安全工具 Security Tools Crowdsec – 一款开源的终端安全检测产品 https://github.com/crowdsecurity/crowdsec SlabDbg – 用于辅助调试Linux内核 SLUB 内存管理的脚本 https://github.com/NeatMonster/slabdbg MaMoCrypt勒索软件解密工具 https://labs.bitdefender.com/2020/10/mamocrypt-ransomware-decryption-tool/ 安全报告 Security Report SlothfulMedia恶意程序报告 https://us-cert.cisa.gov/ncas/analysis-reports/ar20-275a 安全研究 Security Research 从内而外破解HTTP CORS：理论到实践 https://medium.com/bugbountywriteup/hacking-http-cors-from-inside-out-512cb125c528 Windows Defender 应用控制的推荐阻断规则分析 https://bohops.com/2020/10/15/exploring-the-wdac-microsoft-recommended-block-rules-visualuiaverifynative/ 利用Linux内核中的栈漏洞泄露内核指针 https://www.usenix.org/system/files/woot20-paper1-slides-cho.pdf QEMU KVM学习笔记 https://github.com/yifengyou/learn-kvm 安全事件 Security Incident Barnes & Noble遭网络攻击：消费者邮箱、购买记录被盗 https://www.cnbeta.com/articles/tech/1040853.htm 波多黎各消防局的服务器遭到攻击 https://securityaffairs.co/wordpress/109551/hacking/puerto-rico-firefighting-department-attack.html