漏洞 Vulnerability CVE-2020-7471 漏洞详细分析原理以及POC https://xz.aliyun.com/t/7218 安全工具 Security Tools 沙盒syscall监控组件：strace and wtrace https://mp.weixin.qq.com/s/_A2BJU9yclH7aD1Hb9jwxg 俄罗斯APT生态地图 https://twitter.com/megabeets_/status/1229667855668477952 安全报告 Security Report 腾讯安全发布2019年度挖矿木马报告 https://mp.weixin.qq.com/s/MdQ4np00vfi-0UtqrC651A 卡巴斯基发部2019年第四季度的DDOS攻击报告 https://twitter.com/kaspersky/status/1229828001791123458 Malwarebytes Labs发布2020年恶意软件状况报告 https://blog.malwarebytes.com/reports/2020/02/malwarebytes-labs-releases-2020-state-of-malware-report/ 安全事件 Security Incident WordPress主题插件ThemeGrill Demo Importer严重漏洞被修复，影响将近20万个网站 https://www.securityweek.com/flaw-wordpress-themes-plugin-allowed-hackers-become-site-admin 联想，惠普，戴尔外围设备面临未修补的固件漏洞 https://threatpost.com/lenovo-hp-dell-peripherals-unpatched-firmware/152936/?utm_source=dlvr.it&utm_medium=twitter 安全资讯 Security Information Ginp安卓木马新增功能：伪造银行的短信和推送消息 https://twitter.com/AbubakarMundir/status/1229716622358843392 Xbox发布漏洞奖励计划，最高为20000$ https://twitter.com/MarcelBilal/status/1229537322477215744 安全研究 Security Research 使用C#和C++编写无法检测到的反弹shell https://twitter.com/hackerfantastic/status/1229668638883536896 远控免杀系列文章及配套工具 https://github.com/TideSec/BypassAntiVirus 基于内存Webshel​​l的无文件攻击技术研究 https://www.anquanke.com/post/id/198886 追踪朝鲜的网络间谍组织“ Kimsuky”：第1部分 https://www.pwc.co.uk/issues/cyber-security-data-privacy/research/tracking-kimsuky-north-korea-based-cyber-espionage-group-part-1.html