每日攻防资讯简报[Apr.2th]

1.跨加壳器和DLL加载器的代码重用

https://blog.reversinglabs.com/blog/code-reuse-across-packers-and-dll-loaders

2.Intigriti — XSS Challenge 0321

https://infosecwriteups.com/intigriti-xss-challenge-0321-472ae0a48254

3.微软发布的《安全信号》研究报告，报告表明针对IoT固件的攻击依然在增加

https://www.microsoft.com/security/blog/2021/03/30/new-security-signals-study-shows-firmware-attacks-on-the-rise-heres-how-microsoft-is-working-to-help-eliminate-this-entire-class-of-threats/

4.2020年全球数据风险报告

https://go.talasecurity.io/global-data-risk-state-web-report-2020

5.通过回调执行Shellcode

https://osandamalith.com/2021/04/01/executing-shellcode-via-callbacks/

6.2021年Microsoft年度漏洞报告

https://www.beyondtrust.com/resources/whitepapers/microsoft-vulnerability-report

7.拆解最新的O365网络钓鱼技术

https://info.phishlabs.com/blog/breaking-down-the-latest-o365-phishing-techniques-1

8.云原生安全101

https://www.intezer.com/blog/cloud-security/cloud-native-security-101/

9.2020年第四季度互联网安全报告，报告显示：无文件恶意软件攻击激增了900％，加密矿工卷土重来，而勒索软件攻击却在下降

https://www.watchguard.com/wgrd-resource-center/security-report-q4-2020

10.DDoS攻击的未来是什么样的

https://americansecuritytoday.com/what-does-the-future-of-ddos-attacks-look-like/