漏洞 Vulnerability 2020-10 补丁日:Oracle多个产品高危漏洞安全风险通告 https://cert.360.cn/warning/detail?id=75615f02bfa65afbcbcf9800423dfeb3 安全研究 Security Research 趋势科技：使用SLUB恶意软件进行相关的水坑攻击 https://www.trendmicro.com/vinfo/us/security/news/cyber-attacks/operation-earth-kitsune-tracking-slub-s-current-operations Windows 中关于CET的改进 https://windows-internals.com/pages/internals-blog/ Calendar Alerts：macOS上的一种持久化技术 https://www.anquanke.com/post/id/219829 Interplanetary Storm Golang 僵尸网络 https://paper.seebug.org/1373/ 安全资讯 Security Information 美国指控NotPetya爆发，乌克兰断电，冬奥会攻击背后的俄罗斯黑客 https://www.zdnet.com/article/us-charges-russian-hackers-behind-notpetya-killdisk-olympicdestroyer-attacks/ 使用勒索软件的组织将部分赎金捐赠给慈善组织 https://www.zdnet.com/article/ransomware-gang-donates-part-of-ransom-demands-to-charity-organizations/ 微软在美国大选前打击勒索软件，拆除了Trickbot的部分C2 https://blogs.microsoft.com/on-the-issues/2020/10/12/trickbot-ransomware-cyberthreat-us-elections/ 恶意软件 Malware Donot team组织（apt-35）针对“微信群体”攻击活动分析 https://www.anquanke.com/post/id/219995 GravityRAT针对印度的Android和MacOS https://www.darkreading.com/attacks-breaches/gravityrat-spyware-targets-android-and-macos-in-india/d/d-id/1339218