安全研究 Security Research 深入了解SolarWinds https://blog.qualys.com/vulnerabilities-research/2021/01/04/technical-deep-dive-into-solarwinds-breach 建立自定义的恶意软件分析环境 https://labs.sentinelone.com/building-a-custom-malware-analysis-lab-environment/ 红队视角看 Sunburst 后门中的 TTPs https://paper.seebug.org/1443 DevSecOps建设之白盒篇 https://www.freebuf.com/articles/es/259762.html 绕过用户模式的Hook并直接进行系统调用 https://www.mdsec.co.uk/2020/12/bypassing-user-mode-hooks-and-direct-invocation-of-system-calls-for-red-teams/ 禅道项目管理系统(ZenTaoPMS)高危漏洞分析与利用 https://xz.aliyun.com/t/8692 安全工具 Security Tools XSS-Scanner https://www.kitploit.com/2021/01/xss-scanner-xss-scanner-that-detects.html 恶意软件 Malware 推测恶意软件的下一次攻击 https://research.checkpoint.com/2021/stopping-serial-killer-catching-the-next-strike/ 安全事件 Security Incident 意大利的Ho-Mobile数据库中有250万个帐户被盗 https://www.hackread.com/ho-mobile-italy-database-stolen-sold-dark-web/ 黑客利用新的ElectroRAT恶意软件锁定加密货币用户 https://www.zdnet.com/article/hackers-target-cryptocurrency-users-with-new-electrorat-malware/