加密平台 Radiant Capital 称账户被盗导致 5000 万美元数字货币被盗

今日安全资讯速递

塞浦路斯关键基础设施遭受与亲巴勒斯坦组织有关的协同网络攻击

https://therecord.media/cyprus-critical-infrastructure-cyberattack-israel-palestine

研究人员称，与伊朗有关的黑客越来越多地监视海湾地区政府

https://therecord.media/iran-linked-hackers-espionage-persian-gulf-countries

不明黑客组织利用 Roundcube Webmail XSS 漏洞窃取登录凭证

https://thehackernews.com/2024/10/hackers-exploit-roundcube-webmail-xss.html

黑客组织 APT41 进军博彩业以牟取经济利益

https://thehackernews.com/2024/10/chinese-nation-state-hackers-apt41-hit.html

加密平台 Radiant Capital 称账户被盗导致 5000 万美元数字货币被盗

https://therecord.media/crypto-platform-radiant-capital-50-million-stolen

Crypt Ghouls 利用 LockBit 3.0 和 Babuk 勒索软件攻击俄罗斯公司

https://thehackernews.com/2024/10/crypt-ghouls-targets-russian-firms-with.html

与朝鲜有关的组织 APT37 利用 Internet Explorer 0day漏洞发起供应链攻击

https://securityaffairs.com/169983/apt/north-korea-apt37-ie-zero-day.html

摩尔多瓦正面临前所未有的复杂和侵略性的虚假信息浪潮

https://www.wired.com/story/the-disinformation-warning-coming-from-the-edge-of-europe/

越南黑客组织针对数字营销专业人士的多阶段恶意软件攻击

https://thecyberexpress.com/quasar-rat/

ESET 合作伙伴遭入侵，向以色列组织发送数据擦除器

https://www.bleepingcomputer.com/news/security/eset-partner-breached-to-send-data-wipers-to-israeli-orgs/

朝鲜 APT 组织利用 IE 0day漏洞发起供应链攻击

https://www.securityweek.com/north-korean-apt-exploited-ie-zero-day-in-supply-chain-attack/

美国及其盟友警告伊朗将在一年内对关键基础设施发动网络攻击https://thehackernews.com/2024/10/us-and-allies-warn-of-iranian.html

波士顿儿童健康医生组织确认 9 月份的黑客攻击导致数据泄露

https://therecord.media/boston-childrens-health-physicians-data-breach

卡西欧称勒索软件攻击暴露了员工、客户和商业伙伴的信息

https://therecord.media/casio-ransomware-attack-exposed-emplyee-customer-data

超过 6,000 个 WordPress 被黑客入侵，安装推送信息窃取程序的插件

https://www.bleepingcomputer.com/news/security/over-6-000-wordpress-hacked-to-install-plugins-pushing-infostealers/

大黄蜂（Bumblebee）恶意软件在经历执法打击后卷土重来

https://www.bleepingcomputer.com/news/security/bumblebee-malware-returns-after-recent-law-enforcement-disruption/

对日本电产越南子公司的勒索软件攻击导致 50,000 个文件泄露

https://www.infosecurity-magazine.com/news/nidec-ransomware-attack-expose/

访问令牌被盗导致互联网档案馆再次遭入侵

https://www.infosecurity-magazine.com/news/stolen-tokens-internet-archive/

F5 修复了 BIG-IP 中的高严重性特权提升漏洞

https://securityaffairs.com/170022/security/f5-patches-big-ip-elevation-of-privilege-bug.html

“HM Surf” macOS 漏洞可让攻击者访问摄像头和麦克风

https://hackread.com/hm-surf-macos-flaw-attackers-access-camera-mic/

Kubernetes 镜像生成器中存在严重漏洞，导致节点面临 Root 访问权限

https://thecyberexpress.com/kubernetes-image-builder-vulnerability/

Linux 上的 Intel、AMD CPU 受到最新披露的 Spectre 绕过的影响

https://www.bleepingcomputer.com/news/security/intel-amd-cpus-on-linux-impacted-by-newly-disclosed-spectre-bypass/

微软披露 macOS 漏洞，可绕过 Safari 浏览器中的隐私控制

https://thehackernews.com/2024/10/microsoft-reveals-macos-vulnerability.html

最常被利用的漏洞是一个已有 4 年历史的漏洞，可能仍然存在于数亿台设备中

https://thecyberexpress.com/most-exploited-vulnerability/