1月10日每日安全热点 - 伊朗APT组织入侵沙特石油公司

360安全客 安全资讯 67761 4

漏洞 Vulnerability
索尼Playstation 4（PS4）<6.72 WebKit代码执行漏洞
https://cxsecurity.com/issue/WLB-2020010071
JetBrains TeamCity 2018.2.4远程执行代码
https://cxsecurity.com/issue/WLB-2020010071
CVE-2019-17026 firefox 0DAY
https://www.mozilla.org/en-US/security/advisories/mfsa2020-03/#CVE-2019-17026
Oracle Weblogic 10.3.6.0.0-远程命令执行
https://www.exploit-db.com/exploits/47895
安全工具 Security Tools
应急响应日志分析小脚本
https://www.freebuf.com/sectool/223446.html
ICS 工业控制系统的ATTCK
https://collaborate.mitre.org/attackics/index.php/Main_Page
安全报告 Security Report
2019年移动安全总结
https://www.anquanke.com/post/id/196979
北美电力实体的威胁状况
https://dragos.com/blog/industry-news/the-state-of-threats-to-electric-entities-in-north-america/
安全资讯 Security Information
美伊冲突转移到网络领域
https://www.pandasecurity.com/mediacenter/mobile-news/us-iran-conflict-cyber-world/
伊朗APT组织入侵沙特石油公司
https://www.zdnet.com/article/new-iranian-data-wiper-malware-hits-bapco-bahrains-national-oil-company/
东南亚10国联合网络行动，打击IOT犯罪
https://www.bitdefender.com/box/blog/iot-news/cryptojacked-routers-reduce-78-se-asia-following-operation-goldfish-alpha/
安全研究 Security Research
CVE-2019-1215：Windows内核ws2ifsl.sys中UAF漏洞分析
https://www.anquanke.com/post/id/196893
伊朗对沙特发起网络攻击
https://www.scribd.com/document/442225568/Saudi-Arabia-CNA-report
区块链中的几个技术点
https://paper.seebug.org/1110/
Pwn 盲打（Bilnd Pwn）的一般解决思路
https://www.anquanke.com/post/id/196722
Muddy Water 攻击分析报告
https://blog.prevailion.com/2020/01/summer-mirage.html?m=1
ATT&CK之防御逃逸
https://www.freebuf.com/articles/network/223910.html
（完）