高级 ValleyRAT 攻击活动袭击中国 Windows 用户

今日安全资讯速递

伊朗中央银行（CBI）和其他几家银行遭受重大网络攻击，造成业务混乱

https://securityaffairs.com/167066/hacking/cyberattack-central-bank-of-iran.html

伊朗支持的组织加强针对以色列和美国的网络钓鱼活动

https://blog.google/threat-analysis-group/iranian-backed-group-steps-up-phishing-campaigns-against-israel-us/

绿盟科技报告：新的网络威胁针对阿塞拜疆和以色列外交官，窃取敏感数据

https://thehackernews.com/2024/08/new-cyber-threat-targets-azerbaijan-and.html

Meta 在美国大选前警告警惕俄罗斯、伊朗的恶意网络攻击

https://therecord.media/meta-troll-networks-iran-russia-election

与俄罗斯有关的黑客攻击东欧非政府组织和媒体

https://thehackernews.com/2024/08/russian-linked-hackers-target-eastern.html

https://www.theguardian.com/world/article/2024/aug/14/russia-phishing-hacking-attacks

智利一半以上人口的数据遭大规模泄露

https://cybernews.com/security/caja-los-andes-chile-data-leak/

新的 Banshee Stealer恶意软件攻击苹果系统，每月售价 3,000 美元

https://www.securityweek.com/new-banshee-stealer-macos-malware-priced-at-3000-per-month/

云配置错误导致 11万 个域名遭遇大规模勒索软件攻击

https://www.securityweek.com/cloud-misconfigurations-expose-110000-domains-to-extortion-in-widespread-campaign/

高级 ValleyRAT 攻击活动袭击中国 Windows 用户

https://www.infosecurity-magazine.com/news/valleyrat-campaign-hits-windows/

预装易受攻击的应用程序可能导致数百万谷歌 Pixel 手机遭到黑客攻击

https://securityaffairs.com/167130/security/pixel-devices-pre-installed-vulnerable-app.html

炭黑供应商 Orion 因商业电子邮件诈骗损失 6000 万美元

https://therecord.media/orion-carbon-black-bec-scam-millions

加拿大大型汽车经销商AutoCanada 遭受网络攻击

https://www.securityweek.com/autocanada-hit-by-cyberattack/

2024 年第二季度针对工业企业的勒索软件攻击激增

https://www.securityweek.com/ransomware-attacks-on-industrial-firms-surged-in-q2-2024/

俄亥俄州哥伦布市遭遇勒索软件攻击，市政工作人员信息泄露

https://www.securityweek.com/mayor-of-columbus-ohio-says-ransomware-attackers-stole-corrupted-unusable-data/

RansomHub 勒索软件组织在最新攻击中部署了新的反EDR工具

https://thehackernews.com/2024/08/ransomhub-group-deploys-new-edr-killing.html

与 Black Basta 有关的勒索软件利用 SystemBC 恶意软件攻击用户

https://thehackernews.com/2024/08/black-basta-linked-attackers-targets.html

华盛顿时报遭 Rhysida 勒索软件集团攻击

https://cybernews.com/news/washington-times-ransomware-attack-rhysida-claim/

2024 年上半年勒索软件团伙获利逾 4.5 亿美元

https://therecord.media/ransomware-gangs-set-record-for-money-extorted

新型 Gafgyt 僵尸网络变种利用弱 SSH 密码进行 GPU 挖矿

https://thehackernews.com/2024/08/new-gafgyt-botnet-variant-targets-weak.html

美国网络安全机构 CISA 警告称，最近 SolarWinds Web Help Desk 漏洞（CVE-2024-28986，CVSS 评分为 9.8）已被利用

https://www.securityweek.com/solarwinds-web-help-desk-vulnerability-possibly-exploited-as-zero-day/

利用 Copy2Pwn 0day漏洞（CVE-2024-38213）绕过 Windows 保护

https://www.securityweek.com/copy2pwn-zero-day-exploited-to-bypass-windows-protections/

零点击漏洞促使紧急修补 Windows TCP/IP 漏洞(CVE-2024-38063，CVSS 评分为 9.8)

https://www.securityweek.com/zero-click-exploit-concerns-drive-urgent-patching-of-windows-tcp-ip-flaw/

未修复的 Microsoft Entra ID 身份验证绕过漏洞威胁混合 ID

https://www.darkreading.com/application-security/unfixed-microsoft-entra-id-authentication-bypass-threatens-hybrid-clouds

SolarWinds 发布针对关键 Web Help Desk 漏洞(CVE-2024-28986,CVSS 评分为 9.8）的修补程序

https://www.securityweek.com/solarwinds-issues-hotfix-for-critical-web-help-desk-vulnerability/

Palo Alto Networks 修复 Cortex XSOAR 中未经身份验证的命令执行缺陷

https://www.securityweek.com/palo-alto-networks-patches-unauthenticated-command-execution-flaw-in-cortex-xsoar/

芯片制造商补丁日：英特尔、AMD 修复超过 110 个漏洞

https://www.securityweek.com/chipmaker-patch-tuesday-intel-amd-address-over-110-vulnerabilities/

GitHub 漏洞“ArtiPACKED”导致存储库面临被接管的风险

https://thehackernews.com/2024/08/github-vulnerability-artipacked-exposes.html

几乎所有 Google Pixel 手机都受到未修复的 Android 隐藏应用程序漏洞的影响

https://www.wired.com/story/google-android-pixel-showcase-vulnerability/