腾讯玄武实验室安全动态推送
Tencent Xuanwu Lab Security Daily News
-
[ Android ] [CVE-2015-7292] Amazon Fire Phone Kernel Stack based Buffer Overflow - my disclosure and writeup http://marcograss.github.io/security/android/cve/2016/01/15/cve-2015-7292-amazon-kernel-stack-buffer-overflow.html
"Amazon Fire Phone 手机内核栈缓冲区溢出漏洞（CVE-2015-7292）， Blog： https://t.co/fhNorEQEJg"
-
[ Linux ] My presentation: Linux Security for Developers (introduction) - http://www.slideshare.net/MichaelBoelen/linux-security-for-developers PDF: https://cisofy.com/files/public/presentation-linux-security-for-developers.pdf #linux #developer
"面向开发者的 Linux 安全指南： https://t.co/UII0ROUObL https://t.co/BQv2e9vN77"
-
[ Network ] Delving into Internet DDoS Attacks by Botnets: Characterization and Analysis http://www.cse.buffalo.edu/~mohaisen/doc/dsn2015.pdf https://t.co/tVIKLnCUsB
"通过 Botnet 深入研究 DDoS 攻击: 特征描述和分析，来自纽约州里大学布法罗分校的 Paper： https://t.co/yaIZBT5OWd https://t.co/tVIKLnCUsB"
-
[ Network ] New blogpost: "Unusual #IPv6 Fragmentation and Operating Systems Responses" http://www.secfu.net/2016/01/13/unusual-ipv6-fragmentation-and-operating-systems-responses/
"异常的 IPv6 分片以及操作系统的响应： https://t.co/235EsVKr2m"
-
[ Others ] CVE-2015-7938 disclosed, thx @ hdmoore : https://community.rapid7.com/community/infosec/blog/2016/01/15/r7-2015-26-advantech-eki-ssh-authentication-bypass (auth bypass on Advantech EKI 132x devices) #IoTSec #SCADA
"Dropbear SSH 服务端认证绕过漏洞（CVE-2015-7938），来自 Rapid7 Blog： https://t.co/unbi62IhzH "
