360CERT - 每日安全简报 (2021-05-14)

<<Previous Next>>

漏洞 Vulnerability

CVE-2021-21551：戴尔驱动程序内核读写漏洞POC公开

https://github.com/rapid7/metasploit-framework/pull/15190

CVE-2021-31166：HTTP 协议堆栈远程执行代码漏洞

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-31166

安全事件 Security Incident

微软：新的恶意软件瞄准航空组织

https://www.bleepingcomputer.com/news/security/microsoft-threat-actors-target-aviation-orgs-with-new-malware/

APT组使用后门进行间谍活动

https://www.databreachtoday.com/apt-group-using-backdoor-for-espionage-a-16571

联邦调查局、中情局发布关于黑暗勒索软件的警报

https://www.zdnet.com/article/fbi-cisa-publish-alert-on-darkside-ransomware/

研究人员追踪到了五个黑暗勒索软件服务的附属机构

https://www.zdnet.com/article/researchers-track-down-five-affiliates-of-darkside-ransomware-service/

英国表示，俄罗斯必须采取更多措施打击在其境内活动的网络犯罪分子

https://www.zdnet.com/article/russia-must-do-more-to-tackle-cyber-criminals-operating-from-within-its-borders-says-uk/

<<Previous Next>>