1月13日每日安全热点 - 新西兰储备银行的数据被黑客窃取

360安全客 安全资讯 22958 4

安全研究 Security Research
CVE-2020-9971: XPC Service 特权提升漏洞分析
https://xlab.tencent.com/en/2021/01/11/cve-2020-9971-abusing-xpc-service-to-elevate-privilege/
我如何窃取数以百万计的Google帐户数据
https://blog.usejournal.com/how-i-stole-the-data-in-millions-of-peoples-google-accounts-aa1b72dcc075
攻击OAuth：Redirect_URI
https://gupta-bless.medium.com/exploiting-oauth-redirect-uri-3e27de6d7a70
利用Beacon Object File通过线程劫持进行远程进程注入
https://connormcgarr.github.io/thread-hijacking/
Real World CTF 2020 Game2048 Writeup
https://r3kapig.com/writeup/20210111-rwctf-game2048/
Hyper-V 调试方式探索
https://hvinternals.blogspot.com/2021/01/hyper-v-debugging-for-beginners-2nd.html
恶意软件 Malware
BORG ：一个快速进化的僵尸网络
https://security.tencent.com/index.php/blog/msg/175
Sunburst后门分析
https://securelist.com/sunburst-backdoor-kazuar/99981/
EMOTET：通过电子邮件传播方式对其溯源
https://github.com/cecio/EMOTET-2020-Reversing
安全事件 Security Incident
新西兰储备银行的数据被黑客窃取
https://www.bleepingcomputer.com/news/security/new-zealand-reserve-bank-suffers-data-breach-via-hacked-storage-partner/
联合泄漏了超过10万个环境署工作人员记录
https://www.bleepingcomputer.com/news/security/united-nations-data-breach-exposed-over-100k-unep-staff-records/
（完）