漏洞 Vulnerability 2020-06 补丁日: 微软多个产品高危漏洞安全风险通告 https://cert.360.cn/warning/detail?id=8df2cb3b1fd3224325d83bbd6ef5f79e CVE-2020-1301: Windows SMB v1 远程代码执行漏洞通告 https://cert.360.cn/warning/detail?id=cdee8a9ddc47a7358b8791272e01c579 安全资讯 Security Information 黑客正在攻击德国PPE供应链 https://www.bleepingcomputer.com/news/security/hackers-are-attacking-the-german-ppe-supply-chain/ 安全报告 Security Report 对Valak恶意软件的详细分析 https://assets.sentinelone.com/labs/sentinel-one-valak-i 安全研究 Security Research CVE-2020-1301: SMBLost 漏洞分析 https://airbus-cyber-security.com/diving-into-the-smblost-vulnerability-cve-2020-1301/ 近期研究人员发现英特尔CPU容易受到新的“ SGAxe”和“ CrossTalk”侧通道攻击 https://thehackernews.com/2020/06/intel-sgaxe-crosstalk-attacks.html 使用Windows Telemetry的新持久化技术 https://www.trustedsec.com/blog/abusing-windows-telemetry-for-persistence/ 利用字节暴力破解的方式在远程64位服务器上击败STACK CANARY，DEP，ASLR，PIE https://www.ret2rop.com/2020/05/canary-pie-byte-bruteforce.html ZecOps公布SMBGhost的一种新的利用方式 https://github.com/ZecOps/CVE-2020-0796-RCE-POC CVE-2020-1206：SMBleed漏洞分析 https://blog.zecops.com/vulnerabilities/smbleedingghost-writeup-chaining-smbleed-cve-2020-1206-with-smbghost/