漏洞 Vulnerability CVE-2020-3843：通过无线远程传输内存，导致远程iOS / MacOS内核堆损坏 https://bugs.chromium.org/p/project-zero/issues/detail?id=1982 由于EAP数据包处理中的缺陷，pppd（点对点协议守护程序）容易出现缓冲区溢出 https://www.kb.cert.org/vuls/id/782301/ 恶意软件 Malware 对Emotet木马的深入分析 https://www.cynet.com/blog/emotet-vs-trump-deep-dive-analysis-of-a-killer-info-stealer/ 安全研究 Security Research CVE-2020-0688：Microsoft Exchange Control Panel RCE在野利用手法分析 https://www.volexity.com/blog/2020/03/06/microsoft-exchange-control-panel-ecp-vulnerability-cve-2020-0688-exploited/ chrome Issue 744584：v8 RCE漏洞分析及利用 https://zon8.re/posts/exploiting-an-accidentally-discovered-v8-rce/ CVE-2019-1436:win32k 信息泄漏漏洞与利用 IDAPython 脚本自动化检测 https://versprite.com/blog/security-research/how-to-use-idapython-to-automate-reverse-engineering/ jameel_nabbo有关安全代码审计而构建静态代码分析器的研究论文 https://www.researchgate.net/publication/339601996_Scientific_research_for_building_static_code_analyzers_-_Jameel_Nabbo ManageEngine桌面中央文件存储未授权RCE漏洞poc公开 https://srcincite.io/pocs/src-2020-0011.py.txt 安全工具 Security Tools projectsandcastle：可以让iphone运行Android和Linux程序的工具 https://github.com/corellium/projectsandcastle SharpRDP：对用于身份验证的命令执行漏洞的远程桌面协议.NET控制台应用程序 https://www.kitploit.com/2020/03/sharprdp-remote-desktop-protocol-net.html