3月2日-每日安全知识热点

1.包注入攻击分析

https://www.netresec.com/?page=Blog&month=2016-03&post=Packet-Injection-Attacks-in-the-Wild

2.微软公布windows defender高级威胁保护 

https://blogs.windows.com/windowsexperience/2016/03/01/announcing-windows-defender-advanced-threat-protection/

3.cachebleed:在OpenSSL的恒定时间RSA的时间攻击 

http://ssrg.nicta.com.au/projects/TS/cachebleed//

4.Drown攻击（sslv2) 

https://www.drownattack.com/

5.恶意andorid软件发现，逆向，取证 

http://www.elladodelmal.com/2016/03/malware-en-android-discovering.html

6.ctb-locker回来了， 针对web服务器版本 

https://securelist.com/blog/research/73989/ctb-locker-is-back-the-web-server-edition/

7.Cobalt Strike 介绍视频 

https://www.youtube.com/watch?v=XTDGz3CXYMw&feature=youtu.be

8.反混淆恶意的vbscript脚本 

https://blog.malwarebytes.org/intelligence/2016/02/de-obfuscating-malicious-vbscripts/

9.Netflix和Uber用户，网络犯罪份子最喜欢的目标 

http://blog.trendmicro.com/trendlabs-security-intelligence/netflix-and-uber-users-cybercriminals-latest-favored-hacking-targets/

10.Samas恶意欺诈软件分析 

https://blogs.mcafee.com/mcafee-labs/targeted-ransomware-no-longer-future-threat/

11.新的恶意软件'罗孚'目标针对印度驻阿富汗大使 

http://researchcenter.paloaltonetworks.com/2016/02/new-malware-rover-targets-indian-ambassador-to-afghanistan/

12.John McAfee 接受国家电视采访，解释如何破解iphone 

https://www.youtube.com/watch?v=MG0bAaK7p9s&feature=youtu.be

13.mime类型文件反混淆工具 

http://blog.didierstevens.com/2016/02/29/more-obfuscated-mime-type-files/

14.palo alto防火墙在闰年不能够更新 

https://danielmiessler.com/blog/palo-alto-firewalls-cant-update-on-leap-year-day/

15.分析一个最近的mysql exploit利用 

https://isc.sans.edu/forums/diary/Quick+Analysis+of+a+Recent+MySQL+Exploit/2078