Tencent Security Xuanwu Lab Daily News
• 毒蛇，禁止滑动 ! 新的后门攻击法国实体:
https://paper.seebug.org/1852/
・ 毒蛇，禁止滑动 ! 新的后门攻击法国实体.
– lanying37
• 利用 gateway-api 攻击 kubernetes:
https://paper.seebug.org/1859/
・ 利用 gateway-api 攻击 kubernetes.
– lanying37
• GitHub – nonamecoder/CVE-2022-27254: PoC for vulnerability in Honda’s Remote Keyless System(CVE-2022-27254):
https://github.com/nonamecoder/CVE-2022-27254
・ 有研究员发现本田思域汽车无钥匙系统存在漏洞，攻击者发射 RF 信号控制车门和启动发动机
– Jett
• What to look for when reviewing a company’s infrastructure – Marco Lancini:
https://www.marcolancini.it/2022/blog-cloud-security-infrastructure-review/
・ 安全基础设施安全评估时应该 Review 什么
– Jett
• Remote Code Execution on Western Digital PR4100 NAS (CVE-2022-23121):
https://research.nccgroup.com/2022/03/24/remote-code-execution-on-western-digital-pr4100-nas-cve-2022-23121/
・ Remote Code Execution on Western Digital PR4100 NAS (CVE-2022-23121)
– Jett
• Heap Overflow in OpenBSD’s slaacd via Router Advertisement:
http://blog.quarkslab.com/heap-overflow-in-openbsds-slaacd-via-router-advertisement.html
・ Heap Overflow in OpenBSD’s slaacd via Router Advertisement
– Jett
• 《Linux Kernel 保护机制绕过》:
https://mp.weixin.qq.com/s/gSTbXW6M72QYtVPoZswhyw
・ Linux Kernel 保护机制绕过
– Jett
• Delegations – The Hacker Recipes:
https://www.thehacker.recipes/ad/movement/kerberos/delegations#talk
・ Delegating Kerberos to bypass Kerberos delegation limitation
– Jett
• Racing against the clock — hitting a tiny kernel race window:
https://googleprojectzero.blogspot.com/2022/03/racing-against-clock-hitting-tiny.html
・ 一个 Tiny Race Window 的 Linux 内核条件竞争漏洞实现利用的过程
– Jett
• It’s Raining Shells – Google Slides:
https://docs.google.com/presentation/d/1vVpNezQ1uVS3_PQ_beYH-cQR6qrvGcMP8MWV7LA-nKU/mobilepresent#slide=id.p
・ 如何在 Azure 寻找新的攻击面
– Jett
• Storm Cloud 黑客卷起大风暴：恶意软件 GIMMICK 攻击 MacOS:
https://paper.seebug.org/1854/
・ Storm Cloud 黑客卷起大风暴：恶意软件 GIMMICK 攻击 MacOS
– lanying37
• A Tale of an OFTP2 Vulnerability:
https://insinuator.net/2022/03/a-tale-of-an-oftp2-vulnerability/
・ OFTP2 文件传输协议路径穿越漏洞分析
– Jett
* 查看或搜索历史推送内容请访问：
https://sec.today
* 新浪微博账号：腾讯玄武实验室
https://weibo.com/xuanwulab
原文始发于微信公众号（腾讯玄武实验室）：每日安全动态推送(03-25)
