漏洞 Vulnerability CVE-2020-35728：FasterXML jackson-databind 2.x RCE漏洞 https://github.com/Al1ex/CVE-2020-35728 Dubbo 2.7.8多个远程代码执行漏洞 https://xz.aliyun.com/t/8917 安全工具 Security Tools AMNESIA:33 检测工具 https://github.com/Forescout/project-memoria-detector 恶意软件 Malware 新型Golang蠕虫在服务器上投放XMRig Miner https://www.intezer.com/blog/research/new-golang-worm-drops-xmrig-miner-on-servers/?fbclid=IwAR3eFiHCNoqr5mc2UAOcm8nocjUOjZn0cpcAiSoYmn__JtJfBbjqUUT1OwQ 安全事件 Security Incident 由于SolarWinds后门，Microsoft源代码遭泄露 https://msrc-blog.microsoft.com/2020/12/31/microsoft-internal-solorigate-investigation-update/ 欧洲药品管理局有关Covid-19疫苗的文件在暗网泄露 https://cybleinc.com/2020/12/31/documents-relating-to-covid-19-vaccine-of-european-medicines-agency-allegedly-leaked-in-darkweb/ 安全资讯 Security Information 2010-2020十年综述：10个最常见的安全漏洞 https://www.ehackingnews.com/2021/01/2010-2020-decade-roundup-10-most.html 2021年网络安全趋势预测 https://threatpost.com/2021-cybersecurity-trends/162629/ 安全研究 Security Research CVE-2020-15257-host模式容器逃逸漏洞分析 https://xz.aliyun.com/t/8925