法国博物馆网络遭勒索软件攻击，奥运会赛事未出现中断

今日安全资讯速递

黑客组织 StormBamboo 被发现通过入侵 ISP 和使用 DNS 投毒来传播 Windows 和 macOS 恶意软件

https://www.securityweek.com/chinese-hackers-deliver-malware-via-isp-level-dns-poisoning/

哈萨克斯坦组织遭“Bloody Wolf”网络攻击

https://thehackernews.com/2024/08/kazakh-organizations-targeted-by-bloody.html

乌克兰警方拘留一名在暗网上向俄罗斯情报部门提供服务的男子

https://therecord.media/ukraine-arrests-man-offering-services-to-russia-on-darknet

卡巴斯基报告新型 Android 间谍软件正在追踪俄罗斯受害者

https://therecord.media/android-spyware-kaspersky-russian-targets

朝鲜黑客利用 VPN 更新漏洞安装恶意软件

https://www.bleepingcomputer.com/news/security/north-korean-hackers-exploit-vpn-update-flaw-to-install-malware/

朝鲜黑客 Moonstone Sleet 将恶意 JS 包推送至 npm Registry

https://thehackernews.com/2024/08/north-korean-hackers-moonstone-sleet.html

CrowdStrike 发布 Falcon Sensor BSOD 崩溃根本原因分析

https://www.securityweek.com/crowdstrike-releases-root-cause-analysis-of-falcon-sensor-bsod-crash/

国际刑警组织追回新加坡最大 BEC 诈骗案中被骗的 4100 万美元

https://thehackernews.com/2024/08/interpol-recovers-41-million-in-largest.html

近30 亿份包含个人信息的National Public Data（国家公共数据）记录被泄露到网络犯罪论坛

https://hackread.com/data-breach-national-public-data-records-ssns-dumped/

狡猾的 SnakeKeylogger 潜入 Windows 收件箱窃取敏感机密

https://www.theregister.com/2024/08/05/snakekeylogger_malware_windows/

法国博物馆网络遭勒索软件攻击，但奥运会赛事未出现中断

https://www.securityweek.com/french-museum-network-hit-by-ransomware-attack-but-no-disruptions-are-reported-at-olympic-events/

Mobile Guardian 遭黑客攻击，13000台设备被远程清除数据

https://www.securityweek.com/thousands-of-devices-wiped-remotely-following-mobile-guardian-hack/

勒索软件攻击导致 Keytronic 损失超过 1700 万美元

https://www.securityweek.com/ransomware-attack-cost-keytronic-over-17-million/

俄亥俄州哥伦布市正在调查勒索软件攻击后可能出现的数据泄露

https://therecord.media/colombus-investigating-data-leak-ransomware-attack

DIY 勒索软件让新手网络犯罪分子成为威胁

https://cioafrica.co/diy-ransomware-makes-novice-cybercriminals-a-threat/

新型 Android 木马“BlankBot”攻击土耳其用户的财务数据

https://thehackernews.com/2024/08/new-android-trojan-blankbot-targets.html

黑客利用错误配置的 Jupyter Notebook 和改版的 Minecraft DDoS 工具发起攻击

https://thehackernews.com/2024/08/hackers-exploit-misconfigured-jupyter.html

勒索软件团伙利用新型 SharpRhino 恶意软件攻击 IT 工作者

https://www.bleepingcomputer.com/news/security/hunters-international-ransomware-gang-targets-it-workers-with-new-sharprhino-malware/

Microsoft Azure 故障导致整个北美地区的服务中断、

https://www.bleepingcomputer.com/news/microsoft/microsoft-azure-outage-takes-down-services-across-north-america/

CISA将 Microsoft COM for Windows 漏洞添加到其已知被利用的漏洞目录

https://securityaffairs.com/166670/security/cisa-microsoft-com-for-windows-known-exploited-vulnerabilities-catalog.html

新的 SLUBStick 攻击使 Linux 内核漏洞更加危险

https://www.securityweek.com/new-slubstick-attack-makes-linux-kernel-vulnerabilities-more-dangerous/

自 2018 年以来，Windows 智能应用控制和 SmartScreen 绕过技术一直存在漏洞

https://www.bleepingcomputer.com/news/microsoft/windows-smart-app-control-smartscreen-bypass-exploited-since-2018/

罗克韦尔自动化设备存在严重缺陷，允许未经授权的访问
https://thehackernews.com/2024/08/critical-flaw-in-rockwell-automation.html

谷歌称 Android 0Day漏洞(CVE-2024-36971)已被广泛利用

https://therecord.media/android-zero-day-google-fix-august-patch

Apache OFBiz 用户被警告存在新的和被利用的漏洞

https://www.securityweek.com/apache-ofbiz-users-warned-of-new-and-exploited-vulnerabilities/