360CERT - 每日安全简报 (2021-04-06)

<<Previous Next>>

漏洞 Vulnerability

VMware Carbon Black Workload发布安全通告修复严重漏洞

https://www.vmware.com/security/advisories/VMSA-2021-0005.html

Metasploit更新SaltStack未授权RCE漏洞exp

https://packetstormsecurity.com/files/162058/saltstack_salt_wheel_async_rce.rb.txt

安全事件 Security Incident

APT组织Bahamut分析

https://www.anomali.com/blog/bahamut-possibly-responsible-for-multi-stage-infection-chain-campaign

利用新冠疫情作为主题的钓鱼攻击

https://www.domaintools.com/resources/blog/covid-19-phishing-with-a-side-of-cobalt-strike

Cl0p勒索软件团伙泄露美国6所大学的敏感数据

https://www.hackread.com/cl0p-ransomware-gang-us-universites-leak-data/

Ragnarok勒索软件攻击Boggi Milano男装

https://threatpost.com/ragnarok-ransomware-boggi-milano-menswear/165161/

美国司法部：网络钓鱼攻击利用疫苗调查窃取个人信息

https://www.bleepingcomputer.com/news/security/us-doj-phishing-attacks-use-vaccine-surveys-to-steal-personal-info/

Asteelflash电子制造商遭遇勒索软件攻击

https://www.bleepingcomputer.com/news/security/asteelflash-electronics-maker-hit-by-revil-ransomware-attack/

<<Previous Next>>