1月15日每日安全热点 - 英特尔修复了性能分析工具中的严重缺陷

360安全客 安全资讯 41701 4

漏洞 Vulnerability
CVE-2020-0601 Windows CryptoAPI 签名校验机制欺骗漏洞
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0601
VMware 修复了本地权限提升漏洞CVE-2020-3941
https://www.vmware.com//security/advisories/VMSA-2020-0002.html
Adobe Illustrator CC | APSB20-03 任意代码执行漏洞
https://helpx.adobe.com/security/products/illustrator/apsb20-03.html
安全资讯 Security Information
英特尔修复了性能分析工具中的严重缺陷
https://threatpost.com/intel-fixes-high-severity-flaw-in-performance-analysis-tool/151837/
Google 支持 Kubernetes Bug 赏金计划
https://security.googleblog.com/2020/01/securing-open-source-how-google.html
安全工具 Security Tools
Gtfo – 搜索 unix 系统中绕过系统安全限制的可执行文件
https://www.kitploit.com/2020/01/gtfo-search-for-unix-binaries-that-can.html?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+PentestTools+%28PenTest+Tools%29
安全事件 Security Incident
澳大利亚丛林大火捐款网站遭Magecart信用卡盗用攻击
https://securityintelligence.com/news/australian-bushfires-donation-website-compromised-by-magecart-credit-card-skimming-attack/
安全研究 Security Research
HTTPS流量在恶意软件中的使用分析
https://www.netresec.com/?page=Blog&month=2020-01&post=Sharing-a-PCAP-with-Decrypted-HTTPS
软件生命周期结束后如何保证安全性
https://www.darkreading.com/theedge/how-to-keep-security-on-life-support-after-software-end-of-life/b/d-id/1336790
CVE-2019-1384 Ghost Potato 复现分析
https://xz.aliyun.com/t/7087
（完）