12月17日安全热点 - 预装密码管理器/.NET JIT

 

资讯类

网络中立不会死去

https://www.cnet.com/news/sen-brian-schatz-net-neutrality-is-not-dead/

 

美国政府承认花费2000万美元研究UFO

https://tech.slashdot.org/story/17/12/16/235219/the-us-military-admits-it-spent-22-million-investigating-ufos

 

Windows预装密码管理器可能会有密码泄漏风险

http://securityaffairs.co/wordpress/66802/hacking/keeper-password-manager-flaw.html

 

技术类

工控系统利用框架

https://github.com/dark-lbp/isf

 

详解.NET JIT

http://mattwarren.org/2017/12/15/How-does-.NET-JIT-a-method-and-Tiered-Compilation/

 

CVE-2017-11851 Windows内核本地信息泄漏漏洞

http://www.securityfocus.com/bid/101763

 

黑客以能源机构为目标意欲挖矿

https://www.raconteur.net/technology/hackers-are-after-processing-power-to-get-valuable-bitcoins

 

iOS/MacOS kernel double free due to IOSurfaceRootUserClient not respecting MIG ownership rules

https://cxsecurity.com/issue/WLB-2017120112

 

Usercorn：旨在模拟用户空间的工具

https://github.com/lunixbochs/usercorn

 

通过应用层传输安全保护通信连接

https://security.googleblog.com/2017/12/securing-communications-between-google.html

 

AgentLess WMI Shells

https://www.coresecurity.com/blog/agentless-wmi-shells

 

Fishbook：Facebook开源的iOS安全工具

https://github.com/facebook/fishhook