漏洞 Vulnerability CVE-2020-0177: Android本地提权漏洞 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0177 安全工具 Security Tools Needle-在各种平台上即时访问您的Bug Bounty提交仪表板+公开披露的报告 https://www.kitploit.com/2020/06/needle-instant-access-to-you-bug-bounty.html 安全资讯 Security Information 利用 Black Lives Matter 运动传播 Trickbot 恶意软件 https://www.hackread.com/hackers-spread-trickbot-malware-black-lives-matter/ Facebook Messenger for Windows中的一个错误可能有助于恶意软件获得持久性 https://thehackernews.com/2020/06/facebook-malware-persistence.html 安全研究 Security Research 在PWN2OWN MIAMI上用于开发感应自动化利用的三个bug https://www.thezdi.com/blog/2020/6/10/a-trio-of-bugs-used-to-exploit-inductive-automation-at-pwn2own-miami XSS 备忘录 https://portswigger.net/web-security/cross-site-scripting/cheat-sheet Java安全之反序列化篇-URLDNS&Commons Collections 1-7反序列化链分析 https://paper.seebug.org/1242/ 伪 Electrum 鱼叉钓鱼攻击分析 https://paper.seebug.org/1240/ 通过 Netwire 攻击链对意大利进行网络攻击 https://yoroi.company/research/new-cyber-operation-targets-italy-digging-into-the-netwire-attack-chain/ FlowCloud 4.1.3版恶意软件分析 https://www.proofpoint.com/us/blog/threat-insight/flowcloud-version-413-malware-analysis