资讯类

安全漏洞影响了超过30万个Oracle POS系统

https://www.bleepingcomputer.com/news/security/security-bug-affects-over-300-000-oracle-pos-systems/

http://securityaffairs.co/wordpress/68438/hacking/oracle-micros-pos-flaw.html

Mozilla修复了Firefox UI中导致远程执行代码的严重漏洞

https://www.bleepingcomputer.com/news/security/mozilla-fixes-severe-flaw-in-firefox-ui-that-leads-to-remote-code-execution/

MindLost Ransomware——一种新的勒索软件

https://www.bleepingcomputer.com/news/security/mindlost-ransomware-is-a-piece-of-junk-that-wants-to-collect-credit-card-details/

Image Previewer:第一个插入浏览器矿工的Firefox插件？

https://www.bleepingcomputer.com/news/security/image-previewer-first-firefox-addon-that-injects-an-in-browser-miner/

技术类

PWN学习之house of系列(一)

https://paper.seebug.org/521/

2017年第四季度国内操作系统及浏览器占比情况分析

https://mp.weixin.qq.com/s/wOpBj4QynO9tC6glb4n96Q

深入分析AFL模糊器内核 – 编译时间检测

https://tunnelshade.in/blog/2018/01/afl-internals-compile-time-instrumentation

赎金在哪里？恶意加密货币矿工收购，创造数百万美元

http://blog.talosintelligence.com/2018/01/malicious-xmr-mining.html

利用Burp的自定义root CA监控Android N流量

Using a custom root CA with Burp for inspecting Android N traffic

浅谈情报的实践与落地

https://www.sec-un.org/%E6%B5%85%E8%B0%88%E6%83%85%E6%8A%A5%E7%9A%84%E5%AE%9E%E8%B7%B5%E4%B8%8E%E8%90%BD%E5%9C%B0/

深入研究的套路之黑客与区块链

https://mp.weixin.qq.com/s/7F2-eLqIdSiNIHHJDzkwcg

Scarab勒索软件：新变种，新手段

https://blog.malwarebytes.com/threat-analysis/2018/01/scarab-ransomware-new-variant-changes-tactics/

谈谈文件包含漏洞

https://0x00sec.org/t/talk-about-file-inclusion-vulnerability/5200

OSSIM操作实践

https://www.secpulse.com/archives/67350.html

Writing complex macros in Rust: Reverse Polish Notation

https://blog.cloudflare.com/writing-complex-macros-in-rust-reverse-polish-notation/

面向千万级用户的运维事件管理之路

https://mp.weixin.qq.com/s/iI0qRxzaLOk1xEpQ3XG-ew

2017年我们如何应对不良应用和恶意开发者

https://android-developers.googleblog.com/2018/01/how-we-fought-bad-apps-and-malicious.html

谷歌的零信任安全架构实践

https://mp.weixin.qq.com/s/lxw9TAPB0pXJJePcnu8RcA

Advantech WebAccess 8.0-2015.08.16 SQL注入

https://cxsecurity.com/issue/WLB-2018010341

执行MiTM攻击工具

https://github.com/samdenty99/injectify

AuthMatrix 0.8发布

https://zuxsecurity.blogspot.com/2018/01/authmatrix-08.html

自动HTTP请求重复与Burp套件

https://github.com/nccgroup/AutoRepeater