安全报告 Security Report SolarWinds失陷服务器测绘分析报告 https://mp.weixin.qq.com/s/ZczyXNcoPDumC2u4l41Mtg 360-CERT: 2020安全漏洞年报 https://cert.360.cn/report/detail?id=2435ddd23ca5f45865da4efea2812920 安全研究 Security Research SharePoint Rce 系列分析（二） https://mp.weixin.qq.com/s/ZLSFXUoNNAFxqeiD9RpYZg CVE-2020-17057：Windows DirectComposition未初始化的指针特权升级漏洞分析 https://blogs.360.cn/post/CVE-2020-17057%20detail%20and%20exploit.html 我的应用安全方法论：路在脚下 https://www.anquanke.com/post/id/225450 CVE-2020-25695：Postgresql特权提升漏洞分析 https://staaldraad.github.io/post/2020-12-15-cve-2020-25695-postgresql-privesc/ 隐藏在浏览器背后的“黑手” https://www.anquanke.com/post/id/225632 针对SunBurst隐藏性的分析 https://blog.reversinglabs.com/blog/sunburst-the-next-level-of-stealth?utm_campaign=2020%20Research&utm_content=149279712&utm_medium=social&utm_source=twitter&hss_channel=tw-146486666 安全工具 Security Tools Jackalope：一个用于 Fuzz Windows、macOS 二进制文件的工具 https://github.com/googleprojectzero/Jackalope 安全资讯 Security Information ZDI总结全年最重要的5个漏洞 https://www.thezdi.com/blog/2020/12/16/the-top-5-bug-submissions-of-2020