360CERT - 每日安全简报 (2021-08-27)

<<Previous Next>>

漏洞 Vulnerability

CVE-2021-26084: Confluence Server and Data Center远程代码执行漏洞

https://confluence.atlassian.com/doc/confluence-security-advisory-2021-08-25-1077906215.html

VMware VRealize Operations Manager多个安全漏洞

https://www.vmware.com/security/advisories/VMSA-2021-0018.html

安全事件 Security Incident

Kimsuky的网络间谍活动

https://inquest.net/blog/2021/08/23/kimsuky-espionage-campaign

FIN8 组织使用新的“Sardonic”后门

https://www.bitdefender.com/blog/labs/fin8-threat-actor-spotted-once-again-with-new-sardonic-backdoor/

SideWalk相关分析

https://www.welivesecurity.com/2021/08/24/sidewalk-may-be-as-dangerous-as-crosswalk/

Mozi 僵尸网络针对 Netgear、华为、中兴网关

https://www.databreachtoday.com/mozi-botnet-targeting-netgear-huawei-zte-gateways-a-17352

cloudflare 遭 DDoS - 每秒收到1720万次http请求

https://blog.segu-info.com.ar/2021/08/reportado-ataque-ddos-de-mas-de-172m.html

新的 SideWalk 后门瞄准了美国的计算机零售业务

https://thehackernews.com/2021/08/new-sidewalk-backdoor-targets-us-based.html

FBI Flash 警报警告 OnePercent Group 勒索软件攻击

https://securityaffairs.co/wordpress/121411/cyber-crime/onepercent-group-ransomware-attacks.html

<<Previous Next>>