漏洞 Vulnerability GitLab文件读取远程代码执行 https://cxsecurity.com/issue/WLB-2020120076 安全工具 Security Tools Wireshark Analyzer 3.4.1 https://packetstormsecurity.com/files/160440/wireshark-3.4.1.tar.xz 安全事件 Security Incident 黑客正在暗网上出售超过85,000个MySQL数据库 https://www.databreaches.net/hackers-are-selling-more-than-85000-sql-databases-on-a-dark-web-portal/ 黑客从流行的应用窃取并出售4000个.nz电子邮件地址和密码 https://www.databreaches.net/hackers-sell-4000-nz-email-addresses-passwords-stolen-from-popular-app/ 安全资讯 Security Information “指纹劫持”攻击技术操纵Android UI https://www.darkreading.com/threat-intelligence/fingerprint-jacking-attack-technique-manipulates-android-ui-/d/d-id/1339684 思科解决了Jabber中严重的RCE漏洞 https://securityaffairs.co/wordpress/112163/hacking/cisco-jabber-rce.html MoleRats APT使用Facebook和Dropbox进行间谍活动 https://threatpost.com/molerats-apt-espionage-facebook-dropbox/162162/ 勒索软件Campaign的目标是MySQL服务器 https://www.infosecurity-magazine.com/news/ransomware-campaign-targets-mysql/ 安全研究 Security Research BypassAv小技巧 https://sec-in.com/article/733 CVE-2020-17049 Kerberos Bronze Bit 攻击复现 https://mp.weixin.qq.com/s?__biz=MzU0MjUxNjgyOQ==&mid=2247486399&idx=1&sn=b95f17f831387e049b67636f1afbe1ec 设置iptables规则来保护CS服务器 https://mp.weixin.qq.com/s?__biz=Mzg2NjQ2NzU3Ng==&mid=2247486051&idx=1&sn=8aaa4f04a30c1f4fd91d4bede5c26c92