漏洞 Vulnerability FortiWeb 多个高危漏洞安全通告 https://cert.360.cn/warning/detail?id=6a0e456cd5ec4a25f7f61a036de7e9a7 Nvidia 在2021年的首次安全更新中修复了与图形驱动程序和vGPU软件相关的漏洞 https://threatpost.com/nvidia-windows-gamers-graphics-driver-flaws/162857/ FasterXML Jackson-databind多个反序列化漏洞 https://mp.weixin.qq.com/s/6SN-i6i-adeFPPUQ9psoKA 安全资讯 Security Information 美国政府将与HackerOne平台合作启动“ Hack the Army 3.0”漏洞赏金计划 https://securityaffairs.co/wordpress/113116/security/hack-the-army-3-0.html TOP25游戏公司将近100万个与邮箱相关的账号被窃取销售 https://ke-la.com/darknet-threat-actors-are-not-playing-games-with-the-gaming-industry/ 恶意软件 Malware APT37组织使用 RokRat Trojan 攻击韩国 https://blog.malwarebytes.com/threat-analysis/2021/01/retrohunting-apt37-north-korean-apt-used-vba-self-decode-technique-to-inject-rokrat/ 深入分析 RansomExx 恶意软件 https://www.clearskysec.com/operation-kremlin/ 安全事件 Security Incident kremlin 行动深入分析 https://www.clearskysec.com/operation-kremlin/ 安全研究 Security Research 深入研究Lokibot感染链 https://blog.talosintelligence.com/2021/01/a-deep-dive-into-lokibot-infection-chain.html Purple Fox 新变种讲述从钓鱼网站到Rootkit的故事 https://mp.weixin.qq.com/s/oYbOyH-k3ut3nX3CSysvJA Zend Framework远程执行代码漏洞，CVE-2021-3007 https://github.com/Ling-Yizhou/zendframework3-/blob/main/zend%20framework3%20%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%20rce.md