1月4日每日安全热点 - 因SolarWinds后门Microsoft源代码遭泄露

360安全客 安全资讯 50991 4

漏洞 Vulnerability
CVE-2020-35728：FasterXML jackson-databind 2.x RCE漏洞
https://github.com/Al1ex/CVE-2020-35728
Dubbo 2.7.8多个远程代码执行漏洞
https://xz.aliyun.com/t/8917
安全工具 Security Tools
AMNESIA:33 检测工具
https://github.com/Forescout/project-memoria-detector
恶意软件 Malware
新型Golang蠕虫在服务器上投放XMRig Miner
https://www.intezer.com/blog/research/new-golang-worm-drops-xmrig-miner-on-servers/?fbclid=IwAR3eFiHCNoqr5mc2UAOcm8nocjUOjZn0cpcAiSoYmn__JtJfBbjqUUT1OwQ
安全事件 Security Incident
由于SolarWinds后门，Microsoft源代码遭泄露
https://msrc-blog.microsoft.com/2020/12/31/microsoft-internal-solorigate-investigation-update/
欧洲药品管理局有关Covid-19疫苗的文件在暗网泄露
https://cybleinc.com/2020/12/31/documents-relating-to-covid-19-vaccine-of-european-medicines-agency-allegedly-leaked-in-darkweb/
安全资讯 Security Information
2010-2020十年综述：10个最常见的安全漏洞
https://www.ehackingnews.com/2021/01/2010-2020-decade-roundup-10-most.html
2021年网络安全趋势预测
https://threatpost.com/2021-cybersecurity-trends/162629/
安全研究 Security Research
CVE-2020-15257-host模式容器逃逸漏洞分析
https://xz.aliyun.com/t/8925
（完）