360CERT - 每日安全简报 (2021-06-01)

<<Previous Next>>

漏洞 Vulnerability

CVE-2021-20026: SonicWall NSM命令注入漏洞

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0014

CVE-2021-30181: Apache Dubbo Customer脚本注入漏洞

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30181

安全事件 Security Incident

NOBELIUM 最新的攻击工具集分析

https://www.microsoft.com/security/blog/2021/05/28/breaking-down-nobeliums-latest-early-stage-toolset/

SolarWinds黑客利用新的“NativeZone”后门瞄准智库

https://thehackernews.com/2021/05/solarwinds-hackers-target-think-tanks.html

Facefish 后门传播 Linux Rootkit

https://thehackernews.com/2021/05/researchers-warn-of-facefish-backdoor.html

新的勒索软件变种以美国酒店业为目标

https://www.databreachtoday.com/new-ransomware-variant-targets-us-hospitality-sector-a-16769

<<Previous Next>>