一、漏洞赏金统计报告

1.今天hackerone出了年度了报告，需要仔细的解读一下。明天发一篇文章出来。

https://www.hackerone.com/top-ten-vulnerabilities

https://www.hackerone.com/hacker-powered-security-report

2.疫情对于漏洞赏金的影响

https://threatpost.com/pandemic-reshaping-bug-bounty-landscape/160644/

二、漏洞报告

1.绕过Facebook 2FA

https://threatpost.com/copyright-violation-facebook-2fa-bypass/160690/

2.AKSK 命令执行到谷歌验证码劫持

https://xz.aliyun.com/t/8429

三、AI安全

1.攻击者可以使用智能扬声器通过电话窃取敏感的用户数据

https://techxplore.com/news/2020-10-sensitive-user-smart-speakers.html

2.Amazon Alexa漏洞暴露了语音数据

https://techxplore.com/news/2020-08-amazon-alexa-bug-exposed-voice.html

3.LinkedIn、Instagram 等应用的链接预览功能可能存在信息泄露风险

https://threatpost.com/linkedin-instagram-preview-link-rce-security/160600/

四、比赛

Bug Bounty Summmit CTF 已经开始

https://hackerone.threatsims.com/