IoT安全发展守强攻弱是必然趋势
201711月第三周舆论周报：安卓恶意软件、新欺诈样本、重大缺陷、其他安全事项等美国政府披露平安缺陷的详细程序
http://www.tomshardware.com/news/how-us-government-reveals-security-vulnerabilities,35938.html
破绽聚焦:libxls多个远程代码执行缺陷
http://blog.talosintelligence.com/2017/11/vulnerability-spotlight-libxls.html
AmazonEcho，GoogleHome易受BlueBorne攻击
http://www.securityweek.com/amazon-echo-google-home-vulnerable-blueborne-attacks
黑客通过RDP勒索软件潜入并传播
https://nakedsecurity.sophos.com/2017/11/15/ransomware-spreading-hackers-sneak-in-through-rdp/
垃圾邮件选择小说文本免杀流传下载赌钱软件
https://www.bleepingcomputer.com/news/security/spam-bots-bombards-victims-with-star-wars-quotes-and-links-to-gambling-apps/
开源Excel读取库libxls爆出7执行远程代码的缺陷CVE-2017-12108
http://toutiao.secjia.com/libxls-rce
17年MSOffice缺陷使黑客能够安装恶意软件，而无需用户交互
https://thehackernews.com/2017/11/microsoft-office-rce-exploit.html
滥用网络间谍活动Windows控制面板链接
https://www.bleepingcomputer.com/news/security/windows-control-panel-links-abused-in-cyber-espionage-campaign/
AsiaHitGroup伪装成恶意手机软件GooglePlay正当应用程序
201711月第三周勒索病毒周报
https://blog.malwarebytes.com/cybercrime/2017/11/new-trojan-malware-discovered-google-play/
无文件攻击解密
https://www.alienvault.com/blogs/security-essentials/busting-5-myths-about-fileless-attacks
Adobe公布补丁
https://www.bleepingcomputer.com/news/security/adobe-patches-security-bugs-in-flash-player-and-eight-other-products/
Cookie浏览器挖掘剧本
https://www.bleepingcomputer.com/news/security/cookie-consent-script-drops-in-browser-cryptocurrency-miner/
美国政府分享北韩使用的东西FALLCHILL恶意软件细节
http://www.securityweek.com/us-government-shares-details-north-korea-cyber-attacks
Coinhive成为恶意软件最想要的
https://www.scmagazine.com/coinhive-cryptocurrency-miner-jumps-onto-check-points-most-wanted-malware-list/article/707206/
微软公布11月补丁，修复53个平安问题
https://www.bleepingcomputer.com/news/microsoft/microsoft-november-patch-tuesday-fixes-53-security-issues/
Ordinyptwiper德国企业勒索目的
https://www.scmagazine.com/ordinypt-wiper-ransomware-poses-as-job-applicants/article/706774/
北韩黑客攻击比特币服务提供商恶意软件攻击
https://themerkle.com/north-korean-hackers-ramp-up-malware-attacks-against-bitcoin-service-providers/
新ICedID发现了银行的木马
https://www.bleepingcomputer.com/news/security/new-icedid-banking-trojan-discovered/
LockCrypt通过爆破勒索软件RDP流传
https://www.alienvault.com/blogs/labs-research/lockcrypt-ransomware-spreading-via-rdp-brute-force-attacks
ToastAmigo恶意软件使用新的攻击ToastOverlay破绽
https://www.scmagazine.com/toastamigo-malware-uses-new-twist-to-attack-toast-overlay-vulnerability/article/706640/
打印机突然罢工？原因在这里