1月21日-每日安全知識熱點

2016-01-21 10:08:48 來源：360安全播報 閱讀：71次 點贊(0) 收藏

分享到：

1.深入分析CVE-2016-0010:微軟office rtf 檔案處理堆溢出漏洞

http://blog.fortinet.com/post/deep-analysis-of-cve-2016-0010-microsoft-office-rtf-file-handling-heap-overflow-vulnerability

2.linux核心rop第一部分

https://cyseclabs.com/page?n=17012016

3.伺服器安全:OSSEC整合slack和pagerduty

https://blog.sucuri.net/2016/01/server-security-integrating-ossec-with-slack-and-pagerduty.html

4.對烏克蘭的電力行業新的一波攻擊

http://www.welivesecurity.com/2016/01/20/new-wave-attacks-ukrainian-power-industry/

5.andorid木馬預先安裝在飛利浦s307韌體

http://news.drweb.com/show/?i=9792&lng=en&c=5

6.BSides NYC 2016 安全會議PPT

https://github.com/bsidesnyc/BSidesNYC2016/wiki/Agenda

7.OPENCART LFI緩解繞過

http://www.openwall.com/lists/oss-security/2016/01/19/16

8.Asacub木馬:從間諜軟體到銀行惡意軟體

https://securelist.com/?p=73211

9.這些裝置嘗試安全IOT

http://motherboard.vice.com/read/these-devices-are-trying-to-secure-the-internet-of-hackable-things

10.通過Flooding SIP欺騙VoIP

http://resources.infosecinstitute.com/cheating-voip-security-by-flooding-the-sip/

11.基於DNS的流量攻擊

https://nymity.ch/dns-traffic-correlation/

12.明白wmi惡意軟體

http://la.trendmicro.com/media/misc/understanding-wmi-malware-research-paper-en.pdf

13.SSH隧道Fun And profit

http://blog.cylance.com/puttering-into-the-future

http://www.everythingcli.org/ssh-tunnelling-for-fun-and-profit-autossh/

14.GCC tiny:構建GCC前端的語言

http://thinkingeek.com/gcc-tiny/

15.攻擊者尋求破解硬體的終極控制

https://blogs.mcafee.com/mcafee-labs/attackers-seek-to-hack-hardware-for-ultimate-control/

16.音樂樣式的廣告軟體引向Angler

https://blog.malwarebytes.org/fraud-scam/2016/01/tech-support-scammers-lure-users-with-fake-norton-warnings-turn-out-to-be-symantec-reseller/

http://research.zscaler.com/2016/01/music-themed-malvertising-lead-to-angler.html

17.濫用 SQLITE3 分詞器繞過php安全限制

http://chichou.0ginr.com/blog/1336/abuse-sqlite3-ext-to-bypass-php-security-restrictions

18.Avast沙箱逃逸

http://code.google.com/p/google-security-research/issues/detail?id=700#c3

本文由 360安全播報 原創發布，如需轉載請註明來源及本文地址。本文地址：http://bobao.360.cn/news/detail/2653.html

