安全报告 Security Report SolarWinds Orion插件的其他技术细节 https://www.fireeye.com/blog/threat-research/2020/12/sunburst-additional-technical-details.html Lazarus 黑客组织瞄准 COVID-19 进行恶意活动 https://securelist.com/lazarus-covets-covid-19-related-intelligence/99906/ “灵猫”组织针对中东地区的攻击活动分析报告 https://mp.weixin.qq.com/s?__biz=MjM5MTA3Nzk4MQ==&mid=2650180570&idx=1&sn=98501d91581357a68912ea8d6d50fb57 安全研究 Security Research 入侵检测系列1（下）：基于私有协议的加密流量分析思路（Teamviewer篇） https://www.anquanke.com/post/id/226531 Microsoft SQL Server Reporting Services权限提升漏洞复现（CVE-2020-0618） https://forum.90sec.com/t/topic/1482 安全工具 Security Tools Social-Analyzer-用于在+300个社交媒体网站上分析和查找人员资料的API和Web应用程序（检测定期更新） https://www.kitploit.com/2020/12/social-analyzer-api-and-web-app-for.html Aura-大规模的Python源代码审计和静态分析工具 https://www.kitploit.com/2020/12/aura-python-source-code-auditing-and.html 安全资讯 Security Information TaskRabbit遭到凭据填充攻击，被迫重置用户密码 https://latesthackingnews.com/2020/12/26/taskrabbit-reset-passwords-after-credential-stuffing-attack/ 黑客利用假的亚马逊礼品卡分发Dridex恶意软件 https://www.bleepingcomputer.com/news/security/fake-amazon-gift-card-emails-deliver-the-dridex-malware/ 微软和McAfee联合成立“勒索软件特别工作组” https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649737116&idx=1&sn=8f27cef62b23426f5c39931c7889e596