漏洞 Vulnerability CVE-2019-19922:Linux CFS算法存在拒绝服务攻击 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19922 安全报告 Security Report 关键信息基础设施网络安全（物联网安全专题）监测月报201911期 https://mp.weixin.qq.com/s/EDlQB-TLq0R4oknRQpjvXA 安全研究 Security Research CVE-2018-1270 Remote Code Execution with spring-messaging 分析 http://adm1n.design/2019/12/20/CVE-2018-1270%20Remote%20Code%20Execution%20with%20spring-messaging%20%E5%88%86%E6%9E%90/ 安全运营持续优化之路—— 基于ATT&CK+SOAR的运营实践 https://mp.weixin.qq.com/s/d4XWTQieO-vhjLKhodrpZQ 在VMware中利用堆溢出 http://acez.re/the-weak-bug-exploiting-a-heap-overflow-in-vmware/ 没有源代码时如何检测软件中的漏洞 https://www.apriorit.com/dev-blog/644-reverse-vulnerabilities-software-no-code-dynamic-fuzzing 供应链攻击的演变和未来 https://www.brighttalk.com/webcast/15591/365528 使用xpose在Android上禁用设备身份验证 https://yingtongli.me/blog/2019/12/20/gcast-auth.html