資安事件新聞週報 2020/1/6 ~ 2020/1/10

資安事件新聞週報 2020/1/6 ~ 2020/1/10
1.重大弱點漏洞/後門/Exploit/Zero Day
Project Zero調整漏洞揭露政策，漏洞細節一律通報後90天才公開
https://www.ithome.com.tw/news/135265
Ruckus 產品多個漏洞
https://www.ruckuswireless.com/security/299/view/pdf
思科修補可繞過身分認證並執行任意行動的安全漏洞
https://ithome.com.tw/news/135203
近期多家VPN設備資安漏洞，相關單位應立即檢視以降低資安威脅
https://www.twcert.org.tw/tw/cp-15-3211-f51e9-1.html
Citrix應用伺服器與閘道器產品存在安全漏洞(CVE-2019-19781)
http://net.nthu.edu.tw/2009/mailing:announcement:20200109_01
Citrix部分產品存在遠端執行程式碼漏洞
https://www.nccst.nat.gov.tw/VulnerabilityNewsDetail?lang=zh&seq=1448
Hackers probe Citrix servers for weakness to remote code execution vulnerability
https://www.zdnet.com/article/hackers-probe-unsecured-citrix-servers-for-netscaler-vulnerability/#ftag=RSSbaffb68
Cisco Data Center Network Manager存在多個漏洞
https://www.nccst.nat.gov.tw/VulnerabilityNewsDetail?lang=zh&seq=1447
Cisco DCNM 發布安全更新
https://www.us-cert.gov/ncas/current-activity/2020/01/07/cisco-releases-security-updates
IBM Security Secret Server 信息泄露漏洞
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-4634

GitLab 多個漏洞
https://www.auscert.org.au/bulletins/ESB-2020.0046/
Android 多個漏洞
https://source.android.com/security/bulletin/2020-01-01
微軟Access資料庫出現漏洞 或致8.5萬家企業面臨風險
https://news.sina.com.tw/article/20200108/33937806.html
安全預警- 華為部分產品的信息洩露漏洞
https://www.huawei.com/cn/psirt/security-advisories/huawei-sa-20200108-01-phone-cn
NCSC Cyber Security Advisory CSA-2020-1439 Critical Vulnerability in Citrix Products
https://www.ncsc.govt.nz/newsroom/ncsc-cyber-security-advisory-csa-2020-1439/
Google Ditches Patch-Time Bug Disclosure in Favor of 90-Day Policy
https://threatpost.com/google-ditches-patch-disclosure-90-day-policy/151626/
Mozilla Patches Critical Vulnerability
https://www.mozilla.org/en-US/security/advisories/mfsa2020-03/#CVE-2019-17026
Mozilla Foundation Security Advisory 2020-01 Security Vulnerabilities fixed in Firefox 72
https://www.mozilla.org/en-US/security/advisories/mfsa2020-01/
Mozilla Foundation Security Advisory 2020-02 Security Vulnerabilities fixed in Firefox ESR 68.4
https://www.mozilla.org/en-US/security/advisories/mfsa2020-02/
Mozilla patches Firefox zero-day reported by Qihoo 360
https://www.zdnet.com/article/mozilla-patches-firefox-zero-day-reported-by-qihoo-360/#ftag=RSSbaffb68
U.S. Government Confirms Critical Security Warning For Firefox Users
https://www.forbes.com/sites/daveywinder/2020/01/09/us-government-confirms-critical-security-warning-for-firefox-users/#52b27f7c2ebf
Google Releases Security Updates for Chrome
https://chromereleases.googleblog.com/2020/01/stable-channel-update-for-desktop.html
Vulnerability Spotlight: Remote code execution vulnerability in E2fsprogs
https://blog.talosintelligence.com/2020/01/e2fsprogs-remote-code-execution-vuln-jan-2020.html
2.銀行/金融/保險/證券/支付系統/ 新聞及資安
街口託付寶申購基金踩監理紅線 金管會緊盯
https://amp-news.cnyes.com/news/id/4429725
街口「託付寶」踩紅線！ 金管會：去年底已拒絕
https://reurl.cc/24G2Z9
中國地下外匯交易平台突倒閉 近200萬人投資人被坑4323億元
https://ec.ltn.com.tw/article/breakingnews/3030614
外匯變傳銷，中國百萬人遭坑殺 4 千多億
https://reurl.cc/1QVb2p
大新信用卡疑洩資料 多人中招收0蚊交易通知 香港金管局：收到事故通報
https://hk.finance.appledaily.com/finance/realtime/article/20200105/60452596
信用卡系統疑現漏洞 大新：影響數千客戶惟無金錢資料損失
https://reurl.cc/ZnkvKW
香港金管局稱已收到大新通報疑有信用卡用戶資料被盜用
http://bit.ly/2ZRrEnk
保險「大魔王」後年上線 「會計準則應與金融監理脫鉤」
https://udn.com/news/story/7239/4268006
撿到提款卡！男一招破解「6位數密碼」　爽盜領46萬多元
https://www.setn.com/News.aspx?NewsID=666386
國泰世華銀加入「SWIFT gpi」　跨境匯款即時追蹤
https://tw.finance.appledaily.com/realtime/20200106/1686955/
亞馬遜申請手掌辨識專利，這三個國家早已將「掃手」落地
https://news.knowing.asia/news/7aaecdb0-6eba-47ff-a00b-ac445514c0d3
內部控制常見的八大漏洞
https://mp.weixin.qq.com/s/PVR6Zxpr1nIOKeNlFyGx9g
【2020 全科會將至】全世界駭客都愛攻擊台灣，資安產業怎麼養才對
https://buzzorange.com/techorange/2020/01/06/taiwan-cybersecurity/
利用ETC信用卡辦理漏洞竊取公民信息開通金融轉賬服務
http://news.ycwb.com/2020-01/08/content_30476243.htm
新加坡金管局﹕已收21份數字銀行申請　當中7份申零售銀行牌照
http://bit.ly/35AWwd1
集保大數據分析應用平台，助建FinTech服務生態系
https://www.chinatimes.com/realtimenews/20200109002708-260410?chdtv
神奈川警方擬在銀行設置熱成像攝像頭防詐騙
https://tchina.kyodonews.net/news/2020/01/e483f11fe934.html
6秒鐘隔空測心跳！台灣新創如何玩活體偵測技術，吸引純網銀客戶買單
https://www.bnext.com.tw/article/56239/faceheart-ces2020
紐約州長提議：「給金融監管機構更多的權力。」
http://bit.ly/36Fe09H
倫敦外匯交易公司Travelex遭惡意程式入侵，被迫採用人工交易
https://www.ithome.com.tw/news/135186
Travelex被駭遭索1.8億 拿紙筆交易
https://tw.appledaily.com/finance/20200109/2W2ZYR52UT4DIYMAPSYSQPBYZA/
TRAVELEX遭入侵被逼關電腦系統　紙筆記錄交易
https://news.rthk.hk/rthk/ch/component/k2/1501550-20200108.htm
Travelex遭黑客勒索未有通報客戶及政府捱批
https://news.now.com/home/international/player?newsId=375973
Travelex遭駭客勒索300萬美元
https://www.ithome.com.tw/news/135227
Travelex customers left in cashless limbo, ICO not formally alerted to data theft claims
https://www.zdnet.com/article/travelex-customers-left-in-cashless-limbo-uk-regulators-now-step-in/#ftag=RSSbaffb68
Currency Exchange Travelex Held Hostage by Ransomware Attack
https://www.bankinfosecurity.com/currency-exchange-travelex-held-hostage-by-ransomware-attack-a-13588
Travelex faces ransom demands following NYE malware attack
https://www.zdnet.com/article/travelex-faces-ransom-demands-following-nye-malware-attack/#ftag=RSSbaffb68
Sodinokibi Ransomware Hits Travelex, Demands $3 Million
https://www.bleepingcomputer.com/news/security/sodinokibi-ransomware-hits-travelex-demands-3-million/
Patch or Perish: VPN Servers Hit by Ransomware Attackers
https://www.bankinfosecurity.com/patch-or-perish-vpn-servers-hit-by-ransomware-attackers-a-13583
Travelex: Banks halt currency service after cyber-attack
https://www.bbc.com/news/business-51034731
New evasion techniques found in web skimmers
https://reurl.cc/4gzgvK
Researcher Spots New Tricks in Web Payment Card Skimmers
https://www.bankinfosecurity.com/researcher-spots-new-tricks-in-web-payment-card-skimmers-a-13573
Another consortium joins race for Singapore digital bank licence
https://www.zdnet.com/article/another-consortium-joins-race-for-singapore-digital-bank-licence/#ftag=RSSbaffb68
ロンドン証取のシステム障害、サイバー攻撃の可能性調査
https://jp.wsj.com/articles/SB11833998325689744897304586123174226141088
Pune: Man arrested ‘red-handed’ with ATM card-cloning device at ICICI Bank kiosk
https://indianexpress.com/article/cities/pune/pune-man-arrested-red-handed-with-atm-card-cloning-device-at-icici-bank-kiosk-6197764/
ATM Hackers Quizzed in Tripura, Agartala
https://www.sentinelassam.com/north-east-india-news/tripura-news/atm-hackers-quizzed-in-tripura-agartala/
RBI issues Cyber Security Controls Guidelines for Third party ATM Switch Application Service Providers
https://www.taxscan.in/rbi-issues-cyber-security-controls-guidelines-third-party-switch-application/42890/
Pune: Nigerian lands in cop net for card cloning ploy
https://timesofindia.indiatimes.com/city/pune/pune-nigerian-lands-in-cop-net-for-card-cloning-ploy/articleshow/73077938.cms
Miscreants steal Rs 23.5 lakh from ATM near central jail
https://timesofindia.indiatimes.com/city/bengaluru/miscreants-steal-rs-23-5-lakh-from-atm-near-central-jail-in-bengaluru/articleshow/73078376.cms
Three Chinese men exonerated in ATM skimming scams
https://www.dawn.com/news/1525901/three-chinese-men-exonerated-in-atm-skimming-scams
Cardknox payment gateway certified with Pax S920
https://www.atmmarketplace.com/news/cardknox-payment-gateway-certified-with-pax-s920/
Morning Brief 1.6.20: U.K. banks suffer fresh payment outages
https://www.paymentssource.com/news/u-k-banks-suffer-fresh-payment-outages
RBI issues Cyber Security Controls Guidelines for Third party ATM Switch Application Service Providers
https://www.taxscan.in/rbi-issues-cyber-security-controls-guidelines-third-party-switch-application/42890/
Cyber Security controls for Third party ATM Switch Application Service Providers
https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=11773&Mode=0
Cyber Security Controls for ATM Switch Application Service Providers (ASPs)
https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=11773&Mode=0#AN
UK government investigates possible cyberattack link to London Stock exchange outage
https://www.zdnet.com/article/uk-government-investigates-possible-cyberattack-link-to-london-stock-exchange-outage/#ftag=RSSbaffb68
Cyberattack could have taken London Stock Exchange offline
https://www.itproportal.com/news/cyberattack-could-have-taken-london-stock-exchange-offline/
GCHQ: A cyber-what-now? Rumours of our probe into London Stock Exchange 'cyberattack' have been greatly exaggerated
https://www.theregister.co.uk/2020/01/06/gchq_london_stock_exchange_cyberattack_allegation/
Iranian hackers deface US government & African bank website
https://www.hackread.com/iranian-hackers-deface-us-government-african-bank-website/
Bank of England and FCA plot internal data analytics shake-up
https://www.fintechfutures.com/2020/01/bank-of-england-and-fca-plot-internal-data-analytics-shake-up/
Ukrainian cyber police exposed a fraudulent scheme of financial auctions
https://www.ehackingnews.com/2020/01/ukrainian-cyber-police-exposed.html
ATM skimmer sentenced for fleecing $400,000 out of US banks
https://www.zdnet.com/article/atm-skimmer-sentenced-for-fleecing-400000-out-of-new-jersey-banks/
Member of ATM Skimming Conspiracy Targeting Multiple New Jersey Bank Locations Sentenced to 60 Months in Prison
https://www.justice.gov/opa/pr/member-atm-skimming-conspiracy-targeting-multiple-new-jersey-bank-locations-sentenced-60
Nigerian Banks Spent N200bn Preventing Cyber Attacks In 2019
https://economicconfidential.com/2020/01/banks-n200bn-preventing-cyber-attack/
3.電子支付/電子票證/行動支付/ pay/新聞及資安
百Pay齊放 金管會促今年電子支付達52％比重
https://reurl.cc/31E0x9
從電支電票的合併修法 ── 談支付法制之發展及本次修法特色（上）
https://www.bnext.com.tw/article/56151/electronic-payment-e-ticket
4.虛擬貨幣/區塊鍊相關新聞及資安
金融小學堂／區塊鏈錢包 打破支付國界
https://money.udn.com/money/story/9740/4266484
Hardcore | 以太坊中智能合約攻擊和漏洞百科全書
https://www.zhiguf.com/focusnews_detail/29388
開發數據金礦 建議設監理沙盒
https://www.chinatimes.com/newspapers/20200106000175-260202?chdtv
證券型代幣交易所 今年上路
https://money.udn.com/money/story/5613/4262474
虛擬貨幣也能輕鬆Pay？SecuX 設計冷錢包，存錢花錢一把罩
https://meet.bnext.com.tw/articles/view/45745
中國人民銀行表示，中國央行數字貨幣「進展順利」
https://reurl.cc/RdVern
新加坡金管局就合規交易所加密貨幣衍生品的監管問題表態
http://finance.eastmoney.com/a/202001071349253542.html
虛擬幣交易所平台的網站安全加固如何防護？從滲透測試服務開始
https://www.admin5.com/article/20200110/941210.shtml
Cryptocurrency exchange Poloniex issues password reset warning
https://reurl.cc/K6W6Ln
Characterizing and Detecting Money Laundering Activities on the Bitcoin Network
https://arxiv.org/abs/1912.12060
5.資安事件新聞
A.病毒木馬 / 殭屍網路 / 勒索軟體 / Adware /APT /後門程式
羅技軟件被曝出漏洞傳播木馬：可遠程控制受害者電腦
https://haote.net/article/22-40442.html
羅技軟體被曝出漏洞傳播木馬：可遠程控制受害者電腦
https://read01.com/KD4LAML.html#.XhSStFUzY2w
國際刑警組織讓東南亞被挖礦程式綁架的路由器減少了78%
https://www.ithome.com.tw/news/135275
伊朗駭客惡意程式已駭入美國電網、油氣公司
https://ithome.com.tw/news/135276
新年伊始，勒贖軟體繼續在美國各地傳出災情
https://www.twcert.org.tw/tw/cp-104-3206-227cc-1.html
Landry's Restaurant Chain Suffers Payment Card Theft Via PoS Malware
https://thehackernews.com/2020/01/landry-pos-malware-attack.html
Win32.Stuxnet : Part 1 - Introduction, Installation and Infection
https://www.youtube.com/watch?v=sEfqtET13SY&feature=youtu.be&t=520
Live Malware Analysis | Starship Bash Botnet
https://www.youtube.com/watch?v=g-rNFzpUmh4&feature=emb_logo
DeathRansom evolves from joke to actual ransomware
https://www.zdnet.com/article/deathransom-evolves-from-joke-to-actual-ransomware/#ftag=RSSbaffb68
High-Impact Windows 10 Security Threat Revealed As App-Killing Malware Evolves
https://www.forbes.com/sites/daveywinder/2020/01/05/alarming-new-windows-10-security-threat-as-app-killing-clop-malware-evolves/#5d8e7ae55a9f
Maze Ransomware Victim Sues Anonymous Attackers
https://www.bankinfosecurity.com/maze-ransomware-victim-sues-anonymous-attackers-a-13574
Restaurant Chain Landry's Investigates Malware Incident
https://www.bankinfosecurity.com/restaurant-chain-landrys-investigates-malware-incident-a-13571
BANKING MALWARE IN ANDROID CONTINUES TO GROW. A LOOK AT THE RECENT BRAZILIAN BANKING TROJAN BASBANKE/COYBOT
https://www.buguroo.com/en/blog/banking-malware-in-android-continues-to-grow.-a-look-at-the-recent-brazilian-banking-trojan-basbanke-coybot
The Mac Malware of 2019
https://objective-see.com/blog/blog_0x53.html
McAfee ATR Analyzes Sodinokibi aka REvil Ransomware-as-a-Service – Crescendo
https://www.mcafee.com/blogs/other-blogs/mcafee-labs/mcafee-atr-analyzes-sodinokibi-aka-revil-ransomware-as-a-service-crescendo/
Predator the Thief: Analysis of Recent Versions
https://www.fortinet.com/blog/threat-research/predator-the-thief-recent-versions.html
This password-stealing malware just got updated with new tactics to help it hide better
https://www.zdnet.com/article/this-password-stealing-malware-just-got-updated-with-new-tactics-to-help-it-hide-better/
Malware in the Cloud: Protecting Yourself Based on Your Cloud Environment
https://www.tripwire.com/state-of-security/security-data-protection/cloud/malware-cloud-protection-cloud-environment/
Predator the Thief: Analysis of Recent Versions
https://www.fortinet.com/blog/threat-research/predator-the-thief-recent-versions.html
This password-stealing malware just got updated with new tactics to help it hide better
https://www.zdnet.com/article/this-password-stealing-malware-just-got-updated-with-new-tactics-to-help-it-hide-better/
SNAKE Ransomware Is the Next Threat Targeting Business Networks
https://www.bleepingcomputer.com/news/security/snake-ransomware-is-the-next-threat-targeting-business-networks/
Naive IoT botnet wastes its time mining cryptocurrency
https://www.zdnet.com/article/naive-iot-botnet-wastes-its-time-mining-cryptocurrency/#ftag=RSSbaffb68
Drake Lyrics Used as Calling Card in Malware Attack
https://threatpost.com/drake-lyrics-used-as-calling-card-in-malware-attack/151665/
PowerPoint Malware References Drake Lyrics to Drop Lokibot & Azorult
https://www.appriver.com/blog/powerpoint-malware-references-drake-lyrics-to-drop-lokibot-and-azorult/
REvil ransomware exploiting VPN flaws made public last April
https://nakedsecurity.sophos.com/2020/01/08/revil-ransomware-exploiting-vpn-flaws-made-public-last-april/
Dubious downloads: How to check if a website and its files are malicious
https://blog.malwarebytes.com/how-tos-2/2020/01/dubious-downloads-how-to-check-if-a-website-and-its-files-are-malicious/
Title: Top-Tier Russian Organized Cybercrime Group Unveils Fileless Stealthy “PowerTrick” Backdoor for High-Value Targets
https://labs.sentinelone.com/top-tier-russian-organized-cybercrime-group-unveils-fileless-stealthy-powertrick-backdoor-for-high-value-targets/#report
Rising sea and spam levels? Emotet campaign uses Greta Thunberg as lure
https://www.scmagazine.com/home/security-news/rising-sea-and-spam-levels-emotet-campaign-uses-greta-thunberg-as-lure/
B.行動安全 / iPhone / Android /穿戴裝置 /App
指示加強網絡安全 首長手機疑遭駭客盯上
https://eunited.com.my/332825/
如何判斷手機是否遭安裝追蹤軟體 (Stalkerware)
https://blog.trendmicro.com.tw/?p=62877
WhatsApp 通知恐怖份子帳號被駭，使歐洲政府調查受阻
https://www.inside.com.tw/article/18544-European-authorities-investigating-terror-suspect-say-WhatsApp-informed-phone-hacked
手機被駭遭勒索…《奇皇后》男星私密資料全流出！氣喊要告
https://www.setn.com/News.aspx?NewsID=667602
韓媒曝韓國10名以上頂級明星遭到駭客威脅勒索
http://n.yam.com/Article/20200108464771
發生名人三星手機駭客威脅事件
https://www.ptt.cc/bbs/KoreaStar/M.1578449276.A.93D.html
韓多名頂流藝人手機遭黑被勒索巨額，男愛豆怕影像流出被迫匯款！都用了三星這款手機
https://www.koreastardaily.com/tc/news/123342
多位韓國藝人手機資料遭盜並被勒索 正巧都用三星手機
https://www.chinatimes.com/realtimenews/20200109002358-260412?chdtv
安卓提權漏洞再遭利用，攻擊者疑似來自印度網軍
https://www.secrss.com/articles/16476
FBI又要求蘋果解鎖iPhone協助破案
https://www.ithome.com.tw/news/135242
瑞幸咖啡回應App被工信部點名：為防止駭客騙取首杯免費
https://ek21.com/news/tech/170801/
資安漏洞頻傳，抖音母公司將導入區塊鏈技術
https://media.ace.io/tiktoks-owner-pivots-to-blockchain-as-app-security-flaws/
抖音國際版TikTok被爆可被黑客竊取信息及劫持視頻
https://www.leiphone.com/news/202001/YMgTl2sshO2cfeif.html
政府が無料配布するスマートフォンに中国製らしき悪質なアプリがプリインストールされていたと判明
https://gigazine.net/news/20200110-government-funded-phone-malware/
3 Google Play Store Apps Exploit Android Zero-Day Used by NSO Group
https://thehackernews.com/2020/01/android-zero-day-malware-apps.html
Researchers Demonstrate How to Hack Any TikTok Account by Sending SMS
https://thehackernews.com/2020/01/hack-tiktok-account.html
How to stop your iPhone and apps from tracking you 24/7
https://www.zdnet.com/article/how-to-stop-your-iphone-and-apps-from-tracking-you-247/#ftag=RSSbaffb68
Apple targets jailbreaking in lawsuit against iOS virtualization company
https://news.hitb.org/content/apple-targets-jailbreaking-lawsuit-against-ios-virtualization-company
FBI Asks Apple for Access to Saudi Shooter's iPhones
https://www.bankinfosecurity.com/fbi-asks-apple-for-access-to-saudi-shooters-iphones-a-13586
Lawmakers Prod FCC to Act on SIM Swapping
https://krebsonsecurity.com/2020/01/senators-prod-fcc-to-act-on-sim-swapping/
Unremovable malware found preinstalled on low-end smartphone sold in the US
https://www.zdnet.com/article/unremovable-malware-found-preinstalled-on-low-end-smartphone-sold-in-the-us/#ftag=RSSbaffb68
C.事件 / 駭客 / DDOS / APT / 雲端/暗網/徵才 / 國際資安事件
2020年10大資安趨勢預測
https://www.ithome.com.tw/article/135183
2020資安趨勢重點整理
https://www.ithome.com.tw/voice/135171
嫌犯製「機械手臂」自動洗錢　不法所得破百億
https://news.tvbs.com.tw/local/1259401
香港警方過去半年閱 3721 部被捕人手機　李家超：全獲搜查令　拒答有否用駭客軟件
http://bit.ly/2T1JxyB
政府網軍竊密碼？　多名能源人士收到通知
https://news.tvbs.com.tw/politics/1259887
陳立誠扯密碼被「政府網軍」駭？Google駁「是資安提醒」
https://newtalk.tw/news/view/2020-01-08/351622
政府網軍竊密碼？ 多名能源人士收到通知
http://bit.ly/2tIPyW2
消費者對連網住宅資安與隱私風險了解不足、缺乏有效作為
https://www.digitimes.com.tw/iot/article.asp?cat=158&cat1=20&cat2=80&id=0000575996_pzd8j763lp695v5nxyb1w
Nexusguard研究表示，DNS放大攻擊年增近4,800%  SYN洪水攻擊急增惹關注
https://times.hinet.net/news/22725538
利用url跳轉漏洞冒充公安局官網的騷操作
https://www.77169.net/html/249117.html
被駭超過20次卻不知不覺的InfoTrax與FTC和解
https://www.ithome.com.tw/news/135215
【除夕大抽獎】電郵設定兩漏洞變「垃圾」　旅發局聘獨立顧問檢討
https://reurl.cc/0zqzWM
有漏洞、頁面被篡改、非法收集個人信息…貴陽網警嚴查網絡違法
http://www.chinapeace.gov.cn/chinapeace/c53721/2020-01/06/content_12314219.shtml
源頭之戰，不斷升級的攻防對抗技術—— 軟件供應鏈攻擊防禦探索
https://security.tencent.com/index.php/blog/msg/140
翟本喬協助逮「黑韓」網軍 徐永明：時力揭弊只問是非
https://udn.com/news/story/9261/4277238
專家：大陸重構了網路能力
https://www.chinatimes.com/realtimenews/20200109001417-260409?chdtv
美國FBI最想定罪的“邪惡公司”首領：年僅32歲吸金億萬美元
https://www.freebuf.com/news/223492.html
美軍將撤離是假消息！科威特國家通訊社：遭駭客入侵
https://news.ltn.com.tw/news/world/breakingnews/3034291
消息超亂！科威特媒體稱「美軍3天內撤軍」　政府急澄清：被駭客攻擊
https://www.ettoday.net/news/20200108/1620926.htm
怕美國將撤軍消息洩露歸罪“俄駭客” 俄外交官這樣溫馨提示
http://big5.eastday.com:82/gate/big5/news.eastday.com/w/20200107/u1ai20287478_K26845.html
伊朗將領遭狙殺駭客也怒了 侵入美政府網頁誓復仇
https://www.cna.com.tw/news/aopl/202001050120.aspx
伊朗駭客侵入美政府機關網站 誓為蘇雷曼尼報仇
https://reurl.cc/rlql4k
伊朗將領遭狙殺駭客也怒了　侵入美政府網頁誓復仇
https://www.setn.com/News.aspx?NewsID=666653
伊朗將領遭狙殺 英相：不會哀嘆他的死
https://www.ntdtv.com/b5/2020/01/06/a102746042.html
白宮下設網站遭入侵長達1小時 駭客留下一張意味深長的圖
https://ek21.com/news/business/104973/
白宮下設網站遭入侵黑客留下一張意味深長的圖
https://news.ji-qi.com/world/economics/202001/92-1710471.html
美國土安全部警告企業，伊朗可能發動網路攻擊
https://ithome.com.tw/news/135217
美聯邦官網被疑似伊朗駭客攻破 當局已實施監測
http://big5.eastday.com:82/gate/big5/news.eastday.com/w/20200107/u1ai20287381.html
美中第二階段談判將啟動 聚焦中共駭客竊盜
https://reurl.cc/lLrx9j
Half of the websites using WebAssembly use it for malicious purposes
https://www.zdnet.com/article/half-of-the-websites-using-webassembly-use-it-for-malicious-purposes/#ftag=RSSbaffb68
New Kid on the Web: A Study on the Prevalence of WebAssembly in the Wild
https://www.sec.cs.tu-bs.de/pubs/2019a-dimva.pdf
UK man sentenced to prison for hacking and spying on victims through their webcams
https://www.zdnet.com/article/uk-man-sentenced-to-prison-for-hacking-and-spying-on-victims-through-their-webcams/#ftag=RSSbaffb68
New Iranian data wiper malware hits Bapco, Bahrain's national oil company
https://www.zdnet.com/article/new-iranian-data-wiper-malware-hits-bapco-bahrains-national-oil-company/#ftag=RSSbaffb68
Saudi Arabia CNA report
https://www.scribd.com/document/442225568/Saudi-Arabia-CNA-report#download
Austria's foreign ministry says facing 'serious cyber attack'
https://www.afp.com/en/news/15/austrias-foreign-ministry-says-facing-serious-cyber-attack-doc-1ng2hj1
November 2019 Cyber Attacks Statistics
https://www.hackmageddon.com/2019/12/18/november-2019-cyber-attacks-statistics/
Preparing for Potential Iranian 'Wiper' Attacks
https://www.bankinfosecurity.com/interviews/preparing-for-potential-iranian-wiper-attacks-i-4566
Iranian Cyberattacks: 10 Must-Have Defenses
https://www.bankinfosecurity.com/blogs/iranian-cyberattacks-10-must-have-defenses-p-2848
Global Cyber Alliance President on Iranian Cyber Threat
https://www.bankinfosecurity.com/interviews/global-cyber-alliance-president-on-iranian-cyber-threat-i-4564
Iranian cyberattacks feared after killing of top general
https://apnews.com/aa3ddd9dd24b79f8ec76aa1a6487e4fc
US Conflict With Iran Sparks Cybersecurity Concerns
https://www.bankinfosecurity.com/us-conflict-iran-sparks-cybersecurity-concerns-a-13576
5 technology trends for the roaring 20s, part 1: Blockchain, cloud, open source
https://www.zdnet.com/article/5-technology-trends-for-the-roaring-20s-part-one-blockchain-cloud-open-source/#ftag=RSSbaffb68
Chrome to show error codes, similar to Windows BSOD screens
https://www.zdnet.com/article/chrome-to-show-error-codes-similar-to-windows-bsod-screens/#ftag=RSSbaffb68
'Serious cyber-attack' on Austria's foreign ministry
https://www.bbc.com/news/world-europe-50997773
Cybersecurity Data Sharing: A Federal Progress Report
https://www.bankinfosecurity.com/cybersecurity-data-sharing-federal-progress-report-a-13575
Analysis: Countering Nation-State Attacks in 2020
https://www.bankinfosecurity.com/interviews/analysis-countering-nation-state-attacks-in-2020-i-4561
WARNING FOR INTENSE CYBERWAR: IRAN HACKS US GOVERNMENT WEBSITE FOR REVENGE
https://www.analyticsinsight.net/warning-intense-cyberwar-iran-hacks-us-government-website-revenge/
HOW NORTH KOREA HACKERS ATTACK MAJOR CYBERSECURITY WEAKNESSES ACROSS THE GLOBE
https://analyticsindiamag.com/how-north-korea-hackers-attack-major-cybersecurity-weaknesses-across-the-globe/
Microsoft: RDP brute-force attacks last 2-3 days on average
https://www.zdnet.com/article/microsoft-rdp-brute-force-attacks-last-2-3-days-on-average/#ftag=RSSbaffb68
Data science for cybersecurity: A probabilistic time series model for detecting RDP inbound brute force attacks
http://bit.ly/2Fp7TKn
FBI Investigating How Town Defrauded of $1 Million: Report
https://www.bankinfosecurity.com/fbi-investigating-how-town-defrauded-1-million-report-a-13580
Analysis: Threat Posed by Pro-Iranian Hackers
https://www.bankinfosecurity.com/analysis-threat-posed-by-pro-iranian-hackers-a-13579
US Conflict With Iran Sparks Cybersecurity Concerns
https://www.bankinfosecurity.com/us-conflict-iran-sparks-cybersecurity-concerns-a-13576
The Everyday Cyber Threat Landscape: Trends from 2019 to 2020
https://newsroom.trendmicro.com/blog/simply-security/everyday-cyber-threat-landscape-trends-2019-2020
NIST 800-171 & Why Organizations Need Password Similarity Blocking in Active Directory
https://www.bankinfosecurity.com/blogs/nist-800-171-organizations-need-password-similarity-blocking-in-active-p-2838
City of Las Vegas said it successfully avoided devastating cyber-attack
https://www.zdnet.com/article/city-of-las-vegas-said-it-successfully-avoided-devastating-cyber-attack/#ftag=RSSbaffb68
INTERPOL Collaboration Reduces Cryptojacking by 78%
https://blog.trendmicro.com/interpol-collaboration-reduces-cryptojacking-by-78/
The Six Pillars of Effective Security Operations
https://blog.paloaltonetworks.com/2020/01/cortex-security-operations/
6 ways hackers are targeting retail businesses
https://blog.malwarebytes.com/web-threats/2020/01/6-ways-hackers-are-targeting-retail-businesses/
Router Cryptojacking Campaigns Disrupted
https://www.bankinfosecurity.com/router-cryptojacking-campaigns-disrupted-a-13592
Automated host recon, persistence and exfiltration
https://medium.com/@Bank_Security/automated-host-recon-persistence-and-exfiltration-85d49423dcc2
Threat Source newsletter (Jan. 9, 2019)
https://blog.talosintelligence.com/2020/01/threat-source-newsletter-jan-9-2019.html
DATA HACK Dixons Carphone fined £500,000 after hackers targeted 14million customers
https://www.thesun.co.uk/money/10707151/dixons-carphone-fined-500000-hackers-customers/
板橋〈資安〉工程師
https://www.104.com.tw/job/6jwq9
資安工程師/資深安全專家 (w0012)
https://www.104.com.tw/job/6u5zn
資深資安工程師 (資安專家)
https://www.104.com.tw/job/6u5p3
[招聘] 北京頂象技術有限公司招聘漏洞研究員/安全專家
https://www.52pojie.cn/thread-1084834-1-1.html
專案與資安業務專員、專案與HR產品業務人員
https://job.taiwanjobs.gov.tw/Internet/jobwanted/JobDetail.aspx?EMPLOYER_ID=93184&HIRE_ID=9469597
D.資料外洩/個資法/GDPR/網路詐騙/網路釣魚/盜刷/假新聞
工程師不爽抖內仍被甩 駭女網友裸照PO網判1年3月
https://www.chinatimes.com/realtimenews/20200105001055-260402?chdtv
「抖內」女網友發現養小白臉 竹科新貴駭進雲端散布性愛片
https://m.ltn.com.tw/news/society/breakingnews/3030361
發財夢遮眼！他狂匯款...堅信可預測台彩號碼　億萬富翁夢碎了
https://www.ettoday.net/news/20200103/1616729.htm
日本愛情旅館搜尋引擎資料外洩，最壞結果資料被用來勒索
http://technews.tw/2020/01/07/japanese-love-hotel-search-website-date-breach-the-worst-situation-is-user-is-blackmailed/
美國社區醫院郵件帳號外洩波及近5萬名病患個資
https://www.ithome.com.tw/news/135245
手機自動傳百通　「星巴克請喝咖啡」急收回
https://news.tvbs.com.tw/life/1260159
去年首3季4500科技罪案 多屬網騙
http://bit.ly/35EiPyy
駭客「盜走」1000億？176萬人受害 手法與5年前「犯事」非法平臺雷同
https://ek21.com/news/business/105413/
School management software provider discloses severe security breach
https://www.zdnet.com/article/school-management-software-provider-discloses-severe-security-breach/#ftag=RSSbaffb68
Fresh Cambridge Analytica leak ‘shows global manipulation is out of control’
https://www.theguardian.com/uk-news/2020/jan/04/cambridge-analytica-data-leak-global-election-manipulation
Search engine for Japanese sex hotels announces security breach
https://www.zdnet.com/article/search-engine-for-japanese-sex-hotels-announces-security-breach/
Hackers steal sensitive data from Japanese search engine for sex hotels
https://www.hackread.com/hackers-steal-data-japanese-search-engine-sex-hotels/
Microsoft Phishing Scam Exploits Iran Cyberattack Scare
https://www.bleepingcomputer.com/news/security/microsoft-phishing-scam-exploits-iran-cyberattack-scare/
TEXT SCAM Bank of Ireland warn customers of scam messages after fraudsters send texts to customers seeking personal information
https://www.thesun.ie/news/4971635/bank-of-ireland-warn-fraud-scam-messages/
E.研究報告
108年第3季資通安全技術報告
https://download.nccst.nat.gov.tw/attachfilenew/108_Q3_Cyber%20Security%20Technology%20Report.pdf
淺析通過操縱BGP Communities影響路由選路
https://www.freebuf.com/articles/network/223879.html
D-Link DIR-859的RCE漏洞（CVE-2019–17621）
https://www.freebuf.com/column/224459.html
Spelevo EK 使用社會工程技術
https://www.chainnews.com/zh-hant/articles/085401388235.htm
Nagios XI遠程命令執行漏洞(CVE-2019-20197)
https://s.tencent.com/research/bsafe/868.html
【代碼審計】某JA網站內容管理系統模板注入漏洞
https://zhuanlan.zhihu.com/p/100864935
107 年 12月份 TWCERT/CC資安情資電子報
https://reurl.cc/5gxqry
濫用ThinkPHP 漏洞的殭屍網絡Hakai 和Yowai
https://zhuanlan.zhihu.com/p/100574038
網絡空間安全時代的紅藍對抗建設
https://security.tencent.com/index.php/blog/msg/139
挖洞經驗| 用空字節（Null Byte）觸發內存洩露的4萬美金漏洞
https://www.freebuf.com/vuls/224088.html
深度研究Pass-the-Hash攻擊與防禦
https://xz.aliyun.com/t/7051
為何在 Docker 中執行特權容器不是個好主意
https://blog.trendmicro.com.tw/?p=62986
要如何找出無線設備獨一無二的射頻指紋
https://secbuzzer.co/post/85
[資訊安全] Web Application Security Testing Note
https://github.com/MksYi/Web-Application-Security-Testing-Note
震網三代CVE-2017-8464漏洞復現
https://zhuanlan.zhihu.com/p/101608776
挖洞經驗| 利用越權漏洞竊取Airbnb房東的收款資金
https://www.freebuf.com/vuls/224431.html
教你利用繞過 UAC 對話框的漏洞
https://www.chainnews.com/zh-hant/articles/687022389326.htm
CVE-2019-10758 mongo-express RCE漏洞分析
https://xz.aliyun.com/t/7066
Open Webmail郵件系統安全管理與防護指南
https://cert.tanet.edu.tw/prog/opendoc.php?id=2020010610014343586025745412569.pdf
LINE Taiwan Security Meetup – BECKS #4
https://engineering.linecorp.com/zh-hant/blog/becks-meetup-0918/
Brief Analysis of the FDLP.gov Deface
https://medium.com/@sshell_/brief-analysis-of-the-fdlp-gov-deface-980caba9c786
Bypassing AV via in-memory PE execution
https://blog.dylan.codes/bypassing-av-via/
Top 10 Dangerous DNS Attacks Types and The Prevention Measures
https://cybersecuritynews.com/dns-attacks/
First Active Attack Exploiting CVE-2019-2215 Found on Google Play, Linked to SideWinder APT Group
http://bit.ly/2Qt9MME
Fasten your Recon process using Shell Scripting
https://reurl.cc/D121L5
ahmetb/kubectl-tree
https://github.com/ahmetb/kubectl-tree
shodansploit
https://github.com/shodansploit/shodansploit
Open Redirect Payloads
https://github.com/cujanovic/Open-Redirect-Payloads
Blind WAF identification tool
https://github.com/stamparm/identYwaf
yeyintminthuhtut/Awesome-Red-Teaming
https://github.com/yeyintminthuhtut/Awesome-Red-Teaming/blob/master/README.md
Command Injection Through BLH
https://medium.com/@trapp3rhat/command-injection-through-blh-3c32614bb395?
DomLink
https://github.com/vysecurity/DomLink
Gather urls from wayback machine
https://github.com/ghostlulzhacks/waybackSqliScanner
Awesome Security
https://github.com/sbilly/awesome-security/blob/master/README.md
awesome-forensics
https://github.com/alphaSeclab/awesome-forensics/blob/master/Readme_en.md
xingkong123600/AngelSword
https://github.com/xingkong123600/AngelSword
cnlh/nps
https://github.com/cnlh/nps
EmotetについてATT&CKを使って調べてみた
https://qiita.com/IK_PE/items/201e6b900e0de1d9fc89
AIOOSCP/hash-identifier
https://github.com/AIOOSCP/hash-identifier
3gstudent/pyKerbrute
https://github.com/3gstudent/pyKerbrute//
PandoraFMS v7.0NG authenticated Remote Code Execution (CVE-2019-15029)
https://shells.systems/pandorafms-v7-0ng-authenticated-remote-code-execution-cve-2019-15029/
December honeypot report
https://bontchev.nlcv.bas.bg/articles/?y=2020&m=01
Active Directory forest trusts part 1 - How does SID filtering work
https://dirkjanm.io/active-directory-forest-trusts-part-one-how-does-sid-filtering-work/
Updated: Basic IPv6 Troubleshooting Commands / IPv6 Rosetta Stone 2019
https://theinternetprotocolblog.wordpress.com/2019/11/04/basic-ipv6-troubleshooting-commands-i-ipv6-rosetta-stone-2019/
GHC + GDB
https://asciinema.org/a/mzQFrJefYQyIYA5MyappydgzP
iOS Application Injection
https://arjunbrar.com/post/ios-application-injection
CyberTruck Challenge 2019 — Android CTF
https://medium.com/bugbountywriteup/cybertruck-challenge-2019-android-ctf-e39c7f796530
DNS Hijacking: A New Method of MitM Attack Observed in the Wild
https://www.airoav.com/dns-hijacking-a-new-method-of-mitm-attack-observed-in-the-wild/
cat ~/footstep.ninja/blog.txt
https://footstep.ninja/posts/exploiting-self-xss/
cseagle/blc
https://github.com/cseagle/blc
HTML Injection
https://www.hackingcastle.com/2020/01/html-injection-tutorial.html
Alert Alarm SMS exploit - English version
https://jyx.github.io/alert-alarm-exploit.html
Decrypting config.bin files for TP-Link WR841N, WA855RE, and probably
https://assemblyofsecrets.blogspot.com/2020/01/decrypting-configbin-files-for-tp-link.html
How to Break PDFs Breaking PDF Encryption and PDF Signatures
https://media.ccc.de/v/36c3-10832-how_to_break_pdfs
Burp Suite Series – Demonstrate Runtime File Payload
https://hackersonlineclub.com/burp-suite-series-demonstrate-runtime-file-payload/
Kali Linux Announced New Kali 2020.1 Comes With “Non-Root Users By Default”
https://reurl.cc/b6rYkr
VB2019 paper: Catch me if you can: detection of injection exploitation by validating query and API integrity
https://www.virusbulletin.com/blog/2020/01/vb2019-paper-catch-me-if-you-can-detection-injection-exploitation-validating-query-and-api-integrity/
cyberark/SkyArk
https://github.com/cyberark/SkyArk/blob/master/README.md
Virtualization Forensics: Live Acquisition of VMs
https://netseedblog.com/security/usb-forensics/
Tishna Automated pentest framework for Servers, Application Layer to Web Security
https://hackingpassion.com/tishna-automated-pentest-framework/
HTTP Request Smuggling + IDOR
https://hipotermia.pw/bb/http-desync-idor
Threat Hunting: Detecting Web Shells
https://medium.com/@alpinoacademy/threat-hunting-detecting-web-shells-d9e1e8c6de2a
Advanced Mobile Forensics Investigation Software
https://hackersonlineclub.com/advanced-mobile-forensics-investigation-software/
Graylog2/graylog-plugin-threatintel
https://github.com/Graylog2/graylog-plugin-threatintel
Energetic Bear/Crouching Yeti: attacks on servers
https://securelist.com/energetic-bear-crouching-yeti/85345/
Difference Between IDS, IPS, Anti-virus
https://www.studynotesandtheory.com/blog/category/Communications%20and%20Network%20Security
CyberTruck Challenge 2019 — Android CTF
https://medium.com/bugbountywriteup/cybertruck-challenge-2019-android-ctf-e39c7f796530
sundowndev/PhoneInfoga
https://github.com/sundowndev/PhoneInfoga
aquasecurity/harbor-scanner-aqua
https://github.com/aquasecurity/harbor-scanner-aqua
Installing SystemWebView
https://github.com/bromite/bromite/wiki/Installing-SystemWebView
Bash for Everyone — Part 1
https://medium.com/@ehsahil/bash-cookbook-for-everyone-part-1-cc98251e2887
Enviro pHAT Raspberry Pi review
https://magpi.raspberrypi.org/articles/enviro-phat-raspberry-pi-review
MSAdministrator/apt33_apt34_possible_commands.md
https://gist.github.com/MSAdministrator/7a61025263e279a740835da4b205e6d0
maldevel/PenTestKit
https://github.com/maldevel/PenTestKit
Neo23x0/ sigma
https://github.com/Neo23x0/sigma/blob/master/rules/web/web_citrix_cve_2019_19781_exploit.yml
nongiach/pyrofipass
https://github.com/nongiach/pyrofipass/blob/master/pyrofipass.py
XposedOrNot - Tool To Search An Aggregated Repository Of Xposed Passwords Comprising Of ~850 Million Real Time Passwords
https://www.kitploit.com/2020/01/xposedornot-tool-to-search-aggregated.html
xHunt Campaign: Attacks on Kuwait Shipping and Transportation Organizations
https://unit42.paloaltonetworks.com/xhunt-campaign-attacks-on-kuwait-shipping-and-transportation-organizations/
Hold My Beer Mirai – Spinoff Named ‘LiquorBot’ Incorporates Cryptomining
https://labs.bitdefender.com/2020/01/hold-my-beer-mirai-spinoff-named-liquorbot-incorporates-cryptomining/
Getting Started with ATT&CK
https://www.mitre.org/sites/default/files/publications/mitre-getting-started-with-attack-october-2019.pdf
jas502n/CVE-2019-20197
https://github.com/jas502n/CVE-2019-20197
Continued Escalation of Tensions in the Middle East
https://blog.talosintelligence.com/2020/01/mideast-tensions-preparations.html
log2timeline/dftimewolf
https://github.com/log2timeline/dftimewolf
Smartphone shopaholic
https://securelist.com/smartphone-shopaholic/95544/
AD Fly Tool
https://0xsp.com/secploit-exploits-terminal/ad-fly-tool
offensive-hub/black-widow
https://github.com/offensive-hub/black-widow
KnightSec-Official/Phlexish
https://github.com/KnightSec-Official/Phlexish
securethelogs/Bluechecker
https://github.com/securethelogs/Bluechecker
F.商業
關貿網路武功強，去年抵禦30億次駭客攻擊
http://bit.ly/37ExBGU
安華聯網 Secure by Design 榮獲亞太區10大資安新創企業
https://ithome.com.tw/pr/135232
博通將原賽門鐵克網路安全服務部門賣給Accenture
https://www.ithome.com.tw/news/135235
物聯網隱藏資安風險 果核數位 AI SOC服務
https://www.informationsecurity.com.tw/article/article_detail.aspx?tv=11&aid=8777
Cloudflare釋出零信任安全工具組Cloudflare for Teams
https://ithome.com.tw/news/135241
叡揚資訊10日興櫃掛牌 持續創新企業軟體應用與雲端服務
http://n.yam.com/Article/20200108177659
上月業績快報／安碁資訊+56% 攀峰
https://money.udn.com/money/story/11120/4275892
Extrahop網路偵測與回應系統能解析網路第2至第7層流量
https://www.ithome.com.tw/review/133851
Palo Alto Networks分享最新2020年資安趨勢預測報告　5G資安問題要關注
https://www.computerdiy.com.tw/20200109_palo-alto-networks/
中華電信板橋雲端資料中心成功取得SOC報告認證
https://times.hinet.net/news/22731291
雲端服務業者提供使用者帳戶安全保護
https://www.twcert.org.tw/tw/cp-104-3208-ca6d1-1.html
Are You Ready for Microsoft Windows 7 End of Support on 14th January 2020
https://thehackernews.com/2020/01/windows-7-support-ends.html
New Windows 10 Fast Ring test build adds new Task Manager, Notification options
https://www.zdnet.com/article/new-windows-10-fast-ring-test-build-adds-new-task-manager-notification-options/#ftag=RSSbaffb68
G.政府
內政部補助地方政府強化戶役政基層機關資安防護及區域聯防計畫作業要點
https://glrs.moi.gov.tw/LawContent.aspx?id=GL001038#lawmenu
推進數位發展 政府擬設專責部會
https://money.udn.com/money/story/5648/4269662
國發會計劃年底提出「開放資料專法」草案　強化數位治理
https://newtalk.tw/news/view/2020-01-02/348950
【2020十大資安趨勢7：法規遵循】資安法適用範圍擴及關鍵基礎設施，個資法為了因應GDPR將修法
https://ithome.com.tw/news/135179
【2020十大資安趨勢9：5G資安】NCC要求所有電信業者，5G資安要做到Security By Design
https://www.ithome.com.tw/news/135181
【2020十大資安趨勢10：資安人才】培育學校生根有成，資安人才與產業接軌是關鍵
https://times.hinet.net/topic/22730677
三總與中科院通過資安管理驗證 環奧頒證
https://money.udn.com/money/story/5635/4276466
中東局勢緊張 國安機制啟動
https://ec.ltn.com.tw/article/paper/1344754
Windows 7終止支援服務專區
https://www.nccst.nat.gov.tw/Win7EndOfSupportIntro?lang=zh
H.工控系統/SCADA/ICS
MITRE正式發布針對工業控制系統的ATT&CK for ICS
https://www.ithome.com.tw/news/135243
提高智慧電錶全生命週期的隱私性與安全性
https://www.eettaiwan.com/news/article/20200109TA31-Enhancing-Privacy-and-Security-in-the-Smart-Meter-Life-Cycle
工業製造業者遭網路間諜鎖定
https://www.nccst.nat.gov.tw/NewsRSSDetail?lang=zh&RSSType=news&seq=16339
I.教育訓練
社交工程資安教育訓練(108上半年)
https://elearn.hrd.gov.tw/info/10014130
你對資訊安全了解多少? 快利用1 Day學習網路上查不到的專業資安基礎知識
https://ithome.com.tw/pr/135223
[Trend Micro]-【資安防護直播研討會】全面晉級資安防衛戰  2/12
https://reurl.cc/0zqzll
SSCP從七大領域提昇資安知識，解決各種常見難題
https://ithome.com.tw/pr/135220
Web漏洞總結: OWASP Top 10
https://www.cnblogs.com/pengdai/p/12169534.html
OSCP Goldmine (not clickbait)
http://0xc0ffee.io/blog/OSCP-Goldmine
SSH Pentesting Guide
https://community.turgensec.com/ssh-hacking-guide/
Updated: Basic IPv6 Troubleshooting Commands / IPv6 Rosetta Stone 2019
https://theinternetprotocolblog.wordpress.com/2019/11/04/basic-ipv6-troubleshooting-commands-i-ipv6-rosetta-stone-2019/
【Webエンジニアど素人から３年生ぐらいになるまでに読むと良い本】を段階的にまとめた
https://qiita.com/JunyaShibato/items/3aa5f7f3fc991de17f3f
Wireshark Tutorial: Examining Ursnif Infections
https://unit42.paloaltonetworks.com/wireshark-tutorial-examining-ursnif-infections/
J.物聯網/IOT/人工智慧/車聯網/光聯網/深度學習/機器學習/無人機/人臉辨識
歐盟網路資安局發表 IoT 資安報告，聚焦軟體開發設計安全
https://koin.kcg.gov.tw/?p=2586
網路攻擊事件頻傳 資安已成嵌入式系統重大挑戰
https://smartauto.ctimes.com.tw/DispArt-tw.asp?O=200107113050
央視曝數十萬個家用cam被入侵　黑客靠網售帳號牟利
https://reurl.cc/1QNoVG
中國數十萬只家用監視器帳號遭破解 通過網絡銷售
https://reurl.cc/D1rZ2O
FBI recommends keeping your IoT devices on a separate network
https://www.iottechnews.com/news/2019/dec/06/fbi-recommends-iot-devices-separate-network/
Xiaomi Cameras Connected to Google Nest Expose Video Feeds From Others
https://thehackernews.com/2020/01/google-nest-xiaomi-camera.html
Insight Partners' Latest Purchase: IoT Security Firm Armis
https://www.bankinfosecurity.com/insight-partners-latest-purchase-iot-security-firm-armis-a-13584
6.近期資安活動及研討會
AIS3 EOF資安搶旗競賽 1/11
https://ais3.org/eof
MLDM Monday x PyData Taiwan | TBD (about Shioaji) 1/13
https://www.meetup.com/Taiwan-R/events/266715784/
SANS Threat Hunting London Summit & Training 2020 1/13 ~ 1/18
https://www.sans.org/event/threat-hunting-europe-2020
GitLab Commit San Francisco 1/14
https://about.gitlab.com/events/commit/#attend-sanfrancisco
資安實務專題課程-Windows 惡意程式分析實務 1/14 ~ 1/17
https://isip.moe.edu.tw/wordpress/?p=1789
Build Your Security Token Blockchain - 如何打造證券型代幣區塊鏈 1/14
https://www.meetup.com/Polkadot-Taipei/events/267377249/
Elixir.tw Taipei Meetup inside 默默會(mokumokukai) 1/14
https://www.meetup.com/elixirtw-taipei/events/267421068/
Scala Taiwan #36 - Scala through lenses 1/14
https://www.meetup.com/Scala-Taiwan-Meetup/events/267314640/
Hacking Thursday 1/16
http://www.hackingthursday.org/invite
A meetup with Laurence Moroney 1/16
https://www.meetup.com/TensorFlow-User-Group-Taipei/events/267109922/
ANSYS Workbench結構分析基礎課程 1/16 ~ 1/17
https://reurl.cc/mdjz7l
Japan Security Analyst Conference  1/17
https://jsac.jpcert.or.jp/
WizardAmigos CodeCamp [Taipei,JavaScript,­English] 1/20
https://www.meetup.com/WizardAmigos/events/bbdclrybccbbc/
Cyber Security for Critical Assets (CS4CA) MENA 1/20 ~ 1/21
https://mena.cs4ca.com/?ref=infosec-conferences.com
PWN2OWN MIAMI – BRINGING ICS INTO THE PWN2OWN WORLD 2020/1/21~23
https://www.zerodayinitiative.com/blog/2019/10/28/pwn2own-miami-bringing-ics-into-the-pwn2own-world
2020核果資訊冬季班 Python 程式語言 (Level 1) 1/22~ 2/13
https://www.accupass.com/event/1911150442131985092910
Hacking Thursday 1/23
http://www.hackingthursday.org/invite
Security Hell Conference (SH3LLCON) 1/24 ~ 1/25
https://www.sh3llcon.es/?ref=infosec-conferences.com
NextGen SCADA 1/27 ~ 1/31
https://www.smartgrid-forums.com/forums/nextgen-scada-global/
Cranfield University Cyber Symposium 1/28 ~ 1/29
https://www.cranfield.ac.uk/events/symposia/cyber
International Cyber Security Forum (FIC) 1/28 ~ 1/30
https://www.forum-fic.com/en/home.htm
Free and Safe in Cyberspace 1/29
https://www.free-and-safe.org/
Hacking Thursday 1/30
http://www.hackingthursday.org/invite
制御システムセキュリティカンファレンス 2020 2020年2月14日
https://www.jpcert.or.jp/event/ics-conference2020.html
CYBERSEC 2020 臺灣資安大會 3/17 ~ 3/19
https://cyber.ithome.com.tw/
black ASIA 2020 Singapore 3/31 ~ 4/3
https://www.blackhat.com/asia-20/briefings/schedule/
2020 Industrial Control Systems (ICS) Cyber Security Conference | Singapore
https://www.icscybersecurityconference.com/singapore/