漏洞 Vulnerability 【更新1.0: PoC发布】CVE-2020-1350: Windows DNS Server蠕虫级远程代码执行漏洞通告 https://cert.360.cn/warning/detail?id=9c5f725d5c9cb0ea1bae9ca6d9922656 CVE-2020-15504：Sophos XG RCE漏洞分析（Part 2） https://www.anquanke.com/post/id/210817 安全工具 Security Tools Find the host network card address through OXID Resolver https://github.com/Rvn0xsy/OXID-Find 安全事件 Security Incident 警惕新型nginx后门 https://mp.weixin.qq.com/s/uZGg5rm4nTZ7UicqnToCFA 安全资讯 Security Information 4种危险的巴西银行木马正试图劫持全球用户 https://thehackernews.com/2020/07/brazilian-banking-trojan.html 黑客获取Citrix Systems 200万用户，涉及全球内客户信息 https://www.hackread.com/citrix-hacked-exposing-2000000-users-database/ 安全研究 Security Research 通过Exchange ActiveSync访问内部文件共享 https://www.4hou.com/posts/Vlnz 针对宝塔的RASP及其disable_functions的绕过 https://xz.aliyun.com/t/7990 内网Mysql代理浅析 https://xz.aliyun.com/t/7993