360CERT - 每日安全简报 (2021-08-25)

<<Previous Next>>

漏洞 Vulnerability

CVE-2021-22156: Cisco 软件 BlackBerry QNX SDP 任意代码执行漏洞影响

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-qnx-TOxjVPdL#ap

CVE-2021-3690: Red Hat OpenShift Container Platform 安全更新

https://access.redhat.com/errata/RHEA-2021:3251

安全事件 Security Incident

Ursnif 银行木马

https://www.revelock.com/en/blog/ursnif-and-cerberus-a-combined-attack

LockFile 勒索软件通过 ProxyShell 危害 Microsoft Exchange

https://heimdalsecurity.com/blog/lockfile-ransomware-microsoft-exchange/

ShadowPad 恶意软件 – 中国黑客组织的热门选择

https://heimdalsecurity.com/blog/shadowpad-malware-a-popular-choice-among-chinese-espionage-groups/

Razer Synapse 漏洞：简单鼠标插入，即可获得Windows系统权限

https://heimdalsecurity.com/blog/razer-synapse-vulnerability/

Konni 使用恶意软件新变种攻击俄罗斯

https://blog.malwarebytes.com/threat-intelligence/2021/08/new-variant-of-konni-malware-used-in-campaign-targetting-russia/

Confucius - 利用Pegasus间谍软件相关诱饵向巴基斯坦发起攻击

https://www.weisblog.club/2021/08/23/Confucius-%E5%88%A9%E7%94%A8Pegasus%E9%97%B4%E8%B0%8D%E8%BD%AF%E4%BB%B6%E7%9B%B8%E5%85%B3%E8%AF%B1%E9%A5%B5%E5%90%91%E5%B7%B4%E5%9F%BA%E6%96%AF%E5%9D%A6%E5%8F%91%E8%B5%B7%E6%94%BB%E5%87%BB/#%E5%AE%8F%E4%BB%A3%E7%A0%81

Lazarus攻击全球安全研究人员样本的详细技术分析报告

https://mp.weixin.qq.com/s/PFi745ywYjd6k3p-ROclEg

<<Previous Next>>