漏洞 Vulnerability CVE-2020-0601 Windows CryptoAPI 签名校验机制欺骗漏洞 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0601 VMware 修复了本地权限提升漏洞CVE-2020-3941 https://www.vmware.com//security/advisories/VMSA-2020-0002.html Adobe Illustrator CC | APSB20-03 任意代码执行漏洞 https://helpx.adobe.com/security/products/illustrator/apsb20-03.html 安全资讯 Security Information 英特尔修复了性能分析工具中的严重缺陷 https://threatpost.com/intel-fixes-high-severity-flaw-in-performance-analysis-tool/151837/ Google 支持 Kubernetes Bug 赏金计划 https://security.googleblog.com/2020/01/securing-open-source-how-google.html 安全工具 Security Tools Gtfo – 搜索 unix 系统中绕过系统安全限制的可执行文件 https://www.kitploit.com/2020/01/gtfo-search-for-unix-binaries-that-can.html?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+PentestTools+%28PenTest+Tools%29 安全事件 Security Incident 澳大利亚丛林大火捐款网站遭Magecart信用卡盗用攻击 https://securityintelligence.com/news/australian-bushfires-donation-website-compromised-by-magecart-credit-card-skimming-attack/ 安全研究 Security Research HTTPS流量在恶意软件中的使用分析 https://www.netresec.com/?page=Blog&month=2020-01&post=Sharing-a-PCAP-with-Decrypted-HTTPS 软件生命周期结束后如何保证安全性 https://www.darkreading.com/theedge/how-to-keep-security-on-life-support-after-software-end-of-life/b/d-id/1336790 CVE-2019-1384 Ghost Potato 复现分析 https://xz.aliyun.com/t/7087