漏洞 Vulnerability CVE-2020-17518/17519：Apache Flink 目录遍历漏洞 https://cert.360.cn/warning/detail?id=b985a81d0fbcfd531a686a4c2d56d489 安全工具 Security Tools zznop/drow elf注入工具 https://github.com/zznop/drow 安全资讯 Security Information 美国司法部确认其邮件系统遭到SolarWinds供应链攻击 https://securityaffairs.co/wordpress/113108/data-breach/solarwinds-hackers-o365-mailboxes.html 多个游戏公司的员工账户信息在暗网销售 https://www.welivesecurity.com/2021/01/05/breached-employee-credentials-gaming-companies/ 恶意软件 Malware QNode木马通过邮件进行投放 https://securityaffairs.co/wordpress/113088/cyber-crime/qnode-rat-attack.html ElectroRat 勒索软件窃取感染用户的电子货币钱包 https://www.hackread.com/electrorat-crypto-stealing-malware-hits-macos-windows-linux-devices/ 安全事件 Security Incident Nissan git仓库源代码泄漏 https://www.zdnet.com/article/nissan-source-code-leaked-online-after-git-repo-misconfiguration/ 安全研究 Security Research Lokibot感染链深入分析 https://blog.talosintelligence.com/2021/01/a-deep-dive-into-lokibot-infection-chain.html 经典漏洞回顾-Microsoft Windows Win32k本地提权漏洞分析 CVE-2015-0057 https://xz.aliyun.com/t/8984