6月2日每日安全热点 - VMware Workstation拒绝服务漏洞

360安全客 安全资讯 63707 4

漏洞 Vulnerability
WebSphere SSRF漏洞通告（CVE-2020-4365）
https://mp.weixin.qq.com/s/DvtGr3Sq79XSlIAok9o1HQ
VMware Workstation拒绝服务漏洞
https://blog.talosintelligence.com/2020/06/vulnerability-spotlight-vmware.html?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+feedburner%2FTalos+%28Talos%E2%84%A2+Blog%29
CVE-2020-13362：QEMU megasas OOB漏洞
https://seclists.org/oss-sec/2020/q2/151
安全研究 Security Research
初探施耐德PLC蠕虫技术
https://mp.weixin.qq.com/s/Sc7MzURGYrU6rriHe56ESA
PktMon：Windows 10内置数据包嗅探器
https://isc.sans.edu/diary/Windows+10+Built-in+Packet+Sniffer+-+PktMon/26186
格鲁乌的黑暗？揭露Sandworm黑客组织长达数月的邮件服务器劫持
https://www.freebuf.com/news/238417.html
AI与安全「2」：Attack AI（5）偷人又偷心，破坏机器学习模型机密性的三种手法
https://www.anquanke.com/post/id/207196
Windows内核Fuzzer
https://www.peerlyst.com/posts/resource-windows-kernel-fuzzers-and-tools-chiheb-chebbi?utm_source=twitter&utm_medium=social&utm_content=peerlyst_post&utm_campaign=peerlyst_shared_post
挖洞经验 | 用多态图片实现谷歌学术网站（Google Scholar）XSS漏洞触发
https://www.freebuf.com/vuls/236182.html
Linux内核态缺页会发生什么 – 玩转Exception fixup表
https://mp.weixin.qq.com/s/JUd3GHMjNySp7R6NYump5g
（完）