1月8日每日安全热点 - 土耳其监管集团提议新的加密货币规则法规

360安全客 安全资讯 88389 4

安全工具 Security Tools
LKWA：鲜为人知的Web攻击实验室
https://github.com/weev3/LKWA
CryptoLyzer：一个加密协议分析器
https://gitlab.com/coroner/cryptolyzer
安全事件 Security Incident
FDLP.gov简要分析
https://medium.com/@sshell_/brief-analysis-of-the-fdlp-gov-deface-980caba9c786
US-CERT：伊朗对美军在巴格达的军事打击做出网络反应的潜力告警
https://www.us-cert.gov/ncas/alerts/aa20-006a
安全资讯 Security Information
VPN在勒索软件攻击中广为人知的缺陷
https://www.darkreading.com/attacks-breaches/widely-known-flaw-in-pulse-secure-vpn-being-used-in-ransomware-attacks/d/d-id/1336729
Telegram试图澄清Gram加密项目
https://www.coindesk.com/telegram-tries-to-clarify-gram-crypto-project-amid-ongoing-sec-fight
土耳其监管集团提议新的加密货币规则和法规
https://cryptoslate.com/turkish-regulatory-group-to-propose-new-crypto-rules-and-regulation/
安全研究 Security Research
绕过MyQ Hub
https://www.mcafee.com/blogs/other-blogs/mcafee-labs/we-be-jammin-bypassing-chamberlain-myq-garage-doors
我们如何构建UnpacMe平台
https://www.youtube.com/watch?v=FctDptnYukQ&feature=youtu.be
道德黑客课程—在Azure中构建实验
https://medium.com/@kamran.bilgrami/ethical-hacking-lessons-building-free-active-directory-lab-in-azure-6c67a7eddd7f
为什么在Docker中运行特权容器是个坏主意
https://blog.trendmicro.com/trendlabs-security-intelligence/why-running-a-privileged-container-in-docker-is-a-bad-idea/
跳出单点思维，从上帝视角感知邮件安全态势
https://www.anquanke.com/post/id/196531
安全报告 Security Report
Google Play上发现CVE-2019-2215利用，疑似与SideWinder APT组织存在关联
https://blog.trendmicro.com/trendlabs-security-intelligence/first-active-attack-exploiting-cve-2019-2215-found-on-google-play-linked-to-sidewinder-apt-group/
（完）