360CERT - 每日安全简报 (2020-11-19)

<<Previous Next>>

漏洞 Vulnerability

CVE-2020-27130:Cisco Security Manager Path Traversal Vulnerability

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-csm-path-trav-NgeRnqgR

CVE-2020-13671: Drupal 远程代码执行漏洞

https://cert.360.cn/warning/detail?id=6339ee63ba8474528c75686e000b8006

安全事件 Security Incident

勒索软件攻击迫使Web托管提供商Managed.com使服务器脱机

https://www.zdnet.com/article/web-hosting-provider-managed-shuts-down-after-ransomware-attack/

10万个被黑Facebook帐户泄露

https://www.hackread.com/leaked-database-hacked-facebook-accounts/

安全报告 Security Report

火眼对2021年网络空间威胁的预测分析报告

https://content.fireeye.com/predictions/rpt-security-predictions-2021

Cicada 黑客组织针对日本公司的持续性恶意攻击

https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/cicada-apt10-japan-espionage

安全研究 Security Research

特斯拉Powerwall网关可能受到黑客攻击

https://blog.rapid7.com/2020/11/17/dont-put-it-on-the-internet-tesla-backup-gateway-edition/

Chrome浏览器的现代攻击：优化和反优化

https://doar-e.github.io/blog/2020/11/17/modern-attacks-on-the-chrome-browser-optimizations-and-deoptimizations/

PHPMailer 任意文件读取漏洞

https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652486713&idx=1&sn=62b2d92f72008c48c8b97ea97d75ba1d

从CVE-2020-1048到CVE-2020-17001：Windows打印机模块中多个提权漏洞分析

https://www.anquanke.com/post/id/222730

<<Previous Next>>