朝鲜黑客BlueNoroff针对加密货币行业发起Hidden Risk攻击活动

今日安全资讯速递

乌克兰人遭遇 GPS 欺骗：手机显示错误的位置和时间

https://cybernews.com/tech/how-does-gps-spoofing-work/

VEILDrive 攻击利用 Microsoft 服务逃避检测并传播恶意软件

https://thehackernews.com/2024/11/veildrive-attack-exploits-microsoft.html

疑似乌克兰网络攻击导致俄罗斯城市停车执法瘫痪

https://therecord.media/ukraine-cyberattack-russia-parking-tver

微软警告俄罗斯鱼叉式网络钓鱼攻击针对 100 多个组织

https://www.securityweek.com/microsoft-warns-of-russian-spear-phishing-attacks-targeting-over-100-organizations/

新的 LightSpy 间谍软件以增强功能瞄准 iOS

https://www.infosecurity-magazine.com/news/lightspy-spyware-targets-ios/

MirrorFace 黑客利用 2025 年世博会诱饵攻击欧盟外交官

https://thehackernews.com/2024/11/china-aligned-mirrorface-hackers-target.html

朝鲜黑客利用假新闻传播名为“Hidden Risk（隐藏风险）”的复杂恶意软件

https://securityweek.com/north-korean-hackers-target-macos-users-with-fake-crypto-pdfs/

https://hackread.com/north-korean-hackers-crypto-fake-news-hidden-risk-malware/

SteelFox 恶意软件包冒充 Foxit PDF Editor 和 AutoCAD 等合法软件，窃取用户信息

https://www.securityweek.com/steelfox-miner-and-information-stealer-bundle-emerges/

PyPI 上的 Fabrice 恶意软件已窃取 AWS 凭证 3 年

https://hackread.com/fabrice-malware-pypi-steal-aws-credentials-3-years/

Androxgh0st 僵尸网络整合 Mozi，扩大对物联网漏洞的攻击

https://hackread.com/androxgh0st-botnet-integrate-mozi-iot-vulnerabilities/

国际刑警组织在全球打击网络犯罪行动中捣毁超过 22,000 台恶意服务器

https://thehackernews.com/2024/11/interpols-operation-synergia-ii.html

微芯片技术公司报告称勒索软件攻击造成 2140 万美元损失

https://www.securityweek.com/microchip-technology-reports-21-4-million-cost-from-ransomware-attack/

勒索软件攻击破坏了佐治亚州医院对健康记录的访问

https://www.securityweek.com/ransomware-attack-disrupts-georgia-hospitals-access-to-health-records/

Winos 4.0 恶意软件通过游戏优化应用程序感染游戏玩家

https://thehackernews.com/2024/11/new-winos-40-malware-infects-gamers.html

网络攻击后华盛顿法院系统瘫痪

https://www.bleepingcomputer.com/news/security/washington-courts-systems-offline-following-weekend-cyberattack/

SelectBlinds 称黑客在网站上植入恶意软件，20 万客户信用卡信息被盗

https://therecord.media/selectblinds-customers-credit-card-info-data-breach-website-malware

Microlise 遭受网络攻击，导致 DHL 和 Serco 跟踪服务中断

https://www.infosecurity-magazine.com/news/cyberattack-microlise-disrupts-dhl/

思科发布针对工业无线系统中严重 URWB 漏洞的补丁

https://thehackernews.com/2024/11/cisco-releases-patch-for-critical-urwb.html

CISA 警告称 Palo Alto Networks 存在严重漏洞，可能被用于攻击

https://www.bleepingcomputer.com/news/security/cisa-warns-of-critical-palo-alto-networks-bug-exploited-in-attacks/

惠普企业（HPE）警告 Aruba Networking 接入点存在严重 RCE 漏洞

https://www.bleepingcomputer.com/news/security/hpe-warns-of-critical-rce-flaws-in-aruba-networking-access-points/

CISA 将 Palo Alto Expedition、Android、CyberPanel 和 Nostromo nhttpd 漏洞添加到已知利用漏洞目录

https://securityaffairs.com/170673/security/u-s-cisa-adds-palo-alto-expedition-android-cyberpanel-and-nostromo-nhttpd-bugs-to-its-known-exploited-vulnerabilities-catalog.html