360CERT - 每日安全简报 (2021-08-18)

<<Previous Next>>

漏洞 Vulnerability

CVE-2020-23151: rConfig命令注入漏洞

https://nvd.nist.gov/vuln/detail/CVE-2020-23151

CVE-2021-35936: Apache Airflow日志服务器上缺乏认证漏洞

https://www.mail-archive.com/announce@apache.org/msg06680.html

安全事件 Security Incident

APT-C-54(Gamaredon)近期技战术总结

https://mp.weixin.qq.com/s/0zCpEQT4XHPOnB6h_9zg2Q

大通银行泄露客户信息

https://www.bleepingcomputer.com/news/security/chase-bank-accidentally-leaked-customer-info-to-other-customers/

Hive 勒索软件攻击纪念卫生系统，窃取患者数据

https://www.bleepingcomputer.com/news/security/hive-ransomware-attacks-memorial-health-system-steals-patient-data/

<<Previous Next>>