漏洞 Vulnerability CVE-2020-0601 Windows CryptoAPI验证绕过漏洞通告 https://mp.weixin.qq.com/s/k3fnMO_FjdGxUs0VRn_TVw CVE-2020-2546 Weblogic T3协议风险通告 https://mp.weixin.qq.com/s/7h6FG8XBznO73ySJPcAo3g CVE-2020-2551 Weblogic WLS组件IIOP协议风险通告 https://mp.weixin.qq.com/s/9LqYDYErUiqNFgIgfUmtbA Intel修复多个高危漏洞通告 https://mp.weixin.qq.com/s/NP01PyI8Nm-CYOgbpi9qbg Jenkins Plugins 多个安全漏洞 http://weixin.shuziguanxing.com/selectDetailsTempateId/333 两个流行 WordPress 插件认证绕过漏洞分析 https://www.webarxsecurity.com/vulnerability-infinitewp-client-wp-time-capsule/ 希捷 NAS 产品远程代码执行漏洞分析 https://pentest.blog/advisory-seagate-central-storage-remote-code-execution/ 安全工具 Security Tools dSploit：一款移动安全渗透审计工具 https://www.darknet.org.uk/2020/01/dsploit-apk-download-hacking-security-toolkit-for-android/?utm_source=feedly&utm_medium=webfeeds 恶意软件 Malware AppleJeus行动分析 https://www.freebuf.com/articles/network/225140.html 安全事件 Security Incident Emotet：针对600名联合国员工的网络钓鱼攻击 https://threatpost.com/un-weathers-emotet-trickbot-malware/151894/ 安全资讯 Security Information Windows 7时代正式终结！停服过渡期安全问题已然逼近 https://www.anquanke.com/post/id/197340 安全研究 Security Research CSS-T | Mysql Client 任意文件读取攻击链拓展 https://paper.seebug.org/1112/ 远程iPhone Exploitation Part 2: 远程绕过ASLR https://www.anquanke.com/post/id/197079 Android漏洞挖掘之Fuzz初探 https://www.anquanke.com/post/id/197083 浅谈位置无关代码 https://www.anquanke.com/post/id/197214 ThinkPHP6.0任意文件创建分析 https://www.anquanke.com/post/id/197261 从0到1掌握某Json-TemplatesImpl链与ysoserial-jdk7u21的前因后果 https://xz.aliyun.com/t/7096 阿里白帽大会-红队的踩”坑”之路总结 https://xz.aliyun.com/t/7103