360CERT - 每日安全简报 (2021-10-08)

<<Previous Next>>

漏洞 Vulnerability

Trend Micro ServerProtect 认证绕过漏洞

https://success.trendmicro.com/solution/000289038

QNAP QVR 中的命令注入漏洞

https://www.qnap.com/en/security-advisory/qsa-21-35

安全事件 Security Incident

黑客以巴西PIX支付系统为目标，盗取用户的银行账户

https://thehackernews.com/2021/09/hackers-targeting-brazils-pix-payment.html

针对VMware vCenter CVE-2021-22005漏洞的有效POC已被发现

https://www.ehackingnews.com/2021/09/working-exploit-is-out-for-vmware.html

儿童童话应用Farfaria暴露了290万用户的数据

https://www.ehackingnews.com/2021/09/kids-fairy-tale-app-farfaria-exposed.html

疑似Nobelium组织开发的新后门Tomiris

https://securelist.com/darkhalo-after-solarwinds-the-tomiris-connection/104311/

<<Previous Next>>