安全工具 Security Tools SirepRAT： Windows IoT core版上作为SYSTEM的远程命令执行 https://github.com/SafeBreach-Labs/SirepRAT/ 403Bypasser：Burpsuite扩展程序绕过403受限目录 https://github.com/sting8k/BurpSuite_403Bypasser 安全资讯 Security Information 他国政府支持的黑客破坏了美国财政部 https://www.reuters.com/article/usa-cyber-amazoncom/exclusive-u-s-treasury-breached-by-hackers-backed-by-foreign-government-sources-idUSL1N2IT0HS 美国机构被外国网络间谍组织攻击可能和俄罗斯有关 https://www.wsj.com/articles/agencies-hacked-in-foreign-cyber-espionage-campaign-11607897866 黑客使用Pay2Key勒索软件入侵了Intel公司Habana实验室 https://www.bleepingcomputer.com/news/security/intels-habana-labs-hacked-by-pay2key-ransomware-data-stolen/ 安全研究 Security Research 识别和利用SQL注入：手动和自动方式 https://medium.com/bugbountywriteup/identifying-exploiting-sql-injection-manual-automated-79c932f0c9b5 逆向TP-Link HS110 https://www.softscheck.com/en/reverse-engineering-tp-link-hs110/ 恶意软件 Malware 逆向QakBot https://0xthreatintel.medium.com/reversing-qakbot-tlp-white-d1b8b37ad8e7 安全报告 Security Report 物联网-云融合安全指南 https://www.trendmicro.com/vinfo/us/security/news/internet-of-things/a-security-guide-to-iot-cloud-convergence PGMiner：利用PostgreSQL漏洞的新的加密货币挖矿僵尸网络 https://unit42.paloaltonetworks.com/pgminer-postgresql-cryptocurrency-mining-botnet/ 广泛传播的恶意软件活动旨在将广告静默地注入搜索结果中，影响多个浏览器 https://www.microsoft.com/security/blog/2020/12/10/widespread-malware-campaign-seeks-to-silently-inject-ads-into-search-results-affects-multiple-browsers/