漏洞 Vulnerability 卡巴斯基在4种开源VNC软件中发现了数十个缺陷 https://securityaffairs.co/wordpress/94297/ics-scada/vnc-vulnerabilities.html 安全工具 Security Tools Leprechaun-用于绘制网络数据流的工具 http://feedproxy.google.com/~r/PentestTools/~3/6JmHURb1L1E/leprechaun-tool-used-to-map-out-network.html RdpThief – 使用API​​ hook 从Mstsc.Exe提取明文密码 http://feedproxy.google.com/~r/PentestTools/~3/_16Af6YgVU4/rdpthief-extracting-clear-text.html Unit42发布powershell自动反混淆工具 https://www.freebuf.com/sectool/219057.html 安全事件 Security Incident OnePlus 遭受攻击或存在数据泄漏 https://gbhackers.com/oneplus-hacked/ TrickBot 致力于抓取 openvpn openssh 的密码 https://www.bleepingcomputer.com/news/security/trickbot-trojan-getting-ready-to-steal-openssh-and-openvpn-keys/ 安全资讯 Security Information 路由器默认IP以及登录口令集合 https://0x00sec.org/t/list-of-default-router-ip-addresses-and-passwords/17636/1 曼国家银行2TB数据遭到泄漏 https://www.hackread.com/hacker-leaks-2tb-of-cayman-national-bank-data/ 安全研究 Security Research iOS端的堆溢出以及内核溢出漏洞分析 https://www.freebuf.com/vuls/217181.html