安全报告 Security Report 2020安全漏洞年报 https://www.anquanke.com/post/id/225886 安全工具 Security Tools BurpFastJsonScan https://github.com/pmiaowu/BurpFastJsonScan Scilla-信息收集工具 https://www.kitploit.com/2020/12/scilla-information-gathering-tool.html 恶意软件 Malware Credential Stealer瞄准美国、加拿大银行客户 https://www.trendmicro.com/en_us/research/20/l/stealth-credential-stealer-targets-us-canadian-bank-customers.html 安全事件 Security Incident FBI警告DoppelPaymer勒索软件攻击激增 https://www.databreachtoday.com/fbi-warns-doppelpaymer-ransomware-attack-surge-a-15630 黑客攻击COVID-19疫苗供应链并在暗网中出售疫苗 https://securityaffairs.co/wordpress/112433/hacking/covid-19-attacks-2.html 安全研究 Security Research 梦中初探域渗透流程 https://xz.aliyun.com/t/8656 Valve游戏中的漏洞 https://research.checkpoint.com/2020/game-on-finding-vulnerabilities-in-valves-steam-sockets/ CVE-2020-27897：APPLE MACOS内核OOB权限提升漏洞 https://www.thezdi.com/blog/2020/12/9/cve-2020-27897-apple-macos-kernel-oob-write-privilege-escalation-vulnerability SolarWinds SUNBURST后门分析 https://labs.sentinelone.com/solarwinds-sunburst-backdoor-inside-the-stealthy-apt-campaign/