漏洞 Vulnerability CNVD-2020-72736: OpenTSDB命令注入漏洞 https://www.cnvd.org.cn/flaw/show/CNVD-2020-72736 CNVD-2020-72729: Cisco IoT Field Network Director SQL注入漏洞 https://www.cnvd.org.cn/flaw/show/CNVD-2020-72729 安全报告 Security Report SUPERNOVA: SolarStorm 的 .NET WebShell 分析报告 https://unit42.paloaltonetworks.com/solarstorm-supernova/ 安全资讯 Security Information NATO正在检测SolarWinds攻击带来的影响 https://securityaffairs.co/wordpress/112464/security/nato-solarwinds-hack.html Facebook Bug导致Instagram用户个人信息泄露 https://www.hackread.com/facebook-bug-exposed-instagram-user-email-addresses/ 安全工具 Security Tools harsh-bothra/Bheem: 集成化的信息收集脚本集合 https://github.com/harsh-bothra/Bheem 恶意软件 Malware Egregor 勒索软件简要分析报告 https://blog.malwarebytes.com/ransomware/2020/12/threat-profile-egregor-ransomware-is-making-a-name-for-itself/ 安全事件 Security Incident 通过虚假的Cyberpunk 2077安卓应用程序传播的勒索软件 https://www.hackread.com/fake-cyberpunk-2077-android-app-ransomware/ 安全研究 Security Research AIR-FI: 通过内存总线产生WiFi信号，泄露隔离环境的数据 https://arxiv.org/pdf/2012.06884.pdf 使用Frida检测Adobe Reader https://starlabs.sg/blog/2020/11/instrumenting-adobe-reader-with-frida/