安全研究人员披露已被利用的Windows提权0day；黑客在暗网出售110万个Lazada Redmart用户帐户

【安全漏洞】

安全研究人员披露已被利用的Windows提权0day

https://www.zdnet.com/article/google-discloses-windows-zero-day-exploited-in-the-wild/

NVIDIA修复其DGX服务器AMI BMC固件中的9个漏洞

https://www.securityweek.com/nvidia-patches-ami-bmc-vulnerabilities-impacting-several-major-vendors

【威胁情报】

黑客在暗网出售110万个Lazada Redmart用户帐户

https://www.bleepingcomputer.com/news/security/over-1m-lazada-redmart-accounts-sold-online-after-data-breach/

银行木马Wroba通过文本传播，主要针对美国用户

https://threatpost.com/wroba-mobile-banking-trojan-spreads-us/160785/

CISA和FBI发布伊朗APT组织窃取选民数据的咨询

https://us-cert.cisa.gov/ncas/current-activity/2020/10/30/cisa-and-fbi-release-joint-advisory-iranian-apt-actor-targeting