Tencent Security Xuanwu Lab Daily News
• Tech Community Live: Windows security:
https://youtu.be/xvzM1xRFfmY
・ 技术社区在线会议视频：探讨Windows11的安全问题
– lanying37
• Automatically extracting static antivirus signatures:
https://blog.scrt.ch/2022/04/05/automatically-extracting-static-antivirus-signatures/
・ 自动化提取防病毒软件的静态检测特征以实现检测逃逸
– Jett
• 漂亮侧信道：从timeless attack到pipeline的放大攻击:
https://mp.weixin.qq.com/s/N6CWX9ZVnbyeYBIibwb0SA
・ 漂亮侧信道：从timeless attack到pipeline的放大攻击
– Jett
• [Linux] Introduction to Exploit Development:
https://samsclass.info/127/ED_2020.shtml
・ Introduction to Exploit Development
– lanying37
• CVE-2022-22965: Analyzing the Exploitation of Spring4Shell Vulnerability in Weaponizing and Executing the Mirai Botnet Malware:
https://www.trendmicro.com/en_us/research/22/d/cve-2022-22965-analyzing-the-exploitation-of-spring4shell-vulner.html
・ 趋势对 Spring4Shell CVE-2022-22965 漏洞真实攻击样本的分析
– Jett
• AWS RDS Vulnerability Leads to AWS Internal Service Credentials:
https://blog.lightspin.io/aws-rds-critical-security-vulnerability
・ 利用 AWS RDS EC2 实例的本地文件读漏洞窃取 AWS 内部服务的密钥
– Jett
• NTLMquic:
https://blog.xpnsec.com/ntlmquic/
・ Windows 支持的 SMB over QUIC 在攻击中的使用
– Jett
• Meta’s SparkAR RCE Via ZIP Path Traversal:
https://blog.fadyothman.com/metas-sparkar/
・ Meta 的 Spark AR Windows 应用被发现 RCE 漏洞
– Jett
• [PDF] https://shadowmydx.github.io/papers/icse22-main-1314.pdf:
https://shadowmydx.github.io/papers/icse22-main-1314.pdf
・ One Fuzzing Strategy to Rule Them All（Paper）
– Jett
• [Windows] Chief Information Security Officer (CISO) Workshop – Security documentation:
http://ow.ly/8Dwu30qKq7J
・ 微软推出的 CISO Workshop 培训的资料
– Jett
• Pwning the bcm61650 – The Cave:
https://blog.xilokar.info/pwning-the-bcm61650.html
・ Pwning the bcm61650
– Jett
• Semgrep ruleset for C/C++ vulnerability research:
https://security.humanativaspa.it/semgrep-ruleset-for-c-c-vulnerability-research/
・ Semgrep ruleset for C/C++ vulnerability research
– Jett
* 查看或搜索历史推送内容请访问：
https://sec.today
* 新浪微博账号：腾讯玄武实验室
https://weibo.com/xuanwulab
原文始发于微信公众号（腾讯玄武实验室）：每日安全动态推送(04-12)
