360CERT - 每日安全简报 (2021-04-12)

<<Previous Next>>

漏洞 Vulnerability

CVE-2021-24086 Windows TCP/IP 拒绝服务漏洞POC公开

https://github.com/0vercl0k/CVE-2021-24086

CVE-2021-21402 Jellyfin任意文件读取漏洞POC公开

https://github.com/MzzdToT/CVE-2021-21402

安全事件 Security Incident

伊朗情报机构的前沿公司Rana Corp(APT39)

https://mp.weixin.qq.com/s/pemYFV-zdWmpVj8ckJ7kyg

Iran’s APT34 Returns with an Updated Arsenal

https://research.checkpoint.com/2021/irans-apt34-returns-with-an-updated-arsenal/

(Are you) afreight of the dark? Watch out for Vyveva, new Lazarus backdoor

https://www.welivesecurity.com/2021/04/08/are-you-afreight-dark-watch-out-vyveva-new-lazarus-backdoor/

黑客袭击9个国家，曝光623036张支付卡记录

https://www.scmagazine.com/home/security-news/cybercrime/hackers-hit-nine-countries-expose-623036-payment-card-records/

勒索软件瞄准易受攻击的VPN设备

https://www.zdnet.com/article/ransomware-crooks-are-targeting-vulnerable-vpn-devices-in-their-attacks/

5亿LinkedIn用户数据在暗网销售

https://securityaffairs.co/wordpress/116528/security/linkedin-500m-users-dark-web.html

零日漏洞影响思科SOHO路由器

https://threatpost.com/zero-day-bug-soho-routers/165321/

<<Previous Next>>