###### tags: `資安事件新聞週報` # 資安事件新聞週報 2020/2/24 ~ 2020/2/28 1.重大弱點漏洞/後門/Exploit/Zero Day 研究:7家BLE系統單晶片的SDK含有眾多安全漏洞 https://www.ithome.com.tw/news/135969 IBM QRadar Advisor With Watson 加密問題漏洞 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-4557 Zyxel修復了NAS設備中的嚴重漏洞 https://nosec.org/home/detail/4159.html JVNVU#97748968 複数の ZyXEL 製品に含まれる weblogin.cgi にコマンドインジェクションの脆弱性 https://jvn.jp/vu/JVNVU97748968/ 多項合勤防火牆、NAS產品爆指令注入漏洞可執行任意程式碼 https://www.ithome.com.tw/news/136038 Flaw in billions of Wi-Fi devices left communications open to eavesdropping https://arstechnica.com/information-technology/2020/02/flaw-in-billions-of-wi-fi-devices-left-communications-open-to-eavesdroppng/ JVNVU#94679920 Apache Tomcat の複数の脆弱性に対するアップデート https://jvn.jp/vu/JVNVU94679920/ 思科產品多個漏洞 https://tools.cisco.com/security/center/publicationListing.x Cisco drops security fixes for Smart Software Manager, security appliances https://www.helpnetsecurity.com/2020/02/21/cisco-security-fixes/ Cisco多款產品存在高危漏洞,均已修復 https://www.freebuf.com/column/228574.html 關於APACHE TOMCAT存在文件包含漏洞的安全公告 http://bit.ly/2TabRgv Multiple buffer overflow vulnerabilities exist in IBM® Db2® leading to privilege escalation (CVE-2020-4204) https://www.ibm.com/support/pages/node/2875875 Cisco軟件管理平台曝出默認密碼漏洞 https://nosec.org/home/detail/4143.html 因嚴重IE漏洞微軟再為已停止支持的WINDOWS 7發布安全更新 http://bit.ly/2SWEAVS 因嚴重 IE 漏洞 微軟再爲已停止支持的 Win7 發佈安全更新 https://www.chainnews.com/zh-hant/articles/602014569888.htm 建議各單位勿開啟遠端桌面協定(RDP),以避免系統遭到入侵 http://net.nthu.edu.tw/2009/mailing:announcement:20200221_01 IE記憶體毁損漏洞傳有攻擊發生,迫使微軟對Windows 7發出例外修補 https://www.ithome.com.tw/news/135970 微軟更新Azure Security Center現可偵測Linux上的無檔案攻擊 https://www.ithome.com.tw/news/135991 駭客正在掃描微軟Exchange伺服器漏洞,還沒修補的請儘快 https://www.ithome.com.tw/news/136043 D-Link DGS-1250 Header Injection https://packetstormsecurity.com/files/156473/dlinkdgs1250-inject.txt AVIRA Generic Malformed Container Bypass https://packetstormsecurity.com/files/156472/TZO-19-2020.txt Open-Xchange App Suite / Documents Server-Side Request Forgery https://packetstormsecurity.com/files/156474/oxappsuite-ssrf.txt 通航DVR存在安全漏洞,煩請儘速確認並進行更新 http://net.nthu.edu.tw/2009/mailing:announcement:20200224_01 通航DVR - 未經授權存取維護管理介面 https://tvn.twcert.org.tw/taiwanvn/TVN-201910003 VULNERABILITIES IN VMWARE http://bit.ly/2uoCoOK Google系統出包緊急修復漏洞 旗下智慧家居卻當機17小時 https://cnews.com.tw/137200227a05/ Google patches Chrome zero-day under active attacks https://www.zdnet.com/article/google-patches-chrome-zero-day-under-active-attacks/#ftag=RSSbaffb68 Google Chrome瀏覽器存在安全漏洞(CVE-2020-6407與CVE-2020-6418) https://www.nccst.nat.gov.tw/VulnerabilityDetail?lang=zh&seq=1115 Google Chrome 多個漏洞 https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop_24.html Install Latest Chrome Update to Patch 0-Day Bug Under Active Attacks https://thehackernews.com/2020/02/google-chrome-zero-day.html Firefox enables DNS-over-HTTPS by default (with Cloudflare) for all U.S. users https://thehackernews.com/2020/02/firefox-dns-over-https.html New Wi-Fi Encryption Vulnerability Affects Over A Billion Devices https://thehackernews.com/2020/02/kr00k-wifi-encryption-flaw.html Kr00k A serious vulnerability deep inside Wi-Fi encryption https://www.eset.com/int/kr00k/ Kr00k漏洞讓駭客可解密Wi-Fi封包 至少10億台連網產品曝險 http://bit.ly/2T73d3H Kr00k:允許黑客“破壞” Wi-Fi網絡的錯誤 https://zh-tw.secnews.gr/213451/kr00k%E8%87%B3sfalma-pou-epitrepei-stous-chakers-na-spasoun-diktya-wi-fi/ OpenSMTPD 安全漏洞 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8794 Magento WooCommerce CardGate Payment Gateway 2.0.30 - Payment Process Bypass https://www.exploit-db.com/exploits/48135 JVN#11708203 複数のリコー製プリンタおよび複合機における複数のバッファオーバーフローの脆弱性 https://jvn.jp/jp/JVN11708203/ 2.銀行/金融/保險/證券/支付系統/ 新聞及資安 資安威脅無所不在 2019年資安險投保件數明顯增 https://m.ctee.com.tw/livenews/aj/a78817002020022122395599?area= 資安險投保夯,去年增3.5倍 http://bit.ly/2PmalHc 臺德加強雙邊銀行業及保險業之跨境監理合作 http://bit.ly/2va10v6 顛覆傳統金融 金管會核准十件創新試辦業務 https://money.udn.com/money/story/5613/4364466 綁Google Pay的Paypal帳戶遭盜刷,美、德及俄國用戶遭殃 https://www.ithome.com.tw/news/135997 中華民國保險代理人商業同業公會提醒業者應注意駭客利用近期嚴重特殊傳染性肺炎疫情,透過惡意郵件、惡意程式等方式進行社交工程攻擊 http://www.ciaa.org.tw/pages/HotNewsDetail_04.aspx?PKID=20200224000007 二二八連假 金管會要求保險公司保戶服務不中斷 https://money.udn.com/money/story/5613/4371937 澳洲多家銀行與金融單位接獲 DDoS 攻擊威脅 https://www.twcert.org.tw/tw/cp-104-3401-3023a-1.html Indian income tax agency patched a security flaw that would’ve allowed hackers to take over its site http://bit.ly/2T0pb76 Credit Card Skimmer Found on Nine Sites, Researchers Ignored https://www.bleepingcomputer.com/news/security/credit-card-skimmer-found-on-nine-sites-researchers-ignored/ Public warned of new banking scam targeting social media users https://www.corkbeo.ie/news/local-news/public-warned-new-banking-scam-17798023 住信SBIネット銀行などのシステム障害 ほぼ解消 https://www3.nhk.or.jp/news/html/20200223/k10012297941000.html 黑客在PayPal的Google Pay集成中發現漏洞進行未經授權的付款 https://www.cnbeta.com/articles/tech/948363.htm PayPal accounts are getting abused en-masse for unauthorized payments https://www.zdnet.com/article/paypal-accounts-are-getting-abused-en-masse-for-unauthorized-payments/#ftag=RSSbaffb68 Grab raises $850M from Japanese investors to fuel financial services push https://www.zdnet.com/article/grab-raises-850m-from-japanese-investors-to-fuel-financial-services-expansion/#ftag=RSSbaffb68 Australian banks targeted by DDoS extortionists https://www.zdnet.com/article/australian-banks-targeted-by-ddos-extortionists/ ACSC Aware of DDoS Threats being made against Australian Organisations https://www.cyber.gov.au/threats/acsc-aware-ddos-threats-being-made-against-australian-organisations 18 Sniffers Steal Payment Card Data from Print Store Customers https://www.bleepingcomputer.com/news/security/18-sniffers-steal-payment-card-data-from-print-store-customers/#.XlZOfygtEVc.twitter 3.電子支付/電子票證/行動支付/ pay/新聞及資安 金管會鬆綁電支機構合作帳戶 幫民眾省手續費 http://pchome.megatime.com.tw/news/cat1/20200220/15822043937677522003.html 電支帳戶限制再鬆綁 開放信合社農業金庫 http://bit.ly/37Q9HYU Brazil unveils instant payments platform https://www.zdnet.com/article/brazil-unveils-instant-payments-platform/#ftag=RSSbaffb68 4.虛擬貨幣/區塊鍊相關新聞及資安 資安專欄:圖文拆解「交易挖礦始祖 FCoin」資產流向,鼎盛時期便埋下禍根 https://www.blocktempo.com/fcoin-asset-flow-history/ 國家級數位貨幣實驗,瑞典央行先行計畫測試數位克朗 https://finance.technews.tw/2020/02/25/sweden-starts-testing-new-official-digital-currency/ 瑞典中央銀行開始測試數位貨幣電子克朗 https://www.ithome.com.tw/news/135962 高調炫富到發文求助!一比特幣富豪 SIM 卡被駭,「13.7億」的 BTC BCH 遭竊引市場恐慌 https://m.xuite.net/blog/jodenh/jOrz/588928720 MASEx為TTChain提供擴張資金,將徹底改變數位資產交易所生態系統 http://www.businesswirechina.com/hk/news/42862.html 5.資安事件新聞 A.病毒木馬 / 殭屍網路 / 勒索軟體 / Adware /APT /後門程式 首例!「羅賓漢」勒索軟體借Gigabyte舊驅動程式「謀殺」安全軟體 http://bit.ly/39Txp7T LokiBot 偽裝成熱門遊戲啟動器並植入可編譯的C#程式碼檔案 https://blog.trendmicro.com.tw/?p=63489 偽裝韓國公平貿易委員會的惡意垃圾郵件,夾帶勒索病毒與竊個資木馬 https://blog.trendmicro.com.tw/?p=63430 駭客發送暗藏木馬程式的疫情資訊,讓你的電腦也感染「新冠病毒」 https://buzzorange.com/techorange/2020/02/24/coronavirus-computer-version/ 疫症當前混水摸魚 報告指駭客利用疫情偽裝攻擊 http://bit.ly/2w1QZ38 Check Point:Haken惡意程式成功進駐Google Play上的8款Android程式 https://www.ithome.com.tw/news/135983 小心!惡意軟體Emotet假新冠肺炎之名發動郵件攻擊 https://www.ctwant.com/article/38515 銀行木馬Emotet 再進化, 新增 Wi-Fi 散播能力 https://blog.trendmicro.com.tw/?p=63467 惡意軟體Emotet偽裝成新型冠狀病毒資訊,這些疫情連結千萬不要亂點 https://www.techbang.com/posts/76407-the-virus-is-rampant-too-malware-spread-under-the-theme-of-new-coronavirus 勢科技年度資安總評出爐 去年攔截超過6100萬次勒索病毒攻擊 https://cnews.com.tw/124200226a01/ 小心你的電腦也染上「新冠病毒」!這類郵件、檔案千萬別點開 https://cnews.com.tw/137200225a05/ 駭客集團勾結獲利!醫療業成勒索病毒苦主,看準受害者怕曝光心態 https://www.bnext.com.tw/article/56719/trendmicro-bec-ransomware 勒索病毒成資安主要威脅 去年逾700家醫院受害 https://newtalk.tw/news/view/2020-02-27/373151 簡單又便宜的資料竊取軟體服務大為流行,可竊取六十多種應用軟體的資料 https://www.twcert.org.tw/tw/cp-104-3398-2208a-1.html Cybersecurity Research During the Coronavirus Outbreak and After https://securelist.com/cybersecurity-research-during-the-coronavirus-outbreak-and-after/96275/ Microsoft Brings Defender Antivirus for Linux, Coming Soon for Android and iOS https://thehackernews.com/2020/02/windows-defender-atp-linux-android.html 2020-02-11 - PCAP AND MALWARE FOR AN ISC DIARY (URSNIF) https://www.malware-traffic-analysis.net/2020/02/11/index.html 2020-02-19 - TRICKBOT GTAG WECAN23 INFECTION https://www.malware-traffic-analysis.net/2020/02/19/index.html SMS Phishing Campaign Used to Spread Emotet: Report https://www.bankinfosecurity.com/sms-phishing-campaign-used-to-spread-emotet-report-a-13749 Facilities Maintenance Firm Recovering From Malware Attack https://www.bankinfosecurity.com/facilities-maintenance-firm-recovering-from-malware-attack-a-13747 ObliqueRAT linked to threat group launching attacks against government targets https://zd.net/2up7UMB Coronavirus now attacks the cyber world https://www.nationalheraldindia.com/flick-past/coronavirus-now-attacks-the-cyber-world Palestinians Targeted By ‘Gazan’ Hackers As Researchers Unearth Mysterious New Backdoor http://bit.ly/2wIT2cT January 2020’s Most Wanted Malware: Coronavirus-themed spam spreads malicious Emotet malware http://bit.ly/3a2LbVZ Palestinians Targeted By ‘Gazan’ Hackers As Researchers Unearth Mysterious New Backdoor http://bit.ly/2wIT2cT NEW CYBER ESPIONAGE CAMPAIGNS TARGETING PALESTINIANS - PART 1: THE SPARK CAMPAIGN http://bit.ly/2HRxlcY NEW CYBER ESPIONAGE CAMPAIGNS TARGETING PALESTINIANS - PART 2: THE DISCOVERY OF THE NEW, MYSTERIOUS PIEROGI BACKDOOR http://bit.ly/3c27Za6 ATM Malware WinPotv3 showme.exe http://bit.ly/2Vg5Od5 ATM Malware WinPotv3 555.exe http://bit.ly/39WzfVB DoppelPaymer Ransomware Launches Site to Post Victim's Data https://www.bleepingcomputer.com/news/security/doppelpaymer-ransomware-launches-site-to-post-victims-data/ New Mozart Malware Gets Commands, Hides Traffic Using DNS https://www.bleepingcomputer.com/news/security/new-mozart-malware-gets-commands-hides-traffic-using-dns/ Mobile malware evolution 2019 https://securelist.com/mobile-malware-evolution-2019/96280/ Coronavirus-themed Attacks Target Global Shipping Concerns https://www.proofpoint.com/us/corporate-blog/post/coronavirus-themed-attacks-target-global-shipping-concerns Coronavirus-Themed Emails Deliver Malware, Phishing, Scams https://www.securityweek.com/coronavirus-themed-emails-deliver-malware-phishing-scams Coronavirus Fears Exploited in Phishing Attacks https://appriver.com/resources/blog/january-2020/coronavirus-fears-exploited-phishing-attacks Scam Of The Week: Coronavirus Phishing Attacks In The Wild https://blog.knowbe4.com/heads-up-scam-of-the-week-coronavirus-phishing-attacks-in-the-wild Ransomware Against the Machine: How Adversaries are Learning to Disrupt Industrial Production by Targeting IT and OT https://www.fireeye.com/blog/threat-research/2020/02/ransomware-against-machine-learning-to-disrupt-industrial-production.html North Korea Is Recycling Mac Malware. That's Not the Worst Part https://www.wired.com/story/malware-reuse-north-korea-lazarus-group/ Hackers Expand Their Repertoire as Trend Micro Blocks 52 Billion Threats in 2019 https://blog.trendmicro.com/hackers-expand-their-repertoire-as-trend-micro-blocks-52-billion-threats-in-2019/ Sodinokibi Ransomware May Tip NASDAQ on Attacks to Hurt Stock Prices https://www.bleepingcomputer.com/news/security/sodinokibi-ransomware-may-tip-nasdaq-on-attacks-to-hurt-stock-prices/#.XlcgBmPbbSk.twitter B.行動安全 / iPhone / Android /穿戴裝置 /App 「尋找我的手機」亂跳通知?台灣三星曝原因原來是 https://cnews.com.tw/137200221a03/ 新冠肺炎疫情助攻宅經濟 大陸APP下載量2月大爆發 http://bit.ly/2T3u5jN 5G商用台灣7月後啟動5G商用!三大供應商各有特色 https://newtalk.tw/news/view/2020-02-23/370511 Google Play「大屠殺」下架600款軟體!大動作懲處 獵豹移動旗下程式全遭刪 https://cnews.com.tw/137200224a04/ TikTok又碰壁 美運輸局宣布禁用 http://bit.ly/2STuw1b 谷歌警告:華為新款手機用戶若加載Gmail和Youtube會有資安漏洞 https://www.cmmedia.com.tw/home/articles/20062 三星在查找手機應用程式出現烏龍推送後主動調查資料洩露 https://news.xfastest.com/samsung/76978/samsung-blasts-galaxy-phones-worldwide-with-weird-1-notification/ 烏龍推播後又出包!三星證實洩漏150用戶個資 稱兩項技術錯誤無關連 https://cnews.com.tw/137200226a05/ 三星官方證實,發生手機用戶個人資料洩露問題 https://news.knowing.asia/news/a92f1dac-81ca-4b89-ac71-5ec9bced415f 德媒:很多剛出廠的安卓手機就裝有後門 可監視主人 https://www.soundofhope.org/post/347938?lang=b5 Google 開始限制 Android App 於背景追蹤用戶所在地資訊 https://www.twcert.org.tw/tw/cp-104-3396-3a4dc-1.html Google Play Store 中多個 Android 平台 VPN App 可能帶來嚴重資安風險 https://www.twcert.org.tw/tw/cp-104-3395-dfd64-1.html 提防手機公共充電站的「Juice Jacking」陷阱 https://www.hkcert.org/my_url/zh/blog/20022801 Google Bans 600 Android Apps from Play Store for Serving Disruptive Ads https://thehackernews.com/2020/02/android-adware-apps-banned.html Automation: Take the fast lane on the path to 5G https://www.blueplanet.com/blog/automation-take-the-fast-lane-on-the-path-to-5G.html Is your phone listening to you https://www.welivesecurity.com/2020/02/24/is-your-phone-listening-to-you/ New LTE Network Flaw Could Let Attackers Impersonate 4G Mobile Users https://thehackernews.com/2020/02/lte-network-4g-vulnerability.html Google Advises Android Developers to Encrypt App Data On Device https://thehackernews.com/2020/02/android-app-data-encryption.html C.事件 / 駭客 / DDOS / APT / 雲端/ 暗網/ 徵才 / 國際資安事件 資安人必看!SecBuzzer 暗網情資整理(2020 年 1、2 月號) https://secbuzzer.co/post/173 全新駭侵攻擊手法,可繞過 AWS 伺服器上防火牆並自由進出 https://www.twcert.org.tw/tw/cp-104-3397-0e893-1.html 雲端資安,讓 IT 人員輾轉難眠的四個原因 https://blog.trendmicro.com.tw/?p=63447 另類白武士 2019 年有 7 位道德駭客賞金收入超 100 萬美元 https://hk.xfastest.com/47110/hackerone-white-hat/ 資安問題當道,電商經營不可忽略的三大安全關卡 http://bit.ly/2Px97ZH Google開發者大會聚焦AI、資安議題 不畏疫情照辦但官方表示「受理退票」 https://cnews.com.tw/137200224a02/ 肺炎疫情也在網路延燒,Check Point 提醒相關資安風險 https://technews.tw/2020/02/24/check-point-warnning-covid-19-risk-at-internet/ 從防疫反思網路安全策略 https://ithome.com.tw/voice/136058 PTT洩露總統秘密行程 中華電信員工遭開除 https://www.chinatimes.com/realtimenews/20200228001712-260402?ctrack=mo_main_rtime_p15&chdtv 新型數位化投票機 可靠度遭質疑 http://bit.ly/2VfchVE 上GIT 我只想知道為什麼一直斷線 駭客攻擊 一直瘋狂斷線我怎麼傳 駭客攻擊 https://memes.tw/wtf/164561 刑事局警官逮學生駭客 愛心輔導後變身資安公司CEO https://www.ettoday.net/news/20200225/1653281.htm NCT官推被駭客攻入!混韓圈久了,什麼世面都能見到 https://www.koreastardaily.com/tc/news/124520 連駭客都生氣!國外企業不理會網站漏洞提醒 駭客獲悉乾脆寄信警告消費者 https://www.ettoday.net/news/20200224/1653023.htm 60萬人粉專遭駭「狂發A片」! 9年心血被毀…施菲亞搶不回崩潰:世上還有公理嗎 https://star.ettoday.net/news/1651778 辣模臉書遭駭「狂發A片」 慘淪色情頁面崩潰了 https://ent.ltn.com.tw/news/breakingnews/3077356 駭客入侵太多次!智慧門鈴災情頻傳 宣布強制用戶啟動雙重認證機制 https://cnews.com.tw/137200222a02/ 企業防疫應變新思維 遠距工作資安監控零死角 http://www.ctimes.com.tw/DispNews/tw/2002210759RM.shtml 中國政府的「另類防疫」:組織網軍,刪除網路上的負面疫情消息 https://buzzorange.com/techorange/2020/02/26/coronavirus-cyber-army/ 美國關切:台灣敏感技術遭中國買走或盜走 中資滲透還有很多法制漏洞 https://www.cmmedia.com.tw/home/articles/20055 美國防部要求承包商須具備網路安全認證 https://www.isda.org.tw/2020/02/7496776930d1f7fc03aaf5e8f69764d5/ 美英指責俄羅斯駭客大舉攻擊喬治亞 https://ithome.com.tw/news/135956 美國白宮對華為限制措施仍未定案 有官員形容華為像「黑手黨」 https://news.cnyes.com/news/id/4446233 澳情報官:外國間諜威脅前所未有 程度超冷戰 https://www.epochtimes.com/b5/20/2/24/n11892672.htm 澳情報機構示警:新納粹崛起、間諜活動超越冷戰 https://news.ltn.com.tw/news/world/breakingnews/3079026 澳洲破獲重要間諜網 潛伏特工祕密活動多年 https://www.epochtimes.com/b5/20/2/25/n11893839.htm 從美國起訴中國網軍看戰略支援部隊 http://bit.ly/2VuBUBL Home Affairs pushes back against encryption law proposals https://www.zdnet.com/article/home-affairs-pushes-back-against-encryption-law-proposals/#ftag=RSSbaffb68 FBI recommends passphrases over password complexity https://www.zdnet.com/article/fbi-recommends-passphrases-over-password-complexity/#ftag=RSSbaffb68 Municipal Cyberattacks Put Us All at Risk: What Can We Learn From Previous Attacks https://securityintelligence.com/articles/municipal-cyberattacks-put-us-all-at-risk-what-can-we-learn-from-previous-attacks/ US, UK Blame Russia for Cyberattack in Country of Georgia https://www.bankinfosecurity.com/us-uk-blame-russia-for-cyberattack-in-country-georgia-a-13748 Symantec Security Summary https://www.symantec.com/blogs/feature-stories/symantec-security-summary Cyber attack on PM’s office, state bodies attributed to foreign spies http://bit.ly/32sZ7WK FBI Makes Arrest in DDoS Attack on Candidate's Website https://www.bankinfosecurity.com/fbi-makes-arrest-in-ddos-attack-on-candidates-website-a-13754 FBI https://www.documentcloud.org/documents/6782920-USA-v-Dam.html Gamaredon APT Improves Toolset to Target Ukraine Government, Military https://threatpost.com/gamaredon-apt-toolset-ukraine/152568/ R0000275:【2020 趨勢科技全年實習】軟體核心研發 (資安威脅研究/機器學習/雲端架構/系統設計與開發類) https://m.104.com.tw/job/6vpgy 網路資安工程師 https://job.taiwanjobs.gov.tw/Internet/jobwanted/JobDetail.aspx?EMPLOYER_ID=867460&HIRE_ID=9562643 D.資料外洩/個資法/GDPR/網路詐騙/網路釣魚/盜刷/假新聞 美國國防部所屬單位遭駭,相關人員之個人資訊被竊 https://www.twcert.org.tw/tw/cp-104-3402-5b79e-1.html 駭客如何通過電匯詐騙在三天內盜走了45萬美元 https://on.wsj.com/32qd1cc 擁有190萬追蹤的電玩直播頻道遭駭,進行比特幣詐騙斬獲24,000 美元 https://www.blocktempo.com/youtube-channel-neebs-got-hacked/ 知名 YouTube 電玩直播頻道被盜,用以進行加密貨幣詐騙 https://www.twcert.org.tw/tw/cp-104-3382-e0dd6-1.html MGM飯店超過千萬名住客資料被洩露到駭客論壇 https://www.ithome.com.tw/news/135944 小賈斯丁也遭殃!美國 MGM 飯店爆大規模資料外洩 https://www.inside.com.tw/article/19001-us-mgm-resorts-intl-cyber-leak 米高梅酒店千萬賓客個資遇駭 受害者包括政商名流 https://udn.com/news/story/6813/4360915 美國防部通訊IT單位去年員工個資疑遭外洩 https://www.ithome.com.tw/news/135945 負責總統通訊安全機構也被駭 20萬人受影響 https://udn.com/news/story/6813/4360916 少女為衝高點閱率 竟散布疫情假訊息 https://tw.news.appledaily.com/local/20200221/DLU2LS3VEZ4S2A7PXTKPNKC3MU/ 控粉絲外流「肉包包」性愛片 直播主判賠15萬 https://tw.news.appledaily.com/local/20200221/WRSNBV2WJDS2XESRYJ7PVETZFQ/ 打擊不實資訊要全社會參與!AIT辦科技挑戰賽 台灣「防詐達人」抱回逾520萬獎金 https://www.storm.mg/article/2315286 對抗假訊息 酈英傑:須社會共同參與 https://news.ltn.com.tw/news/politics/paper/1353530 詐團駭客耍疫招,騙錢騙個資 http://bit.ly/2HJL8lN 帳號密碼太簡單容易破解,太難又記不住怎麼辦?五個方法幫助你保管所有密碼 https://www.storm.mg/lifestyle/2322495 FBI:以長密詞取代密碼、不應設定密碼變更期間或次數上限 https://ithome.com.tw/news/135993 企業郵件詐騙連刑事局也頭痛!區塊鏈新創推防詐工具,一鍵讓駭客現形 https://www.bnext.com.tw/article/56731/blockchainsecurity-bec-cybersecurity 維護用戶資安優先!蘋果宣布限制網站安全憑證效期縮至398天 https://news.sina.com.tw/article/20200227/34359678.html 美臉部辨識新創「Clearview AI」遇駭 全部客戶名單遭竊 https://news.ltn.com.tw/news/world/breakingnews/3082551 LINE官方3招防詐騙 教用戶辨識「釣魚網站」 https://www.ettoday.net/news/20200227/1655321.htm 全面資訊一手掌握:網路防護、網路陷阱,做個數位公民 http://bit.ly/3abppiM 推特疫情謠言滿天飛 查核中心揭殭屍帳號6特點 https://news.ltn.com.tw/news/life/breakingnews/3082528 數據分析公司不當取得用戶個資 臉書提聯邦訴訟 https://www.cna.com.tw/news/aopl/202002280106.aspx 以色列選舉系統漏洞導致選民資料外洩 https://www.nccst.nat.gov.tw/NewsRSSDetail?lang=zh&RSSType=news&seq=16356 設定不當的 AWS S3 儲存貯體,外洩 36,000 筆受刑人紀錄 https://blog.trendmicro.com.tw/?p=63464 Financial and Customer Info being Exposed in Slickwraps Data Breach https://www.ehackingnews.com/2020/02/financial-and-customer-info-being.html New Mexico Sues Google for Mining Children's Data https://www.bleepingcomputer.com/news/legal/new-mexico-sues-google-for-mining-childrens-data/ Defense Department Agency Reports Data Breach https://www.bankinfosecurity.com/defense-department-agency-reports-data-breach-a-13750 Hackers Gain Access to Sensitive Data; Release Veterans’ Stolen Data Related To PTSD Claims https://www.ehackingnews.com/2020/02/hackers-gain-access-to-sensitive-data.html BEC Group Favors G-Suite, Physical Checks: Report https://www.bankinfosecurity.com/bec-group-favors-g-suite-physical-checks-report-a-13755 Exaggerated Lion https://www.agari.com/cyber-intelligence-research/whitepapers/acid-agari-exaggerated-lion.pdf Why Minimizing Human Error is the Only Viable Defense Against Spear Phishing https://thehackernews.com/2020/02/spear-phishing-cybersecurity.html WhatsApp and Telegram Group Links Leaked Online https://www.ehackingnews.com/2020/02/whatsapp-and-telegram-group-links.html?utm_source=dlvr.it&utm_medium=twitter E.研究報告 每次登入 Windows Server 2019 都出現關機事件追蹤器(Shutdown Event Tracker) https://dotblogs.com.tw/supershowwei/2020/02/17/110128 (MINILSM)忍!project-scott MiniLSM被暴露出現0day突破,你還敢用嗎 https://github.com/ICEYSELF/project-scott/issues/24 個案分析-勒索病毒Mailto分析報告_10902 https://cert.tanet.edu.tw/prog/opendoc.php?id=2020022610024747648378775106244.pdf Tomcat AJP協議漏洞分析與利用 https://zhuanlan.zhihu.com/p/108410246 GPAC空指針解引用漏洞 https://github.com/gpac/gpac/commit/c7e46e948ebe2d4a532539c7e714cdf655b84521 GhostCat-從源代碼比對到漏洞利用 https://www.colabug.com/2020/0223/7031283/ 如何實時查看MISP實例的威脅情報信息 https://www.freebuf.com/articles/network/226685.html 個人技術站一把罩!部落格建置大全(二)- 將 Github Page 串上自己的域名 http://bit.ly/2HR8GFa 手動標註標籤即將成為過去式 http://bit.ly/2w47efY Firefox漏洞利用研究(一) https://www.freebuf.com/vuls/226853.html 淺談XSS漏洞 https://blog.csdn.net/weixin_45589086/article/details/104495548 CVE-2020-0618復現及分析 https://bbs.pediy.com/thread-257827.htm Weblogic漏洞搭建與復現:CVE-2017-10271 https://cloud.tencent.com/developer/article/1590638 Day5 - 做一個與 LINE Notify 連動的服務 http://bit.ly/39ZsqCF LINE Notify + Flask 的範例專案 https://github.com/louis70109/flask-line-notify 從零開始在 Windows 使用 Node.js 打造專屬於你的 LINE Bot 聊天機器人 http://bit.ly/2w4Of4Y PENTESTER’S WINDOWS NTFS TRICKS COLLECTION https://sec-consult.com/en/blog/2018/06/pentesters-windows-ntfs-tricks-collection/ Exercises for C# Workshop at Wild West Hackin' Fest 2018 & 2019 https://github.com/redcanaryco/wwhf Exploiting Routers With Routersploit https://linuxsecurityblog.com/2019/09/26/exploiting-routers-with-routersploit/ An Overview of Cryptography https://www.garykessler.net/library/crypto.html hammerhead-lineageos https://sourceforge.net/projects/hammerhead-lineageos/ How Microsoft 365’s new solution uses machine learning to stop data leaks and insider attacks https://blogs.microsoft.com/ai/insider-risk-management-microsoft-365/ Sharepoint RCE https://www.inputzero.io/2020/02/sharepoint-rce.html Hacking AWS Cognito Misconfigurations https://www.notsosecure.com/hacking-aws-cognito-misconfigurations/ NekoBot | Auto Exploiter With 500+ Exploit 2000+ Shell https://github.com/tegal1337/NekoBotV1 All in one subdomain and vulnerability scanner https://github.com/theamanrawat/voobar A list of useful payloads and bypass for Web Application Security and Pentest/CTF https://github.com/swisskyrepo/PayloadsAllTheThings Diamorphine Rootkit Signal Privilege Escalation https://packetstormsecurity.com/files/156462/diamorphine_rootkit_signal_priv_esc.rb.txt DECRYPTTEAMVIEWER : DECRYPT TEAMVIEWER CREDENTIALS FROM WINDOWS REGISTRY https://www.easyhack.in/2020/02/23/decryptteamviewer-decrypt-teamviewer-credentials-from-windows-registry/ Escalate Yourself on Windows Platform https://medium.com/@liau.weijie/escalate-yourself-on-windows-platform-885acd2a51ce YET ANOTHER SOAR DESIGN https://www.peerlyst.com/posts/yet-another-soar-design-can-topay How to Brute Force FTP Servers in Python https://www.thepythoncode.com/article/brute-force-attack-ftp-servers-using-ftplib-in-python A Network Enumeration and Attack Toolset https://github.com/m8r0wn/ActiveReign SQLi Without Quotes https://web.archive.org/web/20180920195115/https://eternalnoobs.com/sqli-without-quotes/ AngularJS Client Side Template Injection (XSS) http://ghostlulz.com/angularjs-client-side-template-injection-xss/ Introduction To Modern Routing For Red Team Infrastructure - using Traefik, Metasploit, Covenant and Docker https://khast3x.club/posts/2020-02-14-Intro-Modern-Routing-Traefik-Metasploit-Docker/ Blue Eye a python Recon Tookit script https://hackingpassion.com/blue-eye-a-python-recon-toolkit/ Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage https://github.com/lanjelot/patator xerosploit https://github.com/PleXone2019/ Cacti v1.2.8 authenticated Remote Code Execution (CVE-2020-8813) https://shells.systems/cacti-v1-2-8-authenticated-remote-code-execution-cve-2020-8813/ Chirp of the PoisonFrog https://ironnet.com/blog/chirp-of-the-poisonfrog/ Automated pentest framework for offensive security experts https://github.com/1N3/Sn1per AttackSurfaceMapper is a tool that aims to automate the reconnaissance process https://github.com/superhedgy/AttackSurfaceMapper SQL Injection Cheat Sheet https://www.netsparker.com/blog/web-security/sql-injection-cheat-sheet/ Exploiting Jira for Host Discovery https://medium.com/tenable-techblog/exploiting-jira-for-host-discovery-43be3cddf023 Create a Persistent Back Door with Kali, Netcat and Weevely https://linuxsecurityblog.com/2018/09/13/create-a-persistent-back-door-with-kali-netcat-and-weevely/ Legion - open source network penetration testing tool https://hakin9.org/legion-open-source-network-penetration-testing-tool/ Windows 10 Privacy Guide: Settings Everyone Should Use https://www.bleepingcomputer.com/news/microsoft/windows-10-privacy-guide-settings-everyone-should-use/ Nexus - Just another stealer https://fr3d.hk/blog/nexus-just-another-stealer PyFuscation https://github.com/CBHue/PyFuscation A ransomware developed in python, with bypass technics, for educational purposes https://github.com/ReddyyZ/DeathRansom Bramble is a hacking Open source suite https://github.com/marcrowProject/Bramble Router Analysis Part 1: UART Discovery and SPI Flash Extraction https://wrongbaud.github.io/router-teardown/ Jaeles - The Swiss Army knife for automated Web Application Testing https://hakin9.org/jaeles-the-swiss-army-knife-for-automated-web-application-testing/ Cutting Google out of your life (2019) https://github.com/tycrek/degoogle AMSI_Handler https://github.com/two06/AMSI_Handler 7 Tools For Malicious Document Creation https://bestestredteam.com/2019/03/19/7-tools-for-malicious-document-creation/ Handling Errors in ASP .NET Core 3.1 https://wakeupandcode.com/handling-errors-in-asp-net-core-3-1/ Python django postgresql An new vulnerability has been found in django’s postgresql module https://blog.firosolutions.com/exploits/python-django-vulnerability-2020/ 7 Tips To Keep Windows 7 Secure After End Of Life https://hackersonlineclub.com/7-tips-to-keep-windows-7-secure-after-end-of-life/ 5 Practical Scenarios for XSS Attacks https://pentest-tools.com/blog/xss-attacks-practical-scenarios/ How to Make Flash Drive That Copy's Users Files Silently and Automatically https://www.instructables.com/id/How-to-make-flash-drive-that-copys-users-files-si/ SSRF 101: How Server-Side Request Forgery Sneaks Past Your Web Apps http://bit.ly/3c5ymMa Web Application Exploits and Defenses https://google-gruyere.appspot.com/ Awesome Shodan Search Queries https://github.com/jakejarvis/awesome-shodan-queries PivotSuite: Hack The Hidden Network – A Network Pivoting Toolkit https://hackersonlineclub.com/pivotsuite-hack-the-hidden-network/ Insecure Direct Object Reference (IDOR) — Web-based Application Security, Part 6 https://securityboulevard.com/2020/02/insecure-direct-object-reference-idor-web-based-application-security-part-6/ Use CVE-2020-0668 to perform an arbitrary privileged file move operation https://github.com/RedCursorSecurityConsulting/CVE-2020-0668 OpenDXL Ontology project https://github.com/opencybersecurityalliance/opendxl-ontology Trying to unmask the fake Microsoft support scammers https://securelist.com/trying-to-unmask-the-fake-microsoft-support-scammers-17/33734/#comment-3020138 Keyloggers: How they work and how to detect them (Part 1) https://securelist.com/keyloggers-how-they-work-and-how-to-detect-them-part-1/36138/#comment-3019332 Keyloggers: Implementing keyloggers in Windows. Part Two https://securelist.com/keyloggers-implementing-keyloggers-in-windows-part-two/36358/ Smartphone shopaholic https://securelist.com/smartphone-shopaholic/95544/#comment-2990139 Congratulations, you’ve won! The reality behind online lotteries https://securelist.com/congratulations-youve-won-the-reality-behind-online-lotteries/36450/#comment-2988693 Scammers’ delivery service: exclusively dangerous https://securelist.com/scammers-delivery-service-exclusively-dangerous/66515/#comment-2987776 How I hacked my smart bracelet https://securelist.com/how-i-hacked-my-smart-bracelet/69369/#comment-2999297 Dumping Firmware With the CH341a Programmer | by Rick Wisser https://hakin9.org/dumping-firmware-with-the-ch341a-programmer-by-rick-wisser/ (Ab)using bash-fu to analyze recent Aggah sample https://blog.malwarelab.pl/posts/basfu_aggah/ A post-exploitation powershell tool for extracting juicy info from memory https://github.com/putterpanda/mimikittenz F.商業 紅帽OS整合雲端分析與自動管理,強化企業工作負載支援 https://www.ithome.com.tw/review/134119 施宣輝專訪(一)/安碁資訊進化 打資安國際盃 https://money.udn.com/money/story/5649/4365672 施宣輝專訪(二)/CEO賽車手 眼光放遠 https://money.udn.com/money/story/5649/4365675 疫情延燒,研調:資安電信等 5 大領域增溫 http://technews.tw/2020/02/25/covid-19-rise-5-industries-up/ 思科發佈全新雲端平台SecureX ,簡化資安防護並降低複雜性 http://www.compotechasia.com/a/press/2020/0225/44058.html Google Cloud釋出Chronicle威脅偵測、企業版reCAPTCHA https://ithome.com.tw/news/135992 RSA大會2020創新沙盒冠軍出爐,SECURITI.ai新創聚焦隱私合規 https://www.ithome.com.tw/news/136002 IBM、McAfee發起的開放網路安全聯盟OCA,釋出資安產品共通語言框架 https://ithome.com.tw/news/136014 醫療資訊應用升級窒礙 資安策略或成解方 https://www.digitimes.com.tw/iot/article.asp?cat=158&id=0000579412_PCO3EOHD29MDOF1Y5FFO0 BEC防詐 從事前防禦到事後調查完整解決方案 https://money.udn.com/money/story/5640/4375576 電子郵件詐騙頻傳 台灣區塊鏈新創研發獨步全球解決方案 https://www.rti.org.tw/news/view/id/2053259 區塊科技推出可做電子郵件檢查、加密與存證以防範釣魚詐騙的ChkSender http://bit.ly/2I5Ghvq McAfee買下瀏覽器隔離技術開發商Light Point Security https://ithome.com.tw/news/136028 Symantec Participates in Latest MITRE ATT&CK® Evaluation https://www.symantec.com/blogs/expert-perspectives/symantec-participates-latest-mitre-attckr-evaluation F5 brings WAF app protection to the NGINX platform https://www.zdnet.com/article/f5-brings-waf-app-protection-to-the-nginx-platform/#ftag=RSSbaffb68 Cisco unveils SecureX cloud platform for improved security visibility https://www.zdnet.com/article/cisco-unveils-securex-cloud-platform-for-improved-security-visibility/#ftag=RSSbaffb68 Redefining Security Orchestration and Automation with Cortex XSOAR https://blog.paloaltonetworks.com/2020/02/cortex-xsoar/ The Cortex XSOAR Ecosystem is Exploding with Partner-Owned Integrations https://blog.paloaltonetworks.com/2020/02/cortex-xsoar-ecosystem/ How to Use a Firewall for Network Traffic Analysis and Behavioral Detection https://blog.paloaltonetworks.com/2020/02/cortex-network-traffic-analysis/ Gmail Is Catching More Malicious Attachments With Deep Learning https://www.wired.com/story/gmail-catching-more-malicious-attachments-deep-learning/ Using the FortiGuard Labs Threat Landscape Report to Defend Against Evolving Cybercrime https://www.fortinet.com/blog/threat-research/using-the-fortiguard-labs-threat-landscape-report-to-defend-against-evolving-cybercrime.html Exploitation Framework for Embedded Devices https://github.com/threat9/routersploit 攻撃グループBlackTech が使用するLinux用マルウエア (ELF_TSCookie) https://blogs.jpcert.or.jp/ja/2020/02/elf_tscookie.html G.政府 謹言慎行保密 嚴守資安防駭 https://www.ydn.com.tw/News/373869 Linker Networks臺南辦公室正式揭牌 https://www.chinatimes.com/realtimenews/20200224003230-260410?chdtv 台灣全新「數位身分證」真的要啟動了?超便民5大亮點整理,綁定手機、加密個資還有一堆小細節 https://www.elle.com/tw/life/tech/a31126570/digital-identity-card/ 全球第21大超級電腦助攻,國網中心要當產學界AI推手 https://www.ithome.com.tw/people/135989 H.工控系統/SCADA/ICS Vulnerability Spotlight: Multiple vulnerabilities in Moxa AWK-3131A https://blog.talosintelligence.com/2020/02/vuln-spotlight-moxa-awk-feb-2020.html Moxa MGate 5105-MB-EIP firmware Vulnerability https://nvd.nist.gov/nvd.cfm?cvename=CVE-2020-8858 Moxa PT-7528和PT-7828 安全漏洞 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6983 思科發現Moxa工業設備中的十二個高危漏洞 https://nosec.org/home/detail/4152.html JVN#25766797 Aterm WF1200CR 、WG1200CR および WG2600HS における複数の OS コマンドインジェクションの脆弱性 https://jvn.jp/jp/JVN25766797/ I.教育訓練 SQL Murder Mystery https://mystery.knightlab.com/walkthrough.html Network Address Translation https://packetlife.net/media/library/32/NAT.pdf Physical Treminations https://packetlife.net/media/library/22/physical_terminations.pdf Wireshark Commands Cheatsheet https://hackersonlineclub.com/wireshark-commands-cheatsheet/ Hack The Box: Zetta https://gr4n173.github.io/2020/02/22/htb-zetta.html HackTheBox Writeup — Zetta https://medium.com/@hussaini.faisal/hackthebox-writeup-zetta-d236212776fc Peerlyst Community eBook: 32 Influential Malware Research Professionals https://www.peerlyst.com/posts/peerlyst-community-ebook-32-influential-malware-research-professionals-peerlyst How to become a Cloud Security Expert https://www.peerlyst.com/posts/how-to-become-a-cloud-security-expert-guy-bertrand-kamga Nebula – fake your echo (level01) – walkthrough https://www.peerlyst.com/posts/nebula-fake-your-echo-level01-walkthrough-prasanna-v-balaji Beginner’s Guide to Pentesting IoT Architecture/Network and Setting Up IoT Pentesting Lab http://bit.ly/2VfWfL6 Introduction to Ethical Hacking and Penetration Testing https://www.peerlyst.com/posts/introduction-to-ethical-hacking-and-penetration-testing-1-chiheb-chebbi Cybersecurity Research Topic Guidelines https://www.theweborion.com/blog/cybersecurity-research-topic-guidelines/ Open Source Data Protection/Privacy Regulatory Mapping Project https://github.com/microsoft/data-protection-mapping-project IT to Red Team: How to Make the Jump https://www.peerlyst.com/posts/it-to-red-team-how-to-make-the-jump-matt-george HOW TO PREPARE FOR THE ECSA EXAM https://blog.eccouncil.org/how-to-prepare-for-the-ecsa-exam/ 29 Practical Examples of Nmap Commands for Linux System/Network Administrators https://www.tecmint.com/nmap-command-examples/ How to bypass Machine Learning Malware Detectors with Generative adversarial Networks http://bit.ly/38XmYAd Computer Forensics: A Method to Recover Data from MySQL Database by Utilizing Binlog http://bit.ly/2uskPNP Hacking Tools with Python: Part 1 https://resources.infosecinstitute.com/writing-hacking-tools-with-python-part-1/ Hacking Tools with Python: Part 2 https://resources.infosecinstitute.com/hacking-tools-with-python-part-2/#article ABD - Course Materials For Advanced Binary Deobfuscation https://www.kitploit.com/2020/02/abd-course-materials-for-advanced.html Antivirus fundamentals: Viruses, signatures, disinfection https://www.kaspersky.co.uk/blog/signature-virus-disinfection/7799/ J.物聯網/IOT/人工智慧/車聯網/光聯網/深度學習/機器學習/無人機/人臉辨識 IoT and connected devices: The best thing to happen to home automation, or a frustrating mess https://zd.net/37WYHZv Gold-nuggeting: Machine learning tool simplifies target discovery for pen testers https://portswigger.net/daily-swig/gold-nuggeting-machine-learning-tool-simplifies-target-discovery-for-pen-testers Model Hacking ADAS to Pave Safer Roads for Autonomous Vehicles https://www.mcafee.com/blogs/other-blogs/mcafee-labs/model-hacking-adas-to-pave-safer-roads-for-autonomous-vehicles/ 意法STM32L5首款 兼具低功耗與資安的IoT微控制器 https://www.digitimes.com.tw/tech/dt/n/shwnws.asp?CnlID=13&cat=10&id=0000579079_ZFUL96FB8L2B7I8X33GI8 Nation's youngest engineers further Army drone ambitions https://www.zdnet.com/article/nations-youngest-engineers-to-further-army-drone-ambitions/#ftag=RSSbaffb68 6.近期資安活動及研討會 Coffee & Code 3/1 https://www.meetup.com/Innovate-Taiwan/events/268999350/ WizardAmigos CodeCamp [Taipei,JavaScript,­English] 3/2 https://www.meetup.com/WizardAmigos/events/vdttmrybcfbdb/ 邊緣運算介紹與應用 & Let's AIY ( 人工智慧小聚 - Hsinchu#20200304 ) 3/4 https://www.meetup.com/AIA-Hsinchu/events/267713123/ Android Code Club(Taipei) 3/4 https://www.meetup.com/Taiwan-Android-Developer-Study-Group/events/bkzcmrybcfbgb/ #28 Azure Machine Learning - 圖形化介面的免費 Studio 與付費的 Designer 之差異 3/4 https://www.meetup.com/Azure-Taiwan/events/268794485/ 台北以太坊社群月聚 Monthly Taipei Ethereum Meetup 3/5 https://www.meetup.com/Taipei-Ethereum-Meetup/events/269000957/ 「智慧機械與資安解決方案」技術交流媒合會 3/5 https://forms.gle/ZRksvpLu1hDHUm538 Monad 細說從頭! FunTh#81 3/5 https://www.meetup.com/Functional-Thursday/events/267683150/ Multi-threaded programming in Python 3/11 https://www.meetup.com/pythonhug/events/268925062/ Android Code Club(Taipei) 3/11 https://www.meetup.com/Taiwan-Android-Developer-Study-Group/events/bkzcmrybcfbpb/ GDG Hsinchu #05 - 如何應用ok Google結合物聯網打造智慧生活 3/12 https://www.meetup.com/GDG-Hsinchu/events/268976601/ 人工智慧小聚 - 新竹 ◤從 RNN 到 Attention,自然語言處理的前世今生◢ ◤字型生成經驗分享◢ 3/18 https://www.meetup.com/AIA-Hsinchu/events/268649939/ Scala Taiwan #37 3/18 https://www.meetup.com/Scala-Taiwan-Meetup/events/267899692/ 韓國國際安全博覽會 3/18 https://www.twcert.org.tw/tw/cp-105-3230-a3bd4-1.html Taipei.py 2020 三月聚會 (March Monthly Meeting) 3/19 https://www.meetup.com/Taipei-py/events/268681120/ Study Group - Clean Coder 3/19 https://www.meetup.com/Women-Who-Code-Taipei/events/jlmfprybcfbzb/ 數據分析與機器學習案例實務(一)以PM2.5為例 3/23 https://edu.nchc.org.tw/course/one_course_introduction.asp?lms_auto_course_id=3888&from_course_list_url=course_index Taipei 暗号通貨 (Cryptocurrency) Meetup 3/25 https://www.meetup.com/Taipei-%E6%9A%97%E5%8F%B7%E9%80%9A%E8%B2%A8-Cryptocurrency-Meetup/events/nrxgwqybcfbhc/ Thinking Thursday 第七場 3/26 https://www.meetup.com/Thinking-Thursday/events/266911452/ Flutter Taipei 2020 暖開幕 | Warm Up Party 3/27 https://www.meetup.com/Flutter-Taipei/events/269033933/ 交通大學駭客書院 - 緩衝區溢位攻擊與預防 3/28 https://hackercollege.nctu.edu.tw/?p=1141 black ASIA 2020 Singapore 3/31 ~ 4/3 https://www.blackhat.com/asia-20/briefings/schedule/ Kaspersky® Security Analyst Summit 4/6 ~ 4/9 https://thesascon.com/ QGIS地理資訊研習班 4/8 ~ 4/9 https://www.accupass.com/event/2002120936323517290110 邊緣計算系統之大數據與深度學習應用 4/10 https://edu.nchc.org.tw/course/one_course_introduction.asp?lms_auto_course_id=3883&from_course_list_url=course_index 第二屆ICANN APAC-TWNIC Engagement Forum 與第34屆TWNIC IP政策資源管理會議 4/16 https://forum.twnic.tw/2020/registration.htm 交通大學駭客書院 -入侵行為發覺與應變指南 4/18 https://hackercollege.nctu.edu.tw/?p=1144 VXCON 2020 - APAC 4/18 ~ 4/19 https://www.vxcon.hk/ 2020 Industrial Control Systems (ICS) Cyber Security Conference | Singapore 4/21 ~ 4/23 https://www.icscybersecurityconference.com/singapore/ Taipei 暗号通貨 (Cryptocurrency) Meetup 4/22 https://www.meetup.com/Taipei-%E6%9A%97%E5%8F%B7%E9%80%9A%E8%B2%A8-Cryptocurrency-Meetup/events/nrxgwqybcgbdc/ 亞太資訊安全論壇暨展覽會 4/22 https://www.twcert.org.tw/tw/cp-105-3149-70ad7-1.html 交通大學駭客書院 - 基礎網頁安全與滲透測試 4/25 https://hackercollege.nctu.edu.tw/?p=1147 2020 LINE Taiwan Developers Recruitment Day 4/25 https://engineering.linecorp.com/zh-hant/blog/2020-line-taiwan-technical-recruitment-day/ 交通大學駭客書院 - 基礎網站安全建構實務 5/16 https://hackercollege.nctu.edu.tw/?p=1151 交通大學駭客書院 - 電子郵件之偽造攻擊與防護措施 5/23 https://hackercollege.nctu.edu.tw/?p=1156 Taipei 暗号通貨 (Cryptocurrency) Meetup 5/27 https://www.meetup.com/Taipei-%E6%9A%97%E5%8F%B7%E9%80%9A%E8%B2%A8-Cryptocurrency-Meetup/events/nrxgwqybchbkc/ 交通大學駭客書院 - 進階網頁滲透測試 5/30 https://hackercollege.nctu.edu.tw/?p=1159 邊緣計算系統之大數據與深度學習應用 6/5 https://edu.nchc.org.tw/course/one_course_introduction.asp?lms_auto_course_id=3884&from_course_list_url=course_index 交通大學駭客書院 - 高階網頁滲透測試 6/13 6/20 https://hackercollege.nctu.edu.tw/?p=1161 交通大學駭客書院 - 企業網域控管-Active Directory攻擊與防禦 6/27 https://hackercollege.nctu.edu.tw/?p=1164 CYBERSEC 2020 臺灣資安大會 8/12 https://cyber.ithome.com.tw/