安全工具 Security Tools ToothPicker：适用于iOS的进程内覆盖指导的模糊器 https://www.kitploit.com/2020/11/toothpicker-in-process-coverage-guided.html 安全资讯 Security Information TA416 APT使用新的Golang版本的PlugX恶意软件加载程序进行钓鱼攻击 https://threatpost.com/ta416-apt-plugx-malware-variant/161505/ 安全研究 Security Research Java安全之Jdk7u21链分析 https://www.anquanke.com/post/id/222630 强网杯2020决赛RealWord的IE浏览器漏洞挖掘——PiAno(PA) https://www.anquanke.com/post/id/222678 探索先进自动化漏洞挖掘技术中的不足 https://mp.weixin.qq.com/s/1q_YCJoyCREtgU3X2_0uqQ 恶意软件 Malware RegretLocker：可加密 Windows 虚拟硬盘的新型勒索软件 https://blog.malwarebytes.com/ransomware/2020/11/regretlocker-new-ransomware-can-encrypt-windows-virtual-hard-disks/ 安全报告 Security Report WebLogic UniversalExtractor反序列化漏洞(CVE-2020-14645)的复现和分析 https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247487756&idx=2&sn=0cb272902737a57d8b90e48979cd9948&chksm=eafa5940dd8dd05632b8dff7e4577880e2539a2380e8be94fac73f3e23500739d92bf5c9f83c&scene=27&key=f7cb72e8598687c93c278052bc257f49ced0373b524b1503d43ed81f9cae7cc2f13cabc3f46eace41a1e07d59f299e500d0220c063ba0f14cb6a895601f74f0ca4c84f35e7d7e9e2a5482af0061b70b1ec24fcc9c04a17fb7e84ec0f998a533a4a0f003e1f694cd0a63da7116ce94810247366f9eed39103aff735c411c60290&ascene=0&uin=MzgxODQ4MjMz&devicetype=Windows+Server+2016+x64&version=6300002f&lang=zh_CN&export 基于smb协议的wmiexec浅析 https://mp.weixin.qq.com/s/CPVrApamQ8q9ZJu_goKq2g 响尾蛇APT组织利用“一带一路”话题针对相关参会人员发起网络攻击 https://www.anquanke.com/post/id/223135