漏洞 Vulnerability CVE-2020-8437: uTorrent 漏洞和 EXP 解读 https://blog.whtaguy.com/2020/09/utorrent-cve-2020-8437-vulnerability.html Instagram 远程代码执行漏洞（安卓 和 IOS 平台）分析 https://research.checkpoint.com/2020/instagram_rce-code-execution-vulnerability-in-instagram-app-for-android-and-ios/ 安全资讯 Security Information Google 浏览器桌面版更新到 85.0.4183.121，修复了多个高危漏洞 https://chromereleases.googleblog.com/2020/09/stable-channel-update-for-desktop_21.html 资讯：Windows XP 源码泄露 ？！ https://www.reddit.com/r/technews/comments/iz4778/the_windows_xp_source_code_has_been_leaked_on/ 恶意软件 Malware talos 出品：使用科学和艺术的方法检测 Cobalt Strike https://talos-intelligence-site.s3.amazonaws.com/production/document_files/files/000/095/031/original/Talos_Cobalt_Strike.pdf?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIXACIED2SPMSC7GA%2F20200925%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20200925T031520Z&X-Amz-Expires=3600&X-Amz-SignedHeaders=host&X-Amz-Signature=25a56cb5265ff1bebb4878990e3ca64f37833dbbbdda189b9a2cce447a4d30b2 微软：在云端检测 Empire，捕获 gadolinium 恶意组织活动 https://www.microsoft.com/security/blog/2020/09/24/gadolinium-detecting-empires-cloud/ Mispadu 银行木马重现及分析 https://www.trendmicro.com/vinfo/us/security/news/cybercrime-and-digital-threats/mispadu-banking-trojan-resurfaces 赛门铁克：针对金融部门的联合组织攻击活动披露 https://symantec.broadcom.com/hubfs/SED-Threats-Financial-Sector.pdf 安全工具 Security Tools gTunnel：一个基于Golang的TCP隧道 https://www.freebuf.com/sectool/246015.html 安全研究 Security Research APT 41 模拟仿真计划 https://security-tzu.com/2020/09/23/emulation-plan-for-apt41/ Go二进制文件逆向分析从基础到进阶——itab与strings https://www.anquanke.com/post/id/218377 fuzz windows 图像解析器（第一部分）：颜色配置文件 https://www.fireeye.com/blog/threat-research/2020/09/fuzzing-image-parsing-in-windows-color-profiles.html 针对 Tiny Tiny RSS 的漏洞研究 https://www.digeex.de/blog/tinytinyrss/ 通达OA11.7 后台sql注入到rce漏洞分析 https://www.anquanke.com/post/id/218407 安全报告 Security Report 美国爱因斯坦计划跟踪与解读（2020） https://mp.weixin.qq.com/s/-Gvsw88lUPjBqcT5UpSIFg 应急分析报告：美网络安全和基础设施安全局（CISA）针对联邦企业被攻击发布的应急分析报告 https://us-cert.cisa.gov/ncas/analysis-reports/ar20-268a