漏洞 Vulnerability CVE-2020-14364：QEMU USB模块越界解读漏洞公告 https://cert.360.cn/warning/detail?id=e1675bc51234a6b93f3f459d272efbe1 安全工具 Security Tools 一款扫描Google云端硬盘中的恶意软件的安全工具 https://www.fireeye.com/blog/products-and-services/2020/08/scanning-google-drive-for-malware.html 安全报告 Security Report 以法律和金融组织为目标的 DeathStalker APT https://securelist.com/deathstalker-mercenary-triumvirate/98177/ QakBot 恶意文档活动引入两项新技术 https://blog.morphisec.com/qakbot-qbot-maldoc-two-new-techniques NICER协议深入探讨：Telnet服务的Internet公开 https://blog.rapid7.com/2020/08/21/nicer-protocol-deep-dive-internet-exposure-of-telnet-services/ 安全资讯 Security Information 360安全大脑赋能安全运营与应急响应：海量数据下的实战方法论 https://www.anquanke.com/post/id/215365 安全研究 Security Research Netgear Nighthawk R8300 upnpd PreAuth RCE分析与复现 https://paper.seebug.org/1311/ Windows .NET Core SDK权限提升漏洞分析 https://www.anquanke.com/post/id/215180 macOS下宏攻击的复现与研究 https://mp.weixin.qq.com/s/a_0Vbnr38drTZAlQfoH10A 某地市攻防演练总结与反思 https://www.anquanke.com/post/id/215377