网络犯罪分子利用 CrowdStrike 更新蓝屏事件传播多种恶意软件

今日安全资讯速递

黑客利用伪造的无人机合同来感染乌克兰国防企业

https://therecord.media/hackers-fake-drone-contracts-malware-ukraine

亲胡塞组织利用 Android 间谍软件攻击也门援助组织

https://thehackernews.com/2024/07/pro-houthi-group-targets-yemen-aid.html

伊朗APT组织 MuddyWater 近期攻击活动中部署了新的 BugSleep 后门

https://research.checkpoint.com/2024/new-bugsleep-backdoor-deployed-in-recent-muddywater-campaigns/

网络研究人员称，自去年 10 月 7 日以来，针对以色列组织的攻击“增加了一倍以上”

https://therecord.media/attacks-israeli-orgs-double

朝鲜黑客更新 BeaverTail 恶意软件，以 MacOS 用户为目标

https://thehackernews.com/2024/07/north-korean-hackers-update-beavertail.html

TAG-100：未知黑客组织利用开源工具进行疑似网络间谍攻击活动

https://thehackernews.com/2024/07/tag-100-new-threat-actor-uses-open.html

CrowdStrikeFalcon 更新不当导致全球重大 IT 中断

https://www.pcmag.com/news/massive-microsoft-outage-bricks-computers-halts-flights-worldwide

澳大利亚数字处方服务提供商 MediSecure 遭受勒索软件攻击，1290 万人信息泄露

https://securityaffairs.com/165932/security/medisecure-databreach-12-9m-individuals.html

官员称田纳西州孟菲斯市因网络钓鱼诈骗损失 77.3 万美元

https://www.fox13memphis.com/news/city-of-memphis-lost-773k-in-phishing-scam-officials-say/article_c9836196-4449-11ef-a184-e7ec757b5bc6.html

警报：伪装成广告拦截器的 HotPage 广告软件会安装恶意内核驱动程序

https://thehackernews.com/2024/07/alert-hotpage-adware-disguised-as-ad.html

攻击者将恶意负载隐藏在看似合法的Python 包

https://cybersecuritynews.com/malware-via-jpeg-files/

趋势科技发现 Play 勒索软件组织部署一种针对 ESXi 环境的新 Linux 勒索变种

https://www.trendmicro.com/en_us/research/24/g/new-play-ransomware-linux-variant-targets-esxi-shows-ties-with-p.html

船舶经销商 MarineMax 表示，最近勒索软件攻击造成的数据泄露影响了超过 123,000 人

https://www.securityweek.com/marinemax-notifying-123000-of-data-breach-following-ransomware-attack/

专家揭秘“麒麟”勒索软件的复杂攻击手段

https://www.infosecurity-magazine.com/news/qilin-ransomwares-tactics-unveiled/

Revolver Rabbit 团伙注册了 500,000 个域名用于恶意软件活动

https://www.bleepingcomputer.com/news/security/revolver-rabbit-gang-registers-500-000-domains-for-malware-campaigns/

攻击者滥用 URL 保护服务来隐藏电子邮件中的钓鱼链接

https://www.csoonline.com/article/2519035/attackers-abuse-url-protection-services-to-hide-phishing-links-in-emails.html

苹果就 iPhone 网络钓鱼和间谍软件攻击发出新警告

https://etedge-insights.com/technology/cyber-security/apple-issues-new-warning-on-iphone-phishing-and-spyware-attacks/

90% 的网络攻击都是由于人类的弱点而发生的

https://telecomreseller.com/2024/07/17/9-out-of-10-cyberattacks/

Drive-by Download攻击成为 FakeBat 恶意软件的传播媒介

https://securityboulevard.com/2024/07/drive-by-download-attacks-become-distribution-medium-for-fakebat-malware/

美国 CISA 将 Adobe Commerce 和 Magento、SolarWinds Serv-U 以及 VMware vCenter Server 漏洞添加到其已知利用漏洞目录中

https://securityaffairs.com/165981/hacking/u-s-cisa-adds-adobe-commerce-and-magento-solarwinds-serv-u-and-vmware-vcenter-server-bugs-to-its-known-exploited-vulnerabilities-catalog.html

Ivanti 发布针对高危端点管理器漏洞的修补程序

https://www.securityweek.com/ivanti-issues-hotfix-for-high-severity-endpoint-manager-vulnerability/

CISA 警告攻击者正在积极利用三个新漏洞

https://natlawreview.com/article/cisa-warns-three-new-vulnerabilities-actively-exploited-threat-actors

SolarWinds 修补访问权限管理器软件中的 8 个严重缺陷

https://thehackernews.com/2024/07/solarwinds-patches-11-critical-flaws-in.html

Adobe Commerce 漏洞(CVE-2024-34102，CVSS 评分为 9.8）近期遭野外利用

https://www.securityweek.com/recent-adobe-commerce-vulnerability-exploited-in-wild/

SAP AI Core 漏洞允许服务接管、客户数据访问

https://www.securityweek.com/sap-ai-core-vulnerabilities-allowed-service-takeover-customer-data-access/

思科修补安全电子邮件网关 SSM 中的多个严重漏洞

https://www.securityweek.com/cisco-patches-critical-vulnerabilities-in-secure-email-gateway-ssm/

SAP AI Core 漏洞导致客户数据遭受网络攻击

https://thehackernews.com/2024/07/sap-ai-core-vulnerabilities-expose.html

Port Shadow攻击允许 VPN 流量拦截和重定向

https://www.securityweek.com/port-shadow-attack-allows-vpn-traffic-interception-redirection/