6月22日每日安全热点 - TCP/IP 软件库Ripple20漏洞

360安全客 安全资讯 92164 4

漏洞 Vulnerability
CVE-2020-12856：COVIDSafe 手机应用程序存在的一个蓝牙漏洞
https://github.com/alwentiu/COVIDSafe-CVE-2020-12856
CVE-2020-12388：FF Sandbox逃逸
https://googleprojectzero.blogspot.com/2020/06/ff-sandbox-escape-cve-2020-12388.html
TCP/IP 软件库Ripple20漏洞
https://www.jsof-tech.com/ripple20/
CVE-2020-1170 ：Microsoft Windows Defender 提权漏洞分析
https://itm4n.github.io/cve-2020-1170-windows-defender-eop/
CVE-2020-1299：Microsoft Windows LNK 远程代码执行漏洞分析
https://blog.vincss.net/2020/06/cve49-microsoft-windows-lnk-remote-code-execution-vuln-cve-2020-1299-eng.html
恶意软件 Malware
Emotet 僵尸网络架构分析
https://hello.global.ntt/en-us/insights/blog/behind-the-scenes-of-the-emotet-infrastructure
安全研究 Security Research
数字取证和事件响应
https://www.jaiminton.com/cheatsheet/DFIR/#
Hyper-V — EXO分区内存访问分析
http://hvinternals.blogspot.com/2020/06/hyper-v-memory-internals-exo-partition.html
macOS机制分析合集
http://lockboxx.blogspot.com/2020/06/macos-post-summary.html
Hyper-V 研究相关的工具
https://github.com/FoxHex0ne/BlogHyperV
js引擎相关机制分析
https://hacks.mozilla.org/2020/06/compiler-compiler-working-on-a-javascript-engine/
安全工具 Security Tools
IntelMCDowngrade：从 CPUMicrocodes仓库下载 CPU微码工具
https://github.com/danielmgmi/IntelMCDowngrade
scapy构造网络包教程
https://scapy.disruptivelabs.in/
Intel, AMD, VIA 、 Freescale CPU 微码仓库
https://github.com/platomav/CPUMicrocodes
（完）