漏洞 Vulnerability CNVD-2020-38450: PHPOK文件上传漏洞 https://www.cnvd.org.cn/flaw/show/CNVD-2020-38450 安全工具 Security Tools Padding-Oracle-Attacker – 可视化密码攻击Cli工具 https://www.kitploit.com/2020/07/padding-oracle-attacker-cli-tool-and.html 恶意软件 Malware 德国情报机构或将网络流量重定向，以便安装监听木马 https://www.freebuf.com/news/243199.html 安全事件 Security Incident 美国承认对俄罗斯公司发起的网络攻击 https://securityaffairs.co/wordpress/105843/cyber-warfare-2/trump-cyber-attack-russia-troll-farm.html 4w美国公民详细信息在暗网销售 https://securityaffairs.co/wordpress/105837/malware/40000-us-citizens-darkweb.html LiveAuctioneers 网站340w用户数据泄漏 https://www.bleepingcomputer.com/news/security/liveauctioneers-reports-data-breach-after-user-records-sold-online/ 安全资讯 Security Information 恶意软件致力于检测沙箱行为并绕过 https://securityaffairs.co/wordpress/105830/malware/any-run-sandbox-evasion.html 领英iOS版监视用户:不光剪贴板 还读取其他苹果设备数据 https://www.cnbeta.com/articles/tech/1002363.htm 安全研究 Security Research WebShell混淆方案 https://www.freebuf.com/articles/web/241454.html 使用 CodeQL 挖掘 CVE-2020-9297 https://xz.aliyun.com/t/7979 PWNHUB-Crypto-easy_rsa https://www.anquanke.com/post/id/210332