9月9日每日安全热点 - 攻击高通Adreno GPU

360安全客 安全资讯 90095 4

漏洞 Vulnerability
WSUS Attacks Part 2: CVE-2020-1013 a Windows 10 本地提权 1-Day
https://www.gosecure.net/blog/2020/09/08/wsus-attacks-part-2-cve-2020-1013-a-windows-10-local-privilege-escalation-1-day/
CVE-2020-0605：.NET处理XPS文件时的命令执行
https://xz.aliyun.com/t/8245
安全工具 Security Tools
MaskProcessor：一款功能强大的高性能字典生成器
https://github.com/hashcat/maskprocessor
RoguePotato :Windows 本地提权漏洞
https://github.com/antonioCoco/RoguePotato
安全资讯 Security Information
国务委员兼外长王毅：中国愿发起《全球数据安全倡议》
https://www.freebuf.com/news/249105.html
2020上半年出行行业黑灰产研究报告
https://mp.weixin.qq.com/s/sQJRZZonTF7bjCs1jd_H9A
安全研究 Security Research
Google CTF 2020传送Chromium沙箱逃逸
https://trungnguyen1909.github.io/blog/post/GGCTF20/
httponly扩大成果之Websocket源码映射
https://www.freebuf.com/articles/web/247217.html
攻击高通Adreno GPU
https://googleprojectzero.blogspot.com/2020/09/attacking-qualcomm-adreno-gpu.html
Metasploit免杀初探索
https://www.freebuf.com/articles/network/249014.html
恶意软件 Malware
ShadowPad：APT41使用的新工具
https://www.ptsecurity.com/ru-ru/research/pt-esc-threat-intelligence/shadowpad-novaya-aktivnost-gruppirovki-winnti/
（完）