漏洞 Vulnerability phpStudy nginx 解析漏洞通告 https://cert.360.cn/warning/detail?id=3bddb9ad0a6770b149ae932ed01d1e59 安全研究 Security Research CWE-1265的引入:一种理解易受攻击的重入控制流的新方法 https://www.thezdi.com/blog/2020/8/25/introducing-cwe-1265-a-new-way-to-understand-vulnerable-reentrant-control-flows 新版本glibc下的IO_FILE攻击 https://www.anquanke.com/post/id/216290 机器学习从想法到现实:一个PowerShell案例研究 https://research.nccgroup.com/2020/09/02/machine-learning-from-idea-to-reality-a-powershell-case-study/ KaiOS预安装的移动应用程序中的多个HTML注入漏洞 https://research.nccgroup.com/2020/08/21/technical-advisory-multiple-html-injection-vulnerabilities-in-kaios-pre-installed-mobile-applications/ 红蓝对抗之邮件钓鱼攻击 https://paper.seebug.org/1329/ KryptoCibule：多任务多货币密码窃取 https://paper.seebug.org/1326/ 安全事件 Security Incident evinum APT在最近的攻击中使用了基于Python的RAT PyVil https://securityaffairs.co/wordpress/107890/apt/evilnum-apt-pyvil-rat.html 华纳音乐集团网店遭Magecart攻击 https://securityaffairs.co/wordpress/107897/data-breach/warner-music-group-data-breach.html 安全工具 Security Tools dtd-finder – 寻找dtd并构建xxe工具 https://github.com/GoSecure/dtd-finder