安全报告 Security Report 微软内部威胁防护：用于发现和停止横向移动的攻击模型 https://www.microsoft.com/security/blog/2020/06/10/the-science-behind-microsoft-threat-protection-attack-modeling-for-finding-and-stopping-evasive-ransomware/ Rovnix Bootkit 恶意软件相关活动分析 https://paper.seebug.org/1253/ 安全研究 Security Research NETGEAR NIGHTHAWK R6700路由器堆溢出漏洞分析 https://www.zerodayinitiative.com/blog/2020/6/24/zdi-20-709-heap-overflow-in-the-netgear-nighthawk-r6700-router 使用定制化的Ysoserial攻击java反序列化漏洞 https://rhinosecuritylabs.com/research/java-deserializationusing-ysoserial/ 微软APT研究团队：缓解已受攻击的Exchange服务器所造成的影响 https://www.microsoft.com/security/blog/2020/06/24/defending-exchange-servers-under-attack/ FreeRDP 越界读信息泄漏漏洞分析 https://securitylab.github.com/advisories/GHSL-2020-100-FreeRDP NCCGroup 团队对 Evil Corp 组织开发的 WastedLocker 勒索软件的分析 https://research.nccgroup.com/2020/06/23/wastedlocker-a-new-ransomware-variant-developed-by-the-evil-corp-group/ JBOSS 无文件 webshell 的技术研究 https://paper.seebug.org/1252/ 攻击由Bitdefender保护的网站，实现RCE https://palant.info/2020/06/22/exploiting-bitdefender-antivirus-rce-from-any-website/ 安全资讯 Security Information Github推出针对CodeQL的论坛用于解决用户使用问题 https://github.com/github/securitylab/discussions