3月2日安全热点 - GitHub已遭大规模DDoS攻击 高达1.3Tbps

 

 

资讯类

GitHub 已遭基于 Memcached 的 DDoS 攻击 规模达 1.3 Tbps
https://www.bleepingcomputer.com/news/security/new-ddos-record-set-at-13-tbps-thanks-to-memcached-servers/
http://www.zdnet.com/article/github-was-hit-with-the-largest-ddos-attack-ever-seen/
https://blog.cloudflare.com/memcrashed-major-amplification-attacks-from-port-11211/

 

微软与英特尔合作，通过Windows更新提供CPU微代码修复
https://www.bleepingcomputer.com/news/security/microsoft-partners-with-intel-to-deliver-cpu-microcode-fixes-via-windows-updates/

 

CISCO软件出现严重漏洞，服务器无需密码可远程登录

CISCO软件出现严重漏洞，服务器无需密码可远程登录

 

惠普远程管理工具中的漏洞使服务器面临危险

Bug in HP Remote Management Tool Leaves Servers Open to Attack

 

AdBlock添加了功能来缓存流行的JavaScript库

流行的阻止广告的浏览器扩展AdBlock添加了一项新功能，可以在用户的​​计算机上本地缓存流行的JavaScript库。

https://www.bleepingcomputer.com/news/software/adblock-adds-feature-to-cache-popular-javascript-libraries/
https://threatpost.com/ad-network-circumvents-ad-blocking-tools-to-run-in-browser-cryptojacker-scripts/130161/

 

技术类

python沙箱逃逸小结

https://blog.sectown.cn/archives/41/

 

基于Memcached分布式系统DRDoS拒绝服务攻击技术研究
http://blog.csdn.net/microzone/article/details/79262549?from=timeline&isappinstalled=0

 

Enumeration sub domains(枚举子域名)
https://github.com/FeeiCN/ESD

 

通过未初始化的缓冲区实现VMWARE利用
https://www.zerodayinitiative.com/blog/2018/3/1/vmware-exploitation-through-uninitialized-buffers

 

漏洞聚焦：简单DirectMedia图层的SDL2_Image漏洞

http://blog.talosintelligence.com/2018/03/vulnerability-spotlight-simple.html

 

亲爱的开发人员，谨防DNS重新绑定
https://www.twistlock.com/2018/02/28/dear-developers-beware-dns-rebinding/

 

以太坊区块链上的Eclipse攻击
https://bitcoinmagazine.com/articles/researchers-explore-eclipse-attacks-ethereum-blockchain/
http://www.cs.bu.edu/~goldbe/projects/eclipseEth.pdf

 

Announcing Rust 1.24.1

https://blog.rust-lang.org/2018/03/01/Rust-1.24.1.html

 

在Go中使用反向代理进行网络钓鱼
https://medium.com/@cooperthecoder/phishing-with-a-reverse-proxy-23dd99557b5b