

https://gitlab.com/brn1337/shadrak

安全资讯 Security Information

安全人员再次研究情趣用品安全性

https://www.bleepingcomputer.com/news/security/smart-sex-toys-come-with-bluetooth-and-remote-access-weaknesses/

安全事件 Security Incident

CISA表示防护措施到位并未因Exchange漏洞遭受损失

https://www.bleepingcomputer.com/news/security/cisa-no-federal-civilian-agency-hacked-in-exchange-attacks-so-far/

饮品公司Molson Coors遭网络攻击致生产中断

https://www.bleepingcomputer.com/news/security/molson-coors-brewing-operations-disrupted-by-cyberattack/

安全客 Security Geek

DLL劫持之权限维持篇（二）

https://www.anquanke.com/post/id/232891