3月25日-每日安全知识热点

1.从Ruby中调用windows API

http://rubyfu.net/content/module_0x5__exploitation_kung_fu/call_windows_apis.html

2.从防火墙外针对企业的6个最大的威胁 

http://safe.riskiq.com/WC2016MostWantedInfographic_MostWantedInfographicDownloadWebNew.html

3.java紧急补丁，cve-2016-0636能被用来挂马 

https://www.helpnetsecurity.com/2016/03/24/emergency-java-update-cve-2016-0636/

4.盲注时快速Exfiltration的方法 

https://drive.google.com/file/d/0B0tBYiOD2uG7MkpxaFRWTkhOTTA/view?pref=2&pli=1

5.在Exchange 2016服务器上运行windows 杀毒软件 

https://technet.microsoft.com/en-us/library/bb332342(v=exchg.160).aspx

6.2016年针对医院的网络攻击或医疗设备的攻击将会日益增多 

https://securelist.com/blog/research/74249/hospitals-are-under-attack-in-2016/

7.骗子窃取，出售Verizon的企业客户数据 

http://krebsonsecurity.com/2016/03/crooks-steal-sell-verizon-enterprise-customer-data/

8.Maktub恶意勒索软件：美丽而危险 

https://blog.malwarebytes.org/intelligence/2016/03/maktub-locker-beautiful-and-dangerous/

9.如何Hack一个app，8个最佳的实践 

http://techbeacon.com/how-hack-app-8-best-practices-pen-testing-mobile-apps

10.加密体系是好事，可用来预防犯罪 

http://www.flyingpenguin.com/?p=22235

11.ARM64上跟踪Objective-C方法调用 

http://nologic.github.io/blog/2016/02/28/ARM64-method-tracing/

12.EKOParty 2015会议的议题：Windows SMEP Bypass 

https://github.com/n3k/EKOParty2015_Windows_SMEP_Bypass

13.保护您的亚马逊的弹性计算云实例 

https://blogs.mcafee.com/mcafee-labs/secure-instance-amazons-elastic-compute-cloud/

14.10个记忆技巧助你新建安全而好记的密码 

http://www.pandasecurity.com/mediacenter/security/10-memory-tricks-for-creating-safe-and-easy-to-remember-passwords