漏洞 Vulnerability CVE-2020-35489：在Contact Form 7插件中发现的不受限制的文件上传漏洞影响500万网站 https://blog.wpsec.com/contact-form-7-vulnerability/ 安全工具 Security Tools 通过加密的zip执行shellcode https://github.com/jfmaes/SharpZipRunner 安全报告 Security Report 暗网上的SolarWinds漏洞的证据 https://www.darkowl.com/blog-content/evidence-of-solarwinds-vulnerabilities-on-the-darknet SolarStorm供应链攻击的时间轴透视 https://unit42.paloaltonetworks.com/solarstorm-supply-chain-attack-timeline/ 暗网市场和论坛上的网络武器 https://www.darkowl.com/blog-content/cyber-weapons-on-darknet-marketplaces-and-forums 软件供应链来源攻击分析报告 https://mp.weixin.qq.com/s/ypKn7uanv7oSDc4h8zvmgQ 安全资讯 Security Information macOS 用戶當心！北韓駭客 Lazarus 將目標瞄準虛擬貨幣交易用戶 https://teamt5.org/tw/posts/north-korea-linked-lazarus-apt-uses-a-macos-malware-in-cryptocurrency-exchange-attack/ 安全研究 Security Research ByteCTF WP-无需mail bypass disable_functions https://xz.aliyun.com/t/8669 分析Cobalt Strike 有效负载 https://www.randhome.io/blog/2020/12/20/analyzing-cobalt-strike-for-fun-and-profit/ 使用Falco检测CVE-2020-8554 https://sysdig.com/blog/detect-cve-2020-8554-using-falco/ 恶意软件 Malware Magniber勒索软件已更改漏洞（CVE-2019-1367-> CVE-2020-0968）并尝试绕过行为检测 https://asec.ahnlab.com/en/19273/