黑客组织 NullBulge 声称入侵迪士尼，窃取 1.1 TiB的内部 Slack 数据

今日安全资讯速递

从 Microsoft 365 到 VPN：日本宇宙航空研究开发机构（JAXA）调查系统黑客行为

https://www.securitylab.ru/news/550032.php

澳大利亚指控两名俄罗斯出生的澳大利亚公民为俄罗斯从事间谍活动

https://thehackernews.com/2024/07/australian-defence-force-private-and.html

俄罗斯研究人员确认涉嫌开发恶意远程访问工具的乌克兰人

https://therecord.media/russian-researchers-identify-alleged-rat-developer

美国最大的电信运营商 AT&T 数据泄露：“几乎所有”客户通话记录被“非法”下载

https://www.securityweek.com/att-data-breach-nearly-all-wireless-customers-exposed-in-massive-hack/

https://www.pcmag.com/news/att-nearly-all-customer-phone-text-records-leaked-one-arrest-made

黑客组织 NullBulge 声称入侵迪士尼，窃取 1.1 TiB的内部 Slack 数据

https://hackread.com/disneys-internal-slack-breached-nullbulge-leak-data/

一年前存在的 Veeam 漏洞在新一轮勒索软件攻击中被利用

https://www.securityweek.com/year-old-veeam-vulnerability-exploited-in-fresh-ransomware-attacks/

与 Snowflake 事件相关的 Advance Auto Parts 数据泄露事件影响230万人

https://www.securityweek.com/millions-impacted-by-breach-at-advance-auto-parts-linked-to-snowflake-incident/

DarkGate 恶意软件在短暂活动中利用 Samba 文件共享

https://thehackernews.com/2024/07/darkgate-malware-exploits-samba-file.html

一名威胁参与者声称出售法国第三大电信公司 SFR 的数据库

https://dailydarkweb.net/threat-actor-claims-to-sell-database-of-sfr-frances-third-largest-telecom/

毁灭性的勒索软件攻击后，印第安纳州克莱县发布当地灾难通告

https://www.cyberdaily.au/security/10817-us-country-files-disaster-declaration-in-wake-of-a-devastating-ransomware-attack

FakeUpdates 在印度激增，超过 Qbot

https://cxotoday.com/press-release/june-2024s-most-wanted-malware-fakeupdates-surges-in-india-overtaking-qbot/

手机间谍软件公司 mSpy 过去十年数百万客户信息暴露

https://techcrunch.com/2024/07/11/mspy-spyware-millions-customers-data-breach/

DarkGate 恶意软件在短暂活动中利用 Samba 文件共享

https://thehackernews.com/2024/07/darkgate-malware-exploits-samba-file.html

美国第三大连锁药店Rite Aid 确认在 6 月勒索软件攻击后发生数据泄露

https://www.bleepingcomputer.com/news/security/rite-aid-confirms-data-breach-after-june-ransomware-attack/

Ticketmaster 数据泄露：黑客泄露 1000 万个“无法刷新”的票务条形码

https://hackread.com/hackers-leak-10-million-ticketmaster-tickets/

Exim 邮件服务器严重漏洞致数百万用户遭受恶意附件攻击

https://thehackernews.com/2024/07/critical-exim-mail-server-vulnerability.html

https://www.bleepingcomputer.com/news/security/critical-exim-bug-bypasses-security-filters-on-15-million-mail-servers/

Windows 本地提权 0day 再次促销，售价 15 万美元

https://www.redhotcyber.com/post/ancora-local-privilege-escalation-0day-per-windows-in-vendita-a-150-000-dollari/

微软警告称Hyper-V 零日漏洞正受到利用

https://www.securityweek.com/microsoft-warns-of-windows-hyper-v-zero-day-being-exploited/

黑客利用Windows Mshtml漏洞长达一年多

https://xakep.ru/2024/07/11/cve-2024-38112/

Netgear 警告用户修补身份验证绕过、XSS 路由器漏洞

https://www.bleepingcomputer.com/news/security/netgear-warns-users-to-patch-authentication-bypass-xss-router-flaws/