谷歌称，同一个伊朗黑客组织同时攻击民主党共和党双方的竞选活动

今日安全资讯速递

多伦多公民实验室发现俄罗斯网络间谍与大规模凭证窃取活动有关

https://www.theregister.com/2024/08/14/russias_fsb_cyber_phishing/

谷歌称，同一个伊朗黑客组织同时攻击民主党共和党双方的竞选活动

https://www.wired.com/story/iran-apt42-trump-biden-harris-phishing-targeting/

EastWind 攻击利用陷阱 LNK 文件部署 PlugY 和 GrewApacha 后门

https://thehackernews.com/2024/08/russian-government-hit-by-eastwind.html

“Earth Baku(地球巴库)”黑客组织将网络攻击范围扩大至欧洲、中东和非洲

https://thehackernews.com/2024/08/china-backed-earth-baku-expands-cyber.html

卡巴斯基警告称，人工智能在复杂攻击中的应用日益增多

https://itbrief.co.nz/story/kaspersky-warns-of-ai-s-growing-use-in-sophisticated-attacks

微软的 AI Copilot 可以被用作“自动网络钓鱼机器”，但问题不仅仅在于一家公司

https://fortune.com/2024/08/13/microsoft-ai-copilot-hacking-prompt-injectoin-attack-black-hat/

波兰反兴奋剂机构遭黑客攻击、运动员数据泄露疑似“敌对国家”所为

https://therecord.media/polish-anti-doping-agency-polada-hack-leak

Abnormal Security 最新研究显示，文件共享钓鱼攻击激增 350%

https://www.globalsecuritymag.fr/file-sharing-phishing-attacks-surge-350-according-to-new-research-from-abnormal.html

Gcore 报告显示，2024 年上半年 DDoS 攻击激增 46%

https://thehackernews.com/2024/08/ddos-attacks-surge-46-in-first-half-of.html

AutoCanada 披露影响内部 IT 系统的网络攻击

https://www.bleepingcomputer.com/news/security/autocanada-discloses-cyberattack-impacting-internal-it-systems/

华盛顿时报遭 Rhysida 勒索软件集团攻击

https://cybernews.com/news/washington-times-ransomware-attack-rhysida-claim/

瑞士制造业巨头Schlatter 正在调查导致 IT 系统关闭的勒索软件攻击

https://therecord.media/swiss-manufacturer-investigating-ransomware-incident

尽管各方齐心协力遏制攻击，但勒索软件数量仍在激增

https://www.cybersecuritydive.com/news/ransomware-swells-first-half-2024/723419/

FBI 关闭了 Dispossessor 勒索软件集团在美国、英国和德国的服务器

https://thehackernews.com/2024/08/fbi-shuts-down-dispossessor-ransomware.html

爱达荷州医疗保健提供商 Kootenai Health 披露一起数据泄露事件，影响超过 460,000 人

https://www.securityweek.com/460k-impacted-by-kootenai-health-ransomware-attack/

与 Black Basta 勒索软件有关的攻击者部署名为 SystemBC 的恶意软件

https://thehackernews.com/2024/08/black-basta-linked-attackers-targets.html

2024 年 50% 以上的攻击背后有六个勒索软件团伙

https://www.theregister.com/2024/08/13/lockbit_ransomware_stats/

零点击 Windows TCP/IP RCE 漏洞（CVE-2024-38063）会影响所有启用 IPv6 的系统，应立即修补

https://www.bleepingcomputer.com/news/microsoft/zero-click-windows-tcp-ip-rce-impacts-all-systems-with-ipv6-enabled-patch-now/

自 3 月份以来，新的 Windows SmartScreen 绕过漏洞（CVE-2024-38213）被利用

https://www.bleepingcomputer.com/news/microsoft/new-windows-smartscreen-bypass-exploited-as-zero-day-since-march/

ICS 补丁日：西门子、施耐德、罗克韦尔、Aveva 发布安全公告

https://www.securityweek.com/ics-patch-tuesday-advisories-released-by-siemens-schneider-rockwell-aveva/

SolarWinds 修复了影响所有 Web Help Desk 版本的关键 RCE 漏洞

https://www.bleepingcomputer.com/news/security/solarwinds-fixes-critical-rce-bug-affecting-all-web-help-desk-versions/

芯片制造商补丁日：英特尔、AMD 修复超过 110 个漏洞

https://www.securityweek.com/chipmaker-patch-tuesday-intel-amd-address-over-110-vulnerabilities/

Azure Health Bot 服务漏洞可能暴露敏感数据

https://www.securityweek.com/azure-health-bot-service-vulnerabilities-possibly-exposed-sensitive-data/

Ivanti 修复 ITSM、虚拟流量管理器 Neurons 中的严重漏洞

https://www.securityweek.com/ivanti-patches-critical-vulnerabilities-in-neurons-for-itsm-virtual-traffic-manager/

Fortinet、Zoom 修补多个漏洞

https://www.securityweek.com/fortinet-zoom-patch-multiple-vulnerabilities/

美国黑客发现了投票机的漏洞——但没有时间修复

https://www.politico.com/news/2024/08/12/hackers-vulnerabilities-voting-machines-elections-00173668

研究人员发现人工智能 Azure 健康机器人服务中的漏洞

https://thehackernews.com/2024/08/researchers-uncover-vulnerabilities-in_0471960302.html