微软称伊朗正在加速开展网络活动，意图影响美国大选

今日安全资讯速递

微软称伊朗正在加速开展网络活动，意图影响美国大选

https://www.securityweek.com/iran-is-accelerating-cyber-activity-that-appears-meant-to-influence-the-us-election-microsoft-says/

美国捣毁朝鲜卧底 IT 员工使用的笔记本电脑农场

https://www.bleepingcomputer.com/news/security/us-dismantles-laptop-farm-used-by-undercover-north-korean-it-workers/

乌克兰攻势期间俄罗斯库尔斯克地区遭受“大规模” DDoS 攻击

https://therecord.media/kursk-military-offensive-ddos-russia-ukraine

朝鲜网络间谍组织瞄准大学教授

https://thehackernews.com/2024/08/university-professors-targeted-by-north.html

基于 Go 的新后门 GoGra 瞄准南亚媒体组织

https://thehackernews.com/2024/08/new-go-based-backdoor-gogra-targets.html

美国政府悬赏 1000 万美元缉拿伊朗 ICS 黑客

https://www.securityweek.com/us-offering-10-million-reward-for-iranian-ics-hackers/

物理安全公司 ADT 确认遭受黑客攻击并泄露数据

https://www.securityweek.com/physical-security-firm-adt-confirms-hack-and-data-breach/

恶意软件在 30 万个浏览器上强制安装 Chrome 扩展程序并修补 DLL

https://www.bleepingcomputer.com/news/security/malware-force-installs-chrome-extensions-on-300-000-browsers-patches-dlls/

FBI 和 CISA 针对 BlackSuit 勒索软件组织发布联合公告

https://securityaffairs.com/166760/hacking/blacksuit-ransomware-group-advisory.html

Rhysida 勒索软件组织声称已经入侵特拉华州的 Bayhealth 医院

https://securityaffairs.com/166749/cyber-crime/rhysida-ransomware-bayhealth-hospital.html

医疗行业谴责俄罗斯勒索软件，密歇根州医院系统面临网络攻击

https://therecord.media/michigan-hospital-system-struggling-after-cyberattack

勒索软件攻击导致抵押贷款机构 LoanDepot 损失 2700 万美元

https://www.securityweek.com/ransomware-attack-cost-loandepot-27-million/

SnakeKeylogger 潜入 Windows 收件箱窃取敏感机密

https://www.theregister.com/2024/08/05/snakekeylogger_malware_windows/

Chameleon Android 银行木马通过虚假 CRM 应用程序攻击用户

https://thehackernews.com/2024/08/chameleon-android-banking-trojan.html

FBI报告：BlackSuit 勒索软件两年多来累计索要赎金逾 5 亿美元

https://www.bleepingcomputer.com/news/security/fbi-blacksuit-ransomware-made-over-500-million-in-ransom-demands/

近30 亿份包含个人信息的National Public Data（国家公共数据）记录被泄露到网络犯罪论坛

https://hackread.com/data-breach-national-public-data-records-ssns-dumped/

思科设备遭黑客攻击、存在未修补漏洞

https://www.securityweek.com/warnings-issued-over-cisco-device-hacking-unpatched-vulnerabilities/

专家发现导致 RCE、数据窃取和全服务接管的严重 AWS 漏洞

https://thehackernews.com/2024/08/experts-uncover-severe-aws-flaws.html

微软披露四个可能导致 RCE 和 LPE 的 OpenVPN 漏洞

https://thehackernews.com/2024/08/microsoft-reveals-four-openvpn-flaws.html

微软披露 Office 0day漏洞，补丁尚在开发过程中

https://www.bleepingcomputer.com/news/security/microsoft-discloses-office-zero-day-still-working-on-a-patch/

美国网络安全和基础设施安全局 (CISA) 将 Apache OFBiz 和 Android 内核漏洞添加到其已知被利用的漏洞目录中

https://securityaffairs.com/166782/hacking/cisa-adds-apache-ofbiz-and-android-kernel-bugs-known-exploited-vulnerabilities-catalog.html

谷歌研究人员在高通流行的移动 GPU 软件中发现了十几个缺陷

https://www.wired.com/story/google-android-red-team-qualcomm-gpu-flaws/

ATM 软件漏洞可导致大量现金被盗

https://www.wired.com/story/vss-atm-vulnerabilities-defcon-2024/

AMD SinkClose 漏洞可帮助安装几乎无法检测到的恶意软件

https://www.bleepingcomputer.com/news/security/new-amd-sinkclose-flaw-helps-install-nearly-undetectable-malware/

漏洞允许通过 Sonos 智能音箱窃听用户

https://www.securityweek.com/vulnerability-allowed-eavesdropping-via-sonos-smart-speakers/