漏洞 Vulnerability MyBatis 远程代码执行漏洞CVE-2020-26945 https://mp.weixin.qq.com/s/dZeGgcFHo729_tzqQ5mC1g 安全工具 Security Tools moneta：一款实时检测内存 IoC 的工具 https://github.com/forrest-orr/moneta 安全报告 Security Report BlackBerry发布关于BAHAMUT组织的分析报告 https://www.infosecurity-magazine.com/news/cyber-espionage-bahamut-staggering/ 安全资讯 Security Information 二维码：一种隐秘的安全威胁 https://threatpost.com/qr-codes-sneaky-security-threat/159757/ 比特币钱包更新存在漏洞被恶意利用造成2200万美元损失 https://www.zdnet.com/article/bitcoin-wallet-trick-has-netted-criminals-more-than-22-million/ 多个安全公司联合行动，破坏 TrickBot 僵尸网络的基础设施 https://www.zdnet.com/article/microsoft-and-other-tech-companies-orchestrate-takedown-of-trickbot-botnet/ 安全研究 Security Research 检测父进程欺骗 https://blog.f-secure.com/detecting-parent-pid-spoofing/ Tor安全研究：发现客户端IP地址 https://www.freebuf.com/articles/web/250329.html Tomcat 内存马检测 https://www.anquanke.com/post/id/219177 browser-pwn cve-2020-6418 漏洞分析 https://paper.seebug.org/1358/ 从安全切面到Security Mesh https://mp.weixin.qq.com/s/cMYgqICxUHJ2519RYQYtsg ShadowMove：隐蔽的横向移动策略 https://mp.weixin.qq.com/s/f4QKtL77ByVopHhRcG1Y2g 恶意软件 Malware Bitdefender：使用 Golang 编写的远控分析 https://labs.bitdefender.com/2020/10/theres-a-new-a-golang-written-rat-in-town/