安全研究 Security Research 文件包含挑战 Writeup https://medium.com/bugbountywriteup/inclusion-writeup-c268e6e55b5e 关于ORACLE WEBLOGIC漏洞在野外被利用的详细信息 https://www.thezdi.com/blog/2020/5/8/details-on-the-oracle-weblogic-vulnerability-being-exploited-in-the-wild 一个欺骗性的断言是如何导致一个关键的WINDOWS内核漏洞的 https://www.thezdi.com/blog/2020/5/7/how-a-deceptive-assert-caused-a-critical-windows-kernel-vulnerability Naikon APT: 重新加载网络间谍 https://research.checkpoint.com/2020/naikon-apt-cyber-espionage-reloaded/安全工具 Security Tools URLBrute -用来破解网站子域名和目录的工具 https://www.kitploit.com/2020/05/urlbrute-tool-to-brute-website-sub.html Evilreg -使用Windows注册表文件的反向Shell (.Reg) https://www.kitploit.com/2020/05/evilreg-reverse-shell-using-windows.html 安全资讯 Security Information REvil黑客在赎金要求下泄露了特朗普的电子邮件谈话 https://www.hackread.com/revil-hackers-leaks-email-conversation-on-trump/ QNodeService木马通过伪造的COVID-19税收减免传播 https://securityaffairs.co/wordpress/103302/malware/qnodeservice-coronavirus-phishing.html