卡巴斯基警告，黑客组织利用 LockBit 3.0 和 Babuk 勒索软件攻击俄罗斯目标

今日安全资讯速递

Crypt Ghouls 利用 LockBit 3.0 和 Babuk 勒索软件攻击俄罗斯公司

https://thehackernews.com/2024/10/crypt-ghouls-targets-russian-firms-with.html

与朝鲜有关的组织 APT37 利用 Internet Explorer 0day漏洞发起供应链攻击

https://securityaffairs.com/169983/apt/north-korea-apt37-ie-zero-day.html

摩尔多瓦正面临前所未有的复杂和侵略性的虚假信息浪潮

https://www.wired.com/story/the-disinformation-warning-coming-from-the-edge-of-europe/

越南黑客组织针对数字营销专业人士的多阶段恶意软件攻击

https://thecyberexpress.com/quasar-rat/

ESET 合作伙伴遭入侵，向以色列组织发送数据擦除器

https://www.bleepingcomputer.com/news/security/eset-partner-breached-to-send-data-wipers-to-israeli-orgs/

朝鲜 APT 组织利用 IE 0day漏洞发起供应链攻击

https://www.securityweek.com/north-korean-apt-exploited-ie-zero-day-in-supply-chain-attack/

美国及其盟友警告伊朗将在一年内对关键基础设施发动网络攻击https://thehackernews.com/2024/10/us-and-allies-warn-of-iranian.html

黑客利用 Roundcube Webmail XSS 漏洞窃取登录凭证

https://thehackernews.com/2024/10/hackers-exploit-roundcube-webmail-xss.html

受 Mirai 启发的 Gorilla 僵尸网络袭击了 100 个国家/地区的 30 万个目标

https://hackread.com/mira-gorilla-botnet-ddos-attacks-hit-100-countries/

多因素身份验证疲劳或推送轰炸攻击：日益严重的网络威胁

https://www.canr.msu.edu/news/multifactor-authentication-fatigue-or-push-bombing-attacks-a-growing-cyber-threat

匿名苏丹（Anonymous Sudan）黑客组织已不复存在：两名涉嫌运营者被起诉

https://www.theregister.com/2024/10/17/anonymous_sudan_arrests_charges/

虚假 Google Meet 会议错误推送信息窃取恶意软件

https://www.bleepingcomputer.com/news/security/fake-google-meet-conference-errors-push-infostealing-malware/

超过 90% 的网络钓鱼活动会导致受害者感染恶意软件

https://www.securitymagazine.com/articles/101115-over-90-of-phishing-campaigns-lead-victims-to-malware

日本科技巨头 Nidec 确认勒索软件攻击后数据泄露

https://www.bleepingcomputer.com/news/security/tech-giant-nidec-confirms-data-breach-following-ransomware-attack/

日本名古屋证券交易所遭受网络攻击

https://dailydarkweb.net/japans-nagoya-stock-exchange-hit-by-cyberattack/

以色列技术转移网络遭入侵，敏感数据遭泄露

https://dailydarkweb.net/israel-tech-transfer-network-breached-sensitive-data-compromised/

CISA 确认 Veeam 漏洞被用于勒索软件攻击

https://therecord.media/veam-vulnerability-exploited-ransomware-cisa-kev

F5 修复了 BIG-IP 中的高严重性特权提升漏洞

https://securityaffairs.com/170022/security/f5-patches-big-ip-elevation-of-privilege-bug.html

“HM Surf” macOS 漏洞可让攻击者访问摄像头和麦克风

https://hackread.com/hm-surf-macos-flaw-attackers-access-camera-mic/

Kubernetes 镜像生成器中存在严重漏洞，导致节点面临 Root 访问权限

https://thecyberexpress.com/kubernetes-image-builder-vulnerability/

Linux 上的 Intel、AMD CPU 受到最新披露的 Spectre 绕过的影响

https://www.bleepingcomputer.com/news/security/intel-amd-cpus-on-linux-impacted-by-newly-disclosed-spectre-bypass/

微软披露 macOS 漏洞，可绕过 Safari 浏览器中的隐私控制

https://thehackernews.com/2024/10/microsoft-reveals-macos-vulnerability.html

最常被利用的漏洞是一个已有 4 年历史的漏洞，可能仍然存在于数亿台设备中

https://thecyberexpress.com/most-exploited-vulnerability/