資安事件新聞週報 2020/2/24 ~ 2020/2/28

資安事件新聞週報 2020/2/24 ~ 2020/2/28

1.重大弱點漏洞/後門/Exploit/Zero Day
研究：7家BLE系統單晶片的SDK含有眾多安全漏洞
https://www.ithome.com.tw/news/135969

IBM QRadar Advisor With Watson 加密問題漏洞
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-4557

Zyxel修復了NAS設備中的嚴重漏洞
https://nosec.org/home/detail/4159.html

JVNVU#97748968 複数の ZyXEL 製品に含まれる weblogin.cgi にコマンドインジェクションの脆弱性
https://jvn.jp/vu/JVNVU97748968/

多項合勤防火牆、NAS產品爆指令注入漏洞可執行任意程式碼
https://www.ithome.com.tw/news/136038

Flaw in billions of Wi-Fi devices left communications open to eavesdropping
https://arstechnica.com/information-technology/2020/02/flaw-in-billions-of-wi-fi-devices-left-communications-open-to-eavesdroppng/

JVNVU#94679920 Apache Tomcat の複数の脆弱性に対するアップデート
https://jvn.jp/vu/JVNVU94679920/

思科產品多個漏洞
https://tools.cisco.com/security/center/publicationListing.x

Cisco drops security fixes for Smart Software Manager, security appliances
https://www.helpnetsecurity.com/2020/02/21/cisco-security-fixes/

Cisco多款產品存在高危漏洞，均已修復
https://www.freebuf.com/column/228574.html

關於APACHE TOMCAT存在文件包含漏洞的安全公告
http://bit.ly/2TabRgv

Multiple buffer overflow vulnerabilities exist in IBM® Db2® leading to privilege escalation (CVE-2020-4204)
https://www.ibm.com/support/pages/node/2875875

Cisco軟件管理平台曝出默認密碼漏洞
https://nosec.org/home/detail/4143.html

因嚴重IE漏洞微軟再為已停止支持的WINDOWS 7發布安全更新
http://bit.ly/2SWEAVS

因嚴重 IE 漏洞 微軟再爲已停止支持的 Win7 發佈安全更新
https://www.chainnews.com/zh-hant/articles/602014569888.htm

建議各單位勿開啟遠端桌面協定（RDP)，以避免系統遭到入侵
http://net.nthu.edu.tw/2009/mailing:announcement:20200221_01

IE記憶體毁損漏洞傳有攻擊發生，迫使微軟對Windows 7發出例外修補
https://www.ithome.com.tw/news/135970

微軟更新Azure Security Center現可偵測Linux上的無檔案攻擊
https://www.ithome.com.tw/news/135991

駭客正在掃描微軟Exchange伺服器漏洞，還沒修補的請儘快
https://www.ithome.com.tw/news/136043

D-Link DGS-1250 Header Injection
https://packetstormsecurity.com/files/156473/dlinkdgs1250-inject.txt

AVIRA Generic Malformed Container Bypass
https://packetstormsecurity.com/files/156472/TZO-19-2020.txt

Open-Xchange App Suite / Documents Server-Side Request Forgery
https://packetstormsecurity.com/files/156474/oxappsuite-ssrf.txt

通航DVR存在安全漏洞，煩請儘速確認並進行更新
http://net.nthu.edu.tw/2009/mailing:announcement:20200224_01

通航DVR - 未經授權存取維護管理介面
https://tvn.twcert.org.tw/taiwanvn/TVN-201910003

VULNERABILITIES IN VMWARE
http://bit.ly/2uoCoOK

Google系統出包緊急修復漏洞 旗下智慧家居卻當機17小時
https://cnews.com.tw/137200227a05/

Google patches Chrome zero-day under active attacks
https://www.zdnet.com/article/google-patches-chrome-zero-day-under-active-attacks/#ftag=RSSbaffb68

Google Chrome瀏覽器存在安全漏洞(CVE-2020-6407與CVE-2020-6418)
https://www.nccst.nat.gov.tw/VulnerabilityDetail?lang=zh&seq=1115

Google Chrome 多個漏洞
https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop_24.html

Install Latest Chrome Update to Patch 0-Day Bug Under Active Attacks
https://thehackernews.com/2020/02/google-chrome-zero-day.html

Firefox enables DNS-over-HTTPS by default (with Cloudflare) for all U.S. users
https://thehackernews.com/2020/02/firefox-dns-over-https.html

New Wi-Fi Encryption Vulnerability Affects Over A Billion Devices
https://thehackernews.com/2020/02/kr00k-wifi-encryption-flaw.html

Kr00k A serious vulnerability deep inside Wi-Fi encryption
https://www.eset.com/int/kr00k/

Kr00k漏洞讓駭客可解密Wi-Fi封包　至少10億台連網產品曝險
http://bit.ly/2T73d3H

Kr00k：允許黑客“破壞” Wi-Fi網絡的錯誤
https://zh-tw.secnews.gr/213451/kr00k%E8%87%B3sfalma-pou-epitrepei-stous-chakers-na-spasoun-diktya-wi-fi/

OpenSMTPD 安全漏洞
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8794

Magento WooCommerce CardGate Payment Gateway 2.0.30 - Payment Process Bypass
https://www.exploit-db.com/exploits/48135

JVN#11708203 複数のリコー製プリンタおよび複合機における複数のバッファオーバーフローの脆弱性
https://jvn.jp/jp/JVN11708203/

2.銀行/金融/保險/證券/支付系統/ 新聞及資安
資安威脅無所不在 2019年資安險投保件數明顯增
https://m.ctee.com.tw/livenews/aj/a78817002020022122395599?area=

資安險投保夯，去年增3.5倍
http://bit.ly/2PmalHc

臺德加強雙邊銀行業及保險業之跨境監理合作
http://bit.ly/2va10v6

顛覆傳統金融 金管會核准十件創新試辦業務
https://money.udn.com/money/story/5613/4364466

綁Google Pay的Paypal帳戶遭盜刷，美、德及俄國用戶遭殃
https://www.ithome.com.tw/news/135997

中華民國保險代理人商業同業公會提醒業者應注意駭客利用近期嚴重特殊傳染性肺炎疫情，透過惡意郵件、惡意程式等方式進行社交工程攻擊
http://www.ciaa.org.tw/pages/HotNewsDetail_04.aspx?PKID=20200224000007

二二八連假 金管會要求保險公司保戶服務不中斷
https://money.udn.com/money/story/5613/4371937

澳洲多家銀行與金融單位接獲 DDoS 攻擊威脅
https://www.twcert.org.tw/tw/cp-104-3401-3023a-1.html

Indian income tax agency patched a security flaw that would’ve allowed hackers to take over its site
http://bit.ly/2T0pb76

Credit Card Skimmer Found on Nine Sites, Researchers Ignored
https://www.bleepingcomputer.com/news/security/credit-card-skimmer-found-on-nine-sites-researchers-ignored/

Public warned of new banking scam targeting social media users
https://www.corkbeo.ie/news/local-news/public-warned-new-banking-scam-17798023

住信ＳＢＩネット銀行などのシステム障害 ほぼ解消
https://www3.nhk.or.jp/news/html/20200223/k10012297941000.html

黑客在PayPal的Google Pay集成中發現漏洞進行未經授權的付款
https://www.cnbeta.com/articles/tech/948363.htm

PayPal accounts are getting abused en-masse for unauthorized payments
https://www.zdnet.com/article/paypal-accounts-are-getting-abused-en-masse-for-unauthorized-payments/#ftag=RSSbaffb68

Grab raises $850M from Japanese investors to fuel financial services push
https://www.zdnet.com/article/grab-raises-850m-from-japanese-investors-to-fuel-financial-services-expansion/#ftag=RSSbaffb68

Australian banks targeted by DDoS extortionists
https://www.zdnet.com/article/australian-banks-targeted-by-ddos-extortionists/

ACSC Aware of DDoS Threats being made against Australian Organisations
https://www.cyber.gov.au/threats/acsc-aware-ddos-threats-being-made-against-australian-organisations

18 Sniffers Steal Payment Card Data from Print Store Customers
https://www.bleepingcomputer.com/news/security/18-sniffers-steal-payment-card-data-from-print-store-customers/#.XlZOfygtEVc.twitter

3.電子支付/電子票證/行動支付/ pay/新聞及資安
金管會鬆綁電支機構合作帳戶 幫民眾省手續費
http://pchome.megatime.com.tw/news/cat1/20200220/15822043937677522003.html

電支帳戶限制再鬆綁 開放信合社農業金庫
http://bit.ly/37Q9HYU

Brazil unveils instant payments platform
https://www.zdnet.com/article/brazil-unveils-instant-payments-platform/#ftag=RSSbaffb68

4.虛擬貨幣/區塊鍊相關新聞及資安
資安專欄：圖文拆解「交易挖礦始祖 FCoin」資產流向，鼎盛時期便埋下禍根
https://www.blocktempo.com/fcoin-asset-flow-history/

國家級數位貨幣實驗，瑞典央行先行計畫測試數位克朗
https://finance.technews.tw/2020/02/25/sweden-starts-testing-new-official-digital-currency/

瑞典中央銀行開始測試數位貨幣電子克朗
https://www.ithome.com.tw/news/135962

高調炫富到發文求助！一比特幣富豪 SIM 卡被駭，「13.7億」的 BTC BCH 遭竊引市場恐慌
https://m.xuite.net/blog/jodenh/jOrz/588928720

MASEx為TTChain提供擴張資金，將徹底改變數位資產交易所生態系統
http://www.businesswirechina.com/hk/news/42862.html

5.資安事件新聞

A.病毒木馬 / 殭屍網路 / 勒索軟體 / Adware /APT /後門程式
首例！「羅賓漢」勒索軟體借Gigabyte舊驅動程式「謀殺」安全軟體
http://bit.ly/39Txp7T

LokiBot 偽裝成熱門遊戲啟動器並植入可編譯的C#程式碼檔案
https://blog.trendmicro.com.tw/?p=63489

偽裝韓國公平貿易委員會的惡意垃圾郵件,夾帶勒索病毒與竊個資木馬
https://blog.trendmicro.com.tw/?p=63430

駭客發送暗藏木馬程式的疫情資訊，讓你的電腦也感染「新冠病毒」
https://buzzorange.com/techorange/2020/02/24/coronavirus-computer-version/

疫症當前混水摸魚　報告指駭客利用疫情偽裝攻擊
http://bit.ly/2w1QZ38

Check Point：Haken惡意程式成功進駐Google Play上的8款Android程式
https://www.ithome.com.tw/news/135983

小心！惡意軟體Emotet假新冠肺炎之名發動郵件攻擊
https://www.ctwant.com/article/38515

銀行木馬Emotet 再進化, 新增 Wi-Fi 散播能力
https://blog.trendmicro.com.tw/?p=63467

惡意軟體Emotet偽裝成新型冠狀病毒資訊，這些疫情連結千萬不要亂點
https://www.techbang.com/posts/76407-the-virus-is-rampant-too-malware-spread-under-the-theme-of-new-coronavirus

勢科技年度資安總評出爐 去年攔截超過6100萬次勒索病毒攻擊
https://cnews.com.tw/124200226a01/

小心你的電腦也染上「新冠病毒」！這類郵件、檔案千萬別點開
https://cnews.com.tw/137200225a05/

駭客集團勾結獲利！醫療業成勒索病毒苦主，看準受害者怕曝光心態
https://www.bnext.com.tw/article/56719/trendmicro-bec-ransomware

勒索病毒成資安主要威脅　去年逾700家醫院受害
https://newtalk.tw/news/view/2020-02-27/373151

簡單又便宜的資料竊取軟體服務大為流行，可竊取六十多種應用軟體的資料
https://www.twcert.org.tw/tw/cp-104-3398-2208a-1.html

Cybersecurity Research During the Coronavirus Outbreak and After
https://securelist.com/cybersecurity-research-during-the-coronavirus-outbreak-and-after/96275/

Microsoft Brings Defender Antivirus for Linux, Coming Soon for Android and iOS
https://thehackernews.com/2020/02/windows-defender-atp-linux-android.html

2020-02-11 - PCAP AND MALWARE FOR AN ISC DIARY (URSNIF)
https://www.malware-traffic-analysis.net/2020/02/11/index.html

2020-02-19 - TRICKBOT GTAG WECAN23 INFECTION
https://www.malware-traffic-analysis.net/2020/02/19/index.html

SMS Phishing Campaign Used to Spread Emotet: Report
https://www.bankinfosecurity.com/sms-phishing-campaign-used-to-spread-emotet-report-a-13749

Facilities Maintenance Firm Recovering From Malware Attack
https://www.bankinfosecurity.com/facilities-maintenance-firm-recovering-from-malware-attack-a-13747

ObliqueRAT linked to threat group launching attacks against government targets
https://zd.net/2up7UMB

Coronavirus now attacks the cyber world
https://www.nationalheraldindia.com/flick-past/coronavirus-now-attacks-the-cyber-world

Palestinians Targeted By ‘Gazan’ Hackers As Researchers Unearth Mysterious New Backdoor
http://bit.ly/2wIT2cT

January 2020’s Most Wanted Malware: Coronavirus-themed spam spreads malicious Emotet malware
http://bit.ly/3a2LbVZ

Palestinians Targeted By ‘Gazan’ Hackers As Researchers Unearth Mysterious New Backdoor
http://bit.ly/2wIT2cT

NEW CYBER ESPIONAGE CAMPAIGNS TARGETING PALESTINIANS - PART 1: THE SPARK CAMPAIGN
http://bit.ly/2HRxlcY

NEW CYBER ESPIONAGE CAMPAIGNS TARGETING PALESTINIANS - PART 2: THE DISCOVERY OF THE NEW, MYSTERIOUS PIEROGI BACKDOOR
http://bit.ly/3c27Za6

ATM Malware WinPotv3 showme.exe
http://bit.ly/2Vg5Od5

ATM Malware WinPotv3 555.exe
http://bit.ly/39WzfVB

DoppelPaymer Ransomware Launches Site to Post Victim's Data
https://www.bleepingcomputer.com/news/security/doppelpaymer-ransomware-launches-site-to-post-victims-data/

New Mozart Malware Gets Commands, Hides Traffic Using DNS
https://www.bleepingcomputer.com/news/security/new-mozart-malware-gets-commands-hides-traffic-using-dns/

Mobile malware evolution 2019
https://securelist.com/mobile-malware-evolution-2019/96280/

Coronavirus-themed Attacks Target Global Shipping Concerns
https://www.proofpoint.com/us/corporate-blog/post/coronavirus-themed-attacks-target-global-shipping-concerns

Coronavirus-Themed Emails Deliver Malware, Phishing, Scams
https://www.securityweek.com/coronavirus-themed-emails-deliver-malware-phishing-scams

Coronavirus Fears Exploited in Phishing Attacks
https://appriver.com/resources/blog/january-2020/coronavirus-fears-exploited-phishing-attacks

Scam Of The Week: Coronavirus Phishing Attacks In The Wild
https://blog.knowbe4.com/heads-up-scam-of-the-week-coronavirus-phishing-attacks-in-the-wild

Ransomware Against the Machine: How Adversaries are Learning to Disrupt Industrial Production by Targeting IT and OT
https://www.fireeye.com/blog/threat-research/2020/02/ransomware-against-machine-learning-to-disrupt-industrial-production.html

North Korea Is Recycling Mac Malware. That's Not the Worst Part
https://www.wired.com/story/malware-reuse-north-korea-lazarus-group/

Hackers Expand Their Repertoire as Trend Micro Blocks 52 Billion Threats in 2019
https://blog.trendmicro.com/hackers-expand-their-repertoire-as-trend-micro-blocks-52-billion-threats-in-2019/

Sodinokibi Ransomware May Tip NASDAQ on Attacks to Hurt Stock Prices
https://www.bleepingcomputer.com/news/security/sodinokibi-ransomware-may-tip-nasdaq-on-attacks-to-hurt-stock-prices/#.XlcgBmPbbSk.twitter

B.行動安全 / iPhone / Android /穿戴裝置 /App
「尋找我的手機」亂跳通知？台灣三星曝原因原來是
https://cnews.com.tw/137200221a03/

新冠肺炎疫情助攻宅經濟 大陸APP下載量2月大爆發
http://bit.ly/2T3u5jN

5G商用台灣7月後啟動5G商用！三大供應商各有特色
https://newtalk.tw/news/view/2020-02-23/370511

Google Play「大屠殺」下架600款軟體！大動作懲處 獵豹移動旗下程式全遭刪
https://cnews.com.tw/137200224a04/

TikTok又碰壁 美運輸局宣布禁用
http://bit.ly/2STuw1b

谷歌警告：華為新款手機用戶若加載Gmail和Youtube會有資安漏洞
https://www.cmmedia.com.tw/home/articles/20062

三星在查找手機應用程式出現烏龍推送後主動調查資料洩露
https://news.xfastest.com/samsung/76978/samsung-blasts-galaxy-phones-worldwide-with-weird-1-notification/

烏龍推播後又出包！三星證實洩漏150用戶個資 稱兩項技術錯誤無關連
https://cnews.com.tw/137200226a05/

三星官方證實，發生手機用戶個人資料洩露問題
https://news.knowing.asia/news/a92f1dac-81ca-4b89-ac71-5ec9bced415f

德媒：很多剛出廠的安卓手機就裝有後門 可監視主人
https://www.soundofhope.org/post/347938?lang=b5

Google 開始限制 Android App 於背景追蹤用戶所在地資訊
https://www.twcert.org.tw/tw/cp-104-3396-3a4dc-1.html

Google Play Store 中多個 Android 平台 VPN App 可能帶來嚴重資安風險
https://www.twcert.org.tw/tw/cp-104-3395-dfd64-1.html

提防手機公共充電站的「Juice Jacking」陷阱
https://www.hkcert.org/my_url/zh/blog/20022801

Google Bans 600 Android Apps from Play Store for Serving Disruptive Ads
https://thehackernews.com/2020/02/android-adware-apps-banned.html

Automation: Take the fast lane on the path to 5G
https://www.blueplanet.com/blog/automation-take-the-fast-lane-on-the-path-to-5G.html

Is your phone listening to you
https://www.welivesecurity.com/2020/02/24/is-your-phone-listening-to-you/

New LTE Network Flaw Could Let Attackers Impersonate 4G Mobile Users
https://thehackernews.com/2020/02/lte-network-4g-vulnerability.html

Google Advises Android Developers to Encrypt App Data On Device
https://thehackernews.com/2020/02/android-app-data-encryption.html

C.事件 / 駭客 / DDOS / APT / 雲端/ 暗網/ 徵才 / 國際資安事件
資安人必看！SecBuzzer 暗網情資整理（2020 年 1、2 月號）
https://secbuzzer.co/post/173

全新駭侵攻擊手法，可繞過 AWS 伺服器上防火牆並自由進出
https://www.twcert.org.tw/tw/cp-104-3397-0e893-1.html

雲端資安,讓 IT 人員輾轉難眠的四個原因
https://blog.trendmicro.com.tw/?p=63447

另類白武士　2019 年有 7 位道德駭客賞金收入超 100 萬美元
https://hk.xfastest.com/47110/hackerone-white-hat/

資安問題當道，電商經營不可忽略的三大安全關卡
http://bit.ly/2Px97ZH

Google開發者大會聚焦AI、資安議題 不畏疫情照辦但官方表示「受理退票」
https://cnews.com.tw/137200224a02/

肺炎疫情也在網路延燒，Check Point 提醒相關資安風險
https://technews.tw/2020/02/24/check-point-warnning-covid-19-risk-at-internet/

從防疫反思網路安全策略
https://ithome.com.tw/voice/136058

PTT洩露總統秘密行程 中華電信員工遭開除
https://www.chinatimes.com/realtimenews/20200228001712-260402?ctrack=mo_main_rtime_p15&chdtv

新型數位化投票機 可靠度遭質疑
http://bit.ly/2VfchVE

上GIT 我只想知道為什麼一直斷線 駭客攻擊 一直瘋狂斷線我怎麼傳 駭客攻擊
https://memes.tw/wtf/164561

刑事局警官逮學生駭客　愛心輔導後變身資安公司CEO
https://www.ettoday.net/news/20200225/1653281.htm

NCT官推被駭客攻入！混韓圈久了，什麼世面都能見到
https://www.koreastardaily.com/tc/news/124520

連駭客都生氣！國外企業不理會網站漏洞提醒　駭客獲悉乾脆寄信警告消費者
https://www.ettoday.net/news/20200224/1653023.htm

60萬人粉專遭駭「狂發A片」！　9年心血被毀…施菲亞搶不回崩潰：世上還有公理嗎
https://star.ettoday.net/news/1651778

辣模臉書遭駭「狂發A片」 慘淪色情頁面崩潰了
https://ent.ltn.com.tw/news/breakingnews/3077356

駭客入侵太多次！智慧門鈴災情頻傳 宣布強制用戶啟動雙重認證機制
https://cnews.com.tw/137200222a02/

企業防疫應變新思維 遠距工作資安監控零死角
http://www.ctimes.com.tw/DispNews/tw/2002210759RM.shtml

中國政府的「另類防疫」：組織網軍，刪除網路上的負面疫情消息
https://buzzorange.com/techorange/2020/02/26/coronavirus-cyber-army/

美國關切：台灣敏感技術遭中國買走或盜走 中資滲透還有很多法制漏洞
https://www.cmmedia.com.tw/home/articles/20055

美國防部要求承包商須具備網路安全認證
https://www.isda.org.tw/2020/02/7496776930d1f7fc03aaf5e8f69764d5/

美英指責俄羅斯駭客大舉攻擊喬治亞
https://ithome.com.tw/news/135956

美國白宮對華為限制措施仍未定案 有官員形容華為像「黑手黨」
https://news.cnyes.com/news/id/4446233

澳情報官：外國間諜威脅前所未有 程度超冷戰
https://www.epochtimes.com/b5/20/2/24/n11892672.htm

澳情報機構示警：新納粹崛起、間諜活動超越冷戰
https://news.ltn.com.tw/news/world/breakingnews/3079026

澳洲破獲重要間諜網 潛伏特工祕密活動多年
https://www.epochtimes.com/b5/20/2/25/n11893839.htm

從美國起訴中國網軍看戰略支援部隊
http://bit.ly/2VuBUBL

Home Affairs pushes back against encryption law proposals
https://www.zdnet.com/article/home-affairs-pushes-back-against-encryption-law-proposals/#ftag=RSSbaffb68

FBI recommends passphrases over password complexity
https://www.zdnet.com/article/fbi-recommends-passphrases-over-password-complexity/#ftag=RSSbaffb68

Municipal Cyberattacks Put Us All at Risk: What Can We Learn From Previous Attacks
https://securityintelligence.com/articles/municipal-cyberattacks-put-us-all-at-risk-what-can-we-learn-from-previous-attacks/

US, UK Blame Russia for Cyberattack in Country of Georgia
https://www.bankinfosecurity.com/us-uk-blame-russia-for-cyberattack-in-country-georgia-a-13748

Symantec Security Summary
https://www.symantec.com/blogs/feature-stories/symantec-security-summary

Cyber attack on PM’s office, state bodies attributed to foreign spies
http://bit.ly/32sZ7WK

FBI Makes Arrest in DDoS Attack on Candidate's Website
https://www.bankinfosecurity.com/fbi-makes-arrest-in-ddos-attack-on-candidates-website-a-13754

FBI
https://www.documentcloud.org/documents/6782920-USA-v-Dam.html

Gamaredon APT Improves Toolset to Target Ukraine Government, Military
https://threatpost.com/gamaredon-apt-toolset-ukraine/152568/

R0000275:【2020 趨勢科技全年實習】軟體核心研發 (資安威脅研究/機器學習/雲端架構/系統設計與開發類)
https://m.104.com.tw/job/6vpgy

網路資安工程師
https://job.taiwanjobs.gov.tw/Internet/jobwanted/JobDetail.aspx?EMPLOYER_ID=867460&HIRE_ID=9562643

D.資料外洩/個資法/GDPR/網路詐騙/網路釣魚/盜刷/假新聞
美國國防部所屬單位遭駭，相關人員之個人資訊被竊
https://www.twcert.org.tw/tw/cp-104-3402-5b79e-1.html

駭客如何通過電匯詐騙在三天內盜走了45萬美元
https://on.wsj.com/32qd1cc

擁有190萬追蹤的電玩直播頻道遭駭，進行比特幣詐騙斬獲24,000 美元
https://www.blocktempo.com/youtube-channel-neebs-got-hacked/

知名 YouTube 電玩直播頻道被盜，用以進行加密貨幣詐騙
https://www.twcert.org.tw/tw/cp-104-3382-e0dd6-1.html

MGM飯店超過千萬名住客資料被洩露到駭客論壇
https://www.ithome.com.tw/news/135944

小賈斯丁也遭殃！美國 MGM 飯店爆大規模資料外洩
https://www.inside.com.tw/article/19001-us-mgm-resorts-intl-cyber-leak

米高梅酒店千萬賓客個資遇駭 受害者包括政商名流
https://udn.com/news/story/6813/4360915

美國防部通訊IT單位去年員工個資疑遭外洩
https://www.ithome.com.tw/news/135945

負責總統通訊安全機構也被駭 20萬人受影響
https://udn.com/news/story/6813/4360916

少女為衝高點閱率　竟散布疫情假訊息
https://tw.news.appledaily.com/local/20200221/DLU2LS3VEZ4S2A7PXTKPNKC3MU/

控粉絲外流「肉包包」性愛片　直播主判賠15萬
https://tw.news.appledaily.com/local/20200221/WRSNBV2WJDS2XESRYJ7PVETZFQ/

打擊不實資訊要全社會參與！AIT辦科技挑戰賽　台灣「防詐達人」抱回逾520萬獎金
https://www.storm.mg/article/2315286

對抗假訊息 酈英傑：須社會共同參與
https://news.ltn.com.tw/news/politics/paper/1353530

詐團駭客耍疫招，騙錢騙個資
http://bit.ly/2HJL8lN

帳號密碼太簡單容易破解，太難又記不住怎麼辦？五個方法幫助你保管所有密碼
https://www.storm.mg/lifestyle/2322495

FBI：以長密詞取代密碼、不應設定密碼變更期間或次數上限
https://ithome.com.tw/news/135993

企業郵件詐騙連刑事局也頭痛！區塊鏈新創推防詐工具，一鍵讓駭客現形
https://www.bnext.com.tw/article/56731/blockchainsecurity-bec-cybersecurity

維護用戶資安優先！蘋果宣布限制網站安全憑證效期縮至398天
https://news.sina.com.tw/article/20200227/34359678.html

美臉部辨識新創「Clearview AI」遇駭 全部客戶名單遭竊
https://news.ltn.com.tw/news/world/breakingnews/3082551

LINE官方3招防詐騙　教用戶辨識「釣魚網站」
https://www.ettoday.net/news/20200227/1655321.htm

全面資訊一手掌握：網路防護、網路陷阱，做個數位公民
http://bit.ly/3abppiM

推特疫情謠言滿天飛 查核中心揭殭屍帳號6特點
https://news.ltn.com.tw/news/life/breakingnews/3082528

數據分析公司不當取得用戶個資 臉書提聯邦訴訟
https://www.cna.com.tw/news/aopl/202002280106.aspx

以色列選舉系統漏洞導致選民資料外洩
https://www.nccst.nat.gov.tw/NewsRSSDetail?lang=zh&RSSType=news&seq=16356

設定不當的 AWS S3 儲存貯體,外洩 36,000 筆受刑人紀錄
https://blog.trendmicro.com.tw/?p=63464

Financial and Customer Info being Exposed in Slickwraps Data Breach
https://www.ehackingnews.com/2020/02/financial-and-customer-info-being.html

New Mexico Sues Google for Mining Children's Data
https://www.bleepingcomputer.com/news/legal/new-mexico-sues-google-for-mining-childrens-data/

Defense Department Agency Reports Data Breach
https://www.bankinfosecurity.com/defense-department-agency-reports-data-breach-a-13750

Hackers Gain Access to Sensitive Data; Release Veterans’ Stolen Data Related To PTSD Claims
https://www.ehackingnews.com/2020/02/hackers-gain-access-to-sensitive-data.html

BEC Group Favors G-Suite, Physical Checks: Report
https://www.bankinfosecurity.com/bec-group-favors-g-suite-physical-checks-report-a-13755

Exaggerated Lion
https://www.agari.com/cyber-intelligence-research/whitepapers/acid-agari-exaggerated-lion.pdf

Why Minimizing Human Error is the Only Viable Defense Against Spear Phishing
https://thehackernews.com/2020/02/spear-phishing-cybersecurity.html

WhatsApp and Telegram Group Links Leaked Online
https://www.ehackingnews.com/2020/02/whatsapp-and-telegram-group-links.html?utm_source=dlvr.it&utm_medium=twitter

E.研究報告
每次登入 Windows Server 2019 都出現關機事件追蹤器（Shutdown Event Tracker）
https://dotblogs.com.tw/supershowwei/2020/02/17/110128

（MINILSM）忍！project-scott MiniLSM被暴露出現0day突破，你還敢用嗎
https://github.com/ICEYSELF/project-scott/issues/24

個案分析-勒索病毒Mailto分析報告_10902
https://cert.tanet.edu.tw/prog/opendoc.php?id=2020022610024747648378775106244.pdf

Tomcat AJP協議漏洞分析與利用
https://zhuanlan.zhihu.com/p/108410246

GPAC空指針解引用漏洞
https://github.com/gpac/gpac/commit/c7e46e948ebe2d4a532539c7e714cdf655b84521

GhostCat-從源代碼比對到漏洞利用
https://www.colabug.com/2020/0223/7031283/

如何實時查看MISP實例的威脅情報信息
https://www.freebuf.com/articles/network/226685.html

個人技術站一把罩！部落格建置大全（二）- 將 Github Page 串上自己的域名
http://bit.ly/2HR8GFa

手動標註標籤即將成為過去式
http://bit.ly/2w47efY

Firefox漏洞利用研究（一）
https://www.freebuf.com/vuls/226853.html

淺談XSS漏洞
https://blog.csdn.net/weixin_45589086/article/details/104495548

CVE-2020-0618復現及分析
https://bbs.pediy.com/thread-257827.htm

Weblogic漏洞搭建與復現：CVE-2017-10271
https://cloud.tencent.com/developer/article/1590638

Day5 - 做一個與 LINE Notify 連動的服務
http://bit.ly/39ZsqCF

LINE Notify + Flask 的範例專案
https://github.com/louis70109/flask-line-notify

從零開始在 Windows 使用 Node.js 打造專屬於你的 LINE Bot 聊天機器人
http://bit.ly/2w4Of4Y

PENTESTER’S WINDOWS NTFS TRICKS COLLECTION
https://sec-consult.com/en/blog/2018/06/pentesters-windows-ntfs-tricks-collection/

Exercises for C# Workshop at Wild West Hackin' Fest 2018 & 2019
https://github.com/redcanaryco/wwhf

Exploiting Routers With Routersploit
https://linuxsecurityblog.com/2019/09/26/exploiting-routers-with-routersploit/

An Overview of Cryptography
https://www.garykessler.net/library/crypto.html

hammerhead-lineageos
https://sourceforge.net/projects/hammerhead-lineageos/

How Microsoft 365’s new solution uses machine learning to stop data leaks and insider attacks
https://blogs.microsoft.com/ai/insider-risk-management-microsoft-365/

Sharepoint RCE
https://www.inputzero.io/2020/02/sharepoint-rce.html

Hacking AWS Cognito Misconfigurations
https://www.notsosecure.com/hacking-aws-cognito-misconfigurations/

NekoBot | Auto Exploiter With 500+ Exploit 2000+ Shell
https://github.com/tegal1337/NekoBotV1

All in one subdomain and vulnerability scanner
https://github.com/theamanrawat/voobar

A list of useful payloads and bypass for Web Application Security and Pentest/CTF
https://github.com/swisskyrepo/PayloadsAllTheThings

Diamorphine Rootkit Signal Privilege Escalation
https://packetstormsecurity.com/files/156462/diamorphine_rootkit_signal_priv_esc.rb.txt

DECRYPTTEAMVIEWER : DECRYPT TEAMVIEWER CREDENTIALS FROM WINDOWS REGISTRY
https://www.easyhack.in/2020/02/23/decryptteamviewer-decrypt-teamviewer-credentials-from-windows-registry/

Escalate Yourself on Windows Platform
https://medium.com/@liau.weijie/escalate-yourself-on-windows-platform-885acd2a51ce

YET ANOTHER SOAR DESIGN
https://www.peerlyst.com/posts/yet-another-soar-design-can-topay

How to Brute Force FTP Servers in Python
https://www.thepythoncode.com/article/brute-force-attack-ftp-servers-using-ftplib-in-python

A Network Enumeration and Attack Toolset
https://github.com/m8r0wn/ActiveReign

SQLi Without Quotes
https://web.archive.org/web/20180920195115/https://eternalnoobs.com/sqli-without-quotes/

AngularJS Client Side Template Injection (XSS)
http://ghostlulz.com/angularjs-client-side-template-injection-xss/

Introduction To Modern Routing For Red Team Infrastructure - using Traefik, Metasploit, Covenant and Docker
https://khast3x.club/posts/2020-02-14-Intro-Modern-Routing-Traefik-Metasploit-Docker/

Blue Eye a python Recon Tookit script
https://hackingpassion.com/blue-eye-a-python-recon-toolkit/

Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage
https://github.com/lanjelot/patator

xerosploit
https://github.com/PleXone2019/

Cacti v1.2.8 authenticated Remote Code Execution (CVE-2020-8813)
https://shells.systems/cacti-v1-2-8-authenticated-remote-code-execution-cve-2020-8813/

Chirp of the PoisonFrog
https://ironnet.com/blog/chirp-of-the-poisonfrog/

Automated pentest framework for offensive security experts
https://github.com/1N3/Sn1per

AttackSurfaceMapper is a tool that aims to automate the reconnaissance process
https://github.com/superhedgy/AttackSurfaceMapper

SQL Injection Cheat Sheet
https://www.netsparker.com/blog/web-security/sql-injection-cheat-sheet/

Exploiting Jira for Host Discovery
https://medium.com/tenable-techblog/exploiting-jira-for-host-discovery-43be3cddf023

Create a Persistent Back Door with Kali, Netcat and Weevely
https://linuxsecurityblog.com/2018/09/13/create-a-persistent-back-door-with-kali-netcat-and-weevely/

Legion - open source network penetration testing tool
https://hakin9.org/legion-open-source-network-penetration-testing-tool/

Windows 10 Privacy Guide: Settings Everyone Should Use
https://www.bleepingcomputer.com/news/microsoft/windows-10-privacy-guide-settings-everyone-should-use/

Nexus - Just another stealer
https://fr3d.hk/blog/nexus-just-another-stealer

PyFuscation
https://github.com/CBHue/PyFuscation

A ransomware developed in python, with bypass technics, for educational purposes
https://github.com/ReddyyZ/DeathRansom

Bramble is a hacking Open source suite
https://github.com/marcrowProject/Bramble

Router Analysis Part 1: UART Discovery and SPI Flash Extraction
https://wrongbaud.github.io/router-teardown/

Jaeles - The Swiss Army knife for automated Web Application Testing
https://hakin9.org/jaeles-the-swiss-army-knife-for-automated-web-application-testing/

Cutting Google out of your life (2019)
https://github.com/tycrek/degoogle

AMSI_Handler
https://github.com/two06/AMSI_Handler

7 Tools For Malicious Document Creation
https://bestestredteam.com/2019/03/19/7-tools-for-malicious-document-creation/

Handling Errors in ASP .NET Core 3.1
https://wakeupandcode.com/handling-errors-in-asp-net-core-3-1/

Python django postgresql An new vulnerability has been found in django’s postgresql module
https://blog.firosolutions.com/exploits/python-django-vulnerability-2020/

7 Tips To Keep Windows 7 Secure After End Of Life
https://hackersonlineclub.com/7-tips-to-keep-windows-7-secure-after-end-of-life/

5 Practical Scenarios for XSS Attacks
https://pentest-tools.com/blog/xss-attacks-practical-scenarios/

How to Make Flash Drive That Copy's Users Files Silently and Automatically
https://www.instructables.com/id/How-to-make-flash-drive-that-copys-users-files-si/

SSRF 101: How Server-Side Request Forgery Sneaks Past Your Web Apps
http://bit.ly/3c5ymMa

Web Application Exploits and Defenses
https://google-gruyere.appspot.com/

Awesome Shodan Search Queries
https://github.com/jakejarvis/awesome-shodan-queries

PivotSuite: Hack The Hidden Network – A Network Pivoting Toolkit
https://hackersonlineclub.com/pivotsuite-hack-the-hidden-network/

Insecure Direct Object Reference (IDOR) — Web-based Application Security, Part 6
https://securityboulevard.com/2020/02/insecure-direct-object-reference-idor-web-based-application-security-part-6/

Use CVE-2020-0668 to perform an arbitrary privileged file move operation
https://github.com/RedCursorSecurityConsulting/CVE-2020-0668

OpenDXL Ontology project
https://github.com/opencybersecurityalliance/opendxl-ontology

Trying to unmask the fake Microsoft support scammers
https://securelist.com/trying-to-unmask-the-fake-microsoft-support-scammers-17/33734/#comment-3020138

Keyloggers: How they work and how to detect them (Part 1)
https://securelist.com/keyloggers-how-they-work-and-how-to-detect-them-part-1/36138/#comment-3019332

Keyloggers: Implementing keyloggers in Windows. Part Two
https://securelist.com/keyloggers-implementing-keyloggers-in-windows-part-two/36358/

Smartphone shopaholic
https://securelist.com/smartphone-shopaholic/95544/#comment-2990139

Congratulations, you’ve won! The reality behind online lotteries
https://securelist.com/congratulations-youve-won-the-reality-behind-online-lotteries/36450/#comment-2988693

Scammers’ delivery service: exclusively dangerous
https://securelist.com/scammers-delivery-service-exclusively-dangerous/66515/#comment-2987776

How I hacked my smart bracelet
https://securelist.com/how-i-hacked-my-smart-bracelet/69369/#comment-2999297

Dumping Firmware With the CH341a Programmer | by Rick Wisser
https://hakin9.org/dumping-firmware-with-the-ch341a-programmer-by-rick-wisser/

(Ab)using bash-fu to analyze recent Aggah sample
https://blog.malwarelab.pl/posts/basfu_aggah/

A post-exploitation powershell tool for extracting juicy info from memory
https://github.com/putterpanda/mimikittenz

F.商業
紅帽OS整合雲端分析與自動管理，強化企業工作負載支援
https://www.ithome.com.tw/review/134119

施宣輝專訪（一）／安碁資訊進化 打資安國際盃
https://money.udn.com/money/story/5649/4365672

施宣輝專訪（二）／CEO賽車手 眼光放遠
https://money.udn.com/money/story/5649/4365675

疫情延燒，研調：資安電信等 5 大領域增溫
http://technews.tw/2020/02/25/covid-19-rise-5-industries-up/

思科發佈全新雲端平台SecureX ，簡化資安防護並降低複雜性
http://www.compotechasia.com/a/press/2020/0225/44058.html

Google Cloud釋出Chronicle威脅偵測、企業版reCAPTCHA
https://ithome.com.tw/news/135992

RSA大會2020創新沙盒冠軍出爐，SECURITI.ai新創聚焦隱私合規
https://www.ithome.com.tw/news/136002

IBM、McAfee發起的開放網路安全聯盟OCA，釋出資安產品共通語言框架
https://ithome.com.tw/news/136014

醫療資訊應用升級窒礙 資安策略或成解方
https://www.digitimes.com.tw/iot/article.asp?cat=158&id=0000579412_PCO3EOHD29MDOF1Y5FFO0

BEC防詐 從事前防禦到事後調查完整解決方案
https://money.udn.com/money/story/5640/4375576

電子郵件詐騙頻傳 台灣區塊鏈新創研發獨步全球解決方案
https://www.rti.org.tw/news/view/id/2053259

區塊科技推出可做電子郵件檢查、加密與存證以防範釣魚詐騙的ChkSender
http://bit.ly/2I5Ghvq

McAfee買下瀏覽器隔離技術開發商Light Point Security
https://ithome.com.tw/news/136028

Symantec Participates in Latest MITRE ATT&CK® Evaluation
https://www.symantec.com/blogs/expert-perspectives/symantec-participates-latest-mitre-attckr-evaluation

F5 brings WAF app protection to the NGINX platform
https://www.zdnet.com/article/f5-brings-waf-app-protection-to-the-nginx-platform/#ftag=RSSbaffb68

Cisco unveils SecureX cloud platform for improved security visibility
https://www.zdnet.com/article/cisco-unveils-securex-cloud-platform-for-improved-security-visibility/#ftag=RSSbaffb68

Redefining Security Orchestration and Automation with Cortex XSOAR
https://blog.paloaltonetworks.com/2020/02/cortex-xsoar/

The Cortex XSOAR Ecosystem is Exploding with Partner-Owned Integrations
https://blog.paloaltonetworks.com/2020/02/cortex-xsoar-ecosystem/

How to Use a Firewall for Network Traffic Analysis and Behavioral Detection
https://blog.paloaltonetworks.com/2020/02/cortex-network-traffic-analysis/

Gmail Is Catching More Malicious Attachments With Deep Learning
https://www.wired.com/story/gmail-catching-more-malicious-attachments-deep-learning/

Using the FortiGuard Labs Threat Landscape Report to Defend Against Evolving Cybercrime
https://www.fortinet.com/blog/threat-research/using-the-fortiguard-labs-threat-landscape-report-to-defend-against-evolving-cybercrime.html

Exploitation Framework for Embedded Devices
https://github.com/threat9/routersploit

攻撃グループBlackTech が使用するLinux用マルウエア (ELF_TSCookie)
https://blogs.jpcert.or.jp/ja/2020/02/elf_tscookie.html

G.政府
謹言慎行保密 嚴守資安防駭
https://www.ydn.com.tw/News/373869

Linker Networks臺南辦公室正式揭牌
https://www.chinatimes.com/realtimenews/20200224003230-260410?chdtv

台灣全新「數位身分證」真的要啟動了？超便民5大亮點整理，綁定手機、加密個資還有一堆小細節
https://www.elle.com/tw/life/tech/a31126570/digital-identity-card/

全球第21大超級電腦助攻，國網中心要當產學界AI推手
https://www.ithome.com.tw/people/135989

H.工控系統/SCADA/ICS
Vulnerability Spotlight: Multiple vulnerabilities in Moxa AWK-3131A
https://blog.talosintelligence.com/2020/02/vuln-spotlight-moxa-awk-feb-2020.html

Moxa MGate 5105-MB-EIP firmware Vulnerability
https://nvd.nist.gov/nvd.cfm?cvename=CVE-2020-8858

Moxa PT-7528和PT-7828 安全漏洞
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6983

思科發現Moxa工業設備中的十二個高危漏洞
https://nosec.org/home/detail/4152.html

JVN#25766797 Aterm WF1200CR 、WG1200CR および WG2600HS における複数の OS コマンドインジェクションの脆弱性
https://jvn.jp/jp/JVN25766797/

I.教育訓練
SQL Murder Mystery
https://mystery.knightlab.com/walkthrough.html

Network Address Translation
https://packetlife.net/media/library/32/NAT.pdf

Physical Treminations
https://packetlife.net/media/library/22/physical_terminations.pdf

Wireshark Commands Cheatsheet
https://hackersonlineclub.com/wireshark-commands-cheatsheet/

Hack The Box: Zetta
https://gr4n173.github.io/2020/02/22/htb-zetta.html

HackTheBox Writeup — Zetta
https://medium.com/@hussaini.faisal/hackthebox-writeup-zetta-d236212776fc

Peerlyst Community eBook: 32 Influential Malware Research Professionals
https://www.peerlyst.com/posts/peerlyst-community-ebook-32-influential-malware-research-professionals-peerlyst

How to become a Cloud Security Expert
https://www.peerlyst.com/posts/how-to-become-a-cloud-security-expert-guy-bertrand-kamga

Nebula – fake your echo (level01) – walkthrough
https://www.peerlyst.com/posts/nebula-fake-your-echo-level01-walkthrough-prasanna-v-balaji

Beginner’s Guide to Pentesting IoT Architecture/Network and Setting Up IoT Pentesting Lab
http://bit.ly/2VfWfL6

Introduction to Ethical Hacking and Penetration Testing
https://www.peerlyst.com/posts/introduction-to-ethical-hacking-and-penetration-testing-1-chiheb-chebbi

Cybersecurity Research Topic Guidelines
https://www.theweborion.com/blog/cybersecurity-research-topic-guidelines/

Open Source Data Protection/Privacy Regulatory Mapping Project
https://github.com/microsoft/data-protection-mapping-project

IT to Red Team: How to Make the Jump
https://www.peerlyst.com/posts/it-to-red-team-how-to-make-the-jump-matt-george

HOW TO PREPARE FOR THE ECSA EXAM
https://blog.eccouncil.org/how-to-prepare-for-the-ecsa-exam/

29 Practical Examples of Nmap Commands for Linux System/Network Administrators
https://www.tecmint.com/nmap-command-examples/

How to bypass Machine Learning Malware Detectors with Generative adversarial Networks
http://bit.ly/38XmYAd

Computer Forensics: A Method to Recover Data from MySQL Database by Utilizing Binlog
http://bit.ly/2uskPNP

Hacking Tools with Python: Part 1
https://resources.infosecinstitute.com/writing-hacking-tools-with-python-part-1/

Hacking Tools with Python: Part 2
https://resources.infosecinstitute.com/hacking-tools-with-python-part-2/#article

ABD - Course Materials For Advanced Binary Deobfuscation
https://www.kitploit.com/2020/02/abd-course-materials-for-advanced.html

Antivirus fundamentals: Viruses, signatures, disinfection
https://www.kaspersky.co.uk/blog/signature-virus-disinfection/7799/

J.物聯網/IOT/人工智慧/車聯網/光聯網/深度學習/機器學習/無人機/人臉辨識
IoT and connected devices: The best thing to happen to home automation, or a frustrating mess
https://zd.net/37WYHZv

Gold-nuggeting: Machine learning tool simplifies target discovery for pen testers
https://portswigger.net/daily-swig/gold-nuggeting-machine-learning-tool-simplifies-target-discovery-for-pen-testers

Model Hacking ADAS to Pave Safer Roads for Autonomous Vehicles
https://www.mcafee.com/blogs/other-blogs/mcafee-labs/model-hacking-adas-to-pave-safer-roads-for-autonomous-vehicles/

意法STM32L5首款 兼具低功耗與資安的IoT微控制器
https://www.digitimes.com.tw/tech/dt/n/shwnws.asp?CnlID=13&cat=10&id=0000579079_ZFUL96FB8L2B7I8X33GI8

Nation's youngest engineers further Army drone ambitions
https://www.zdnet.com/article/nations-youngest-engineers-to-further-army-drone-ambitions/#ftag=RSSbaffb68

6.近期資安活動及研討會
Coffee & Code 3/1
https://www.meetup.com/Innovate-Taiwan/events/268999350/

WizardAmigos CodeCamp [Taipei,JavaScript,­English] 3/2
https://www.meetup.com/WizardAmigos/events/vdttmrybcfbdb/

邊緣運算介紹與應用 & Let's AIY ( 人工智慧小聚 - Hsinchu#20200304 ) 3/4
https://www.meetup.com/AIA-Hsinchu/events/267713123/

Android Code Club(Taipei) 3/4
https://www.meetup.com/Taiwan-Android-Developer-Study-Group/events/bkzcmrybcfbgb/

#28 Azure Machine Learning - 圖形化介面的免費 Studio 與付費的 Designer 之差異 3/4
https://www.meetup.com/Azure-Taiwan/events/268794485/

台北以太坊社群月聚 Monthly Taipei Ethereum Meetup 3/5
https://www.meetup.com/Taipei-Ethereum-Meetup/events/269000957/

「智慧機械與資安解決方案」技術交流媒合會 3/5
https://forms.gle/ZRksvpLu1hDHUm538

Monad 細說從頭！ FunTh#81 3/5
https://www.meetup.com/Functional-Thursday/events/267683150/

Multi-threaded programming in Python 3/11
https://www.meetup.com/pythonhug/events/268925062/

Android Code Club(Taipei) 3/11
https://www.meetup.com/Taiwan-Android-Developer-Study-Group/events/bkzcmrybcfbpb/

GDG Hsinchu #05 - 如何應用ok Google結合物聯網打造智慧生活 3/12
https://www.meetup.com/GDG-Hsinchu/events/268976601/

人工智慧小聚 - 新竹 ◤從 RNN 到 Attention，自然語言處理的前世今生◢ ◤字型生成經驗分享◢ 3/18
https://www.meetup.com/AIA-Hsinchu/events/268649939/

Scala Taiwan #37 3/18
https://www.meetup.com/Scala-Taiwan-Meetup/events/267899692/

韓國國際安全博覽會 3/18
https://www.twcert.org.tw/tw/cp-105-3230-a3bd4-1.html

Taipei.py 2020 三月聚會 (March Monthly Meeting) 3/19
https://www.meetup.com/Taipei-py/events/268681120/

Study Group - Clean Coder 3/19
https://www.meetup.com/Women-Who-Code-Taipei/events/jlmfprybcfbzb/

數據分析與機器學習案例實務(一)以PM2.5為例 3/23
https://edu.nchc.org.tw/course/one_course_introduction.asp?lms_auto_course_id=3888&from_course_list_url=course_index

Taipei 暗号通貨 (Cryptocurrency) Meetup 3/25
https://www.meetup.com/Taipei-%E6%9A%97%E5%8F%B7%E9%80%9A%E8%B2%A8-Cryptocurrency-Meetup/events/nrxgwqybcfbhc/

Thinking Thursday 第七場 3/26
https://www.meetup.com/Thinking-Thursday/events/266911452/

Flutter Taipei 2020 暖開幕 | Warm Up Party 3/27
https://www.meetup.com/Flutter-Taipei/events/269033933/

交通大學駭客書院 - 緩衝區溢位攻擊與預防 3/28
https://hackercollege.nctu.edu.tw/?p=1141

black ASIA 2020 Singapore 3/31 ~ 4/3
https://www.blackhat.com/asia-20/briefings/schedule/

Kaspersky® Security Analyst Summit  4/6 ~ 4/9
https://thesascon.com/

QGIS地理資訊研習班 4/8 ~ 4/9
https://www.accupass.com/event/2002120936323517290110

邊緣計算系統之大數據與深度學習應用 4/10
https://edu.nchc.org.tw/course/one_course_introduction.asp?lms_auto_course_id=3883&from_course_list_url=course_index

第二屆ICANN APAC-TWNIC Engagement Forum 與第34屆TWNIC IP政策資源管理會議 4/16
https://forum.twnic.tw/2020/registration.htm

交通大學駭客書院 -入侵行為發覺與應變指南 4/18
https://hackercollege.nctu.edu.tw/?p=1144

VXCON 2020 - APAC  4/18 ~ 4/19
https://www.vxcon.hk/

2020 Industrial Control Systems (ICS) Cyber Security Conference | Singapore  4/21 ~ 4/23
https://www.icscybersecurityconference.com/singapore/

Taipei 暗号通貨 (Cryptocurrency) Meetup 4/22
https://www.meetup.com/Taipei-%E6%9A%97%E5%8F%B7%E9%80%9A%E8%B2%A8-Cryptocurrency-Meetup/events/nrxgwqybcgbdc/

亞太資訊安全論壇暨展覽會 4/22
https://www.twcert.org.tw/tw/cp-105-3149-70ad7-1.html

交通大學駭客書院 - 基礎網頁安全與滲透測試 4/25
https://hackercollege.nctu.edu.tw/?p=1147

2020 LINE Taiwan Developers Recruitment Day  4/25
https://engineering.linecorp.com/zh-hant/blog/2020-line-taiwan-technical-recruitment-day/

交通大學駭客書院 -     基礎網站安全建構實務 5/16
https://hackercollege.nctu.edu.tw/?p=1151

交通大學駭客書院 -     電子郵件之偽造攻擊與防護措施 5/23
https://hackercollege.nctu.edu.tw/?p=1156

Taipei 暗号通貨 (Cryptocurrency) Meetup 5/27
https://www.meetup.com/Taipei-%E6%9A%97%E5%8F%B7%E9%80%9A%E8%B2%A8-Cryptocurrency-Meetup/events/nrxgwqybchbkc/

交通大學駭客書院 -     進階網頁滲透測試 5/30
https://hackercollege.nctu.edu.tw/?p=1159

邊緣計算系統之大數據與深度學習應用 6/5
https://edu.nchc.org.tw/course/one_course_introduction.asp?lms_auto_course_id=3884&from_course_list_url=course_index

交通大學駭客書院 -     高階網頁滲透測試 6/13 6/20
https://hackercollege.nctu.edu.tw/?p=1161

交通大學駭客書院 -     企業網域控管-Active Directory攻擊與防禦 6/27
https://hackercollege.nctu.edu.tw/?p=1164

CYBERSEC 2020 臺灣資安大會 8/12
https://cyber.ithome.com.tw/