SharePoint RCE 漏洞被用来破坏企业网络，攻击者安装火绒杀毒软件制造冲突

今日安全资讯速递

美国和以色列网络安全机构联合发布一份报告，称伊朗黑客攻击入侵了2024法国夏季奥运会相关系统

https://thehackernews.com/2024/11/inside-irans-cyber-playbook-ai-fake.html

疑似乌克兰网络攻击导致俄罗斯城市停车执法瘫痪

https://therecord.media/ukraine-cyberattack-russia-parking-tver

微软警告俄罗斯鱼叉式网络钓鱼攻击针对 100 多个组织

https://www.securityweek.com/microsoft-warns-of-russian-spear-phishing-attacks-targeting-over-100-organizations/

微软警告：黑客利用 Quad7 僵尸网络窃取凭证

https://www.bleepingcomputer.com/news/security/microsoft-chinese-hackers-use-quad7-botnet-to-steal-credentials/

朝鲜APT组织与 Play 勒索软件合作发动重大网络攻击

https://thehackernews.com/2024/10/north-korean-group-collaborates-with.html

Lazarus APT 组织大量利用社会工程技术和生成式人工智能瞄准加密货币投资者

https://securitybrief.co.nz/story/lazarus-apt-group-targets-crypto-investors-with-ai-tactics

黑客利用 CloudScout 工具集窃取云服务会话 Cookie

https://thehackernews.com/2024/10/chinese-hackers-use-cloudscout-toolset.html

新的 LightSpy 间谍软件以增强功能瞄准 iOS

https://www.infosecurity-magazine.com/news/lightspy-spyware-targets-ios/

BeaverTail 恶意软件在针对开发人员的恶意 npm 软件包中再次出现

https://thehackernews.com/2024/10/beavertail-malware-resurfaces-in.html

谷歌称俄罗斯利用 Android、Windows 恶意软件攻击乌克兰新兵

https://www.securityweek.com/google-russia-targeting-ukrainian-military-recruits-with-android-windows-malware/

购物诈骗蔓延数千个网站，诈骗金额达“数千万美元”

https://therecord.media/shopping-scam-thousands-sites-phishing

暗网帖子曝光后，秘鲁大型银行警告300万客户数据被盗

https://therecord.media/interbank-peru-data-breach

科罗拉多病理学实验室遭 Medusa 勒索软件攻击，影响 180 万人

https://www.govinfosecurity.com/medusa-ransomware-hack-pathology-lab-affects-18-million-a-26695

勒索软件攻击袭击德国药品批发商，扰乱药品供应

https://therecord.media/ransomware-attack-hits-german-pharmaceutical-wholesaler-disruptions

洛杉矶住房管理局确认 Cactus 勒索软件攻击

https://www.bleepingcomputer.com/news/security/la-housing-authority-confirms-breach-claimed-by-cactus-ransomware/

Cyble：新型隐秘 Strela 窃取程序可规避安全工具

https://thecyberexpress.com/new-stealthy-strela-stealer-evades-security/

零点击漏洞可能使数百万Synology NAS设备遭受攻击

https://www.wired.com/story/synology-zero-click-vulnerability/

Azure AI 漏洞允许攻击绕过审核保障措施

https://hackread.com/azure-ai-vulnerabilities-bypass-moderation-safeguards/

近 100 万台存在漏洞的 Fortinet、SonicWall 设备暴露在网络上

https://thecyberexpress.com/vulnerable-fortinet-sonicwall-devices-exposed/

Yahoo 披露 NetIQ iManager 漏洞，可导致远程代码执行

https://www.securityweek.com/yahoo-discloses-netiq-imanager-flaws-allowing-remote-code-execution/

qBittorrent 修复了导致用户 14 年来遭受 MitM 攻击的漏洞

https://www.bleepingcomputer.com/news/security/qbittorrent-fixes-flaw-exposing-users-to-mitm-attacks-for-14-years/

黑客瞄准 PTZ 摄像机中的关键零日漏洞

https://www.bleepingcomputer.com/news/security/hackers-target-critical-zero-day-vulnerability-in-ptz-cameras/