网络攻击导致以色列信用卡读卡器发生故障

今日安全资讯速递

Radwan Cyber Pal 黑客组织声称获取了以色列士兵和定居者的敏感数据

https://thecyberexpress.com/radwan-cyber-pal-alleged-cyberattack/

网络攻击导致以色列信用卡读卡器发生故障

https://therecord.media/cyberattack-causes-credit-card-readers-in-israel-to-malfunction

朝鲜黑客瞄准加密货币公司，利用 macOS 上的Hidden Risk恶意软件

https://thehackernews.com/2024/11/north-korean-hackers-target-crypto.html

朝鲜加入乌克兰战争 亲俄黑客瞄准韩国

https://www.infosecurity-magazine.com/news/russian-hacktivits-south-korea/

IcePeony 和 Transparent Tribe 利用基于云的工具瞄准印度实体

https://thehackernews.com/2024/11/icepeony-and-transparent-tribe-target.html

德克萨斯州油田供应商因勒索软件攻击导致系统中断

https://therecord.media/oilfield-supplier-faces-disruptions-cyberattack

网络攻击使美国石油巨头哈里伯顿损失 3500 万美元

https://www.securityweek.com/cyberattack-cost-oil-giant-halliburton-35-million/

Microsoft Visio 文件被用于复杂的网络钓鱼攻击

https://www.infosecurity-magazine.com/news/microsoft-visio-files-phishing/

债务减免公司 Forth 披露数据泄露事件，影响 150 万人

https://www.securityweek.com/debt-relief-firm-forth-discloses-data-breach-impacting-1-5-million-people/

GootLoader 新活动针对搜索“孟加拉猫在澳大利亚的合法性”的用户

https://thehackernews.com/2024/11/new-gootloader-campaign-targets-users.html

新的 Ymir 勒索软件与 RustyStealer 合作发起攻击

https://www.bleepingcomputer.com/news/security/new-ymir-ransomware-partners-with-rustystealer-in-attacks/

Have I Been Pwned 警告称，据称数据泄露事件暴露了 Hot Topic等客户近 5700万人的个人信息

https://www.bleepingcomputer.com/news/security/hibp-notifies-57-million-people-of-hot-topic-data-breach/

亚马逊确认供应商遭黑客攻击后员工数据遭泄露

https://www.bleepingcomputer.com/news/security/amazon-confirms-employee-data-breach-after-vendor-hack/

黑客泄露亚马逊、大都会人寿、汇丰银行和其他大公司近300万员工数据

https://cybernews.com/security/moveit-fallout-hackers-leak-employee-data-from-amazon-metlife/

CISA 警告工业控制系统存在严重漏洞，影响关键基础设施部门

https://thecyberexpress.com/cisa-warns-of-cve-2024-8934/

惠普企业 (HPE) 发布针对 Aruba 网络接入点漏洞的重要安全补丁

https://thehackernews.com/2024/11/hpe-issues-critical-security-patches.html

Veeam 发布备份企业管理器中的身份验证绕过漏洞(CVE-2024-40715,CVSS 评分为 7.7)修补程序

https://www.securityweek.com/veeam-patches-high-severity-vulnerability-as-exploitation-of-previous-flaw-expands/

Palo Alto Networks 解决远程代码执行漏洞问题

https://www.securityweek.com/palo-alto-networks-addresses-remote-code-execution-vulnerability-claims/

旧版 D-Link NAS 设备因严重缺陷（CVE-2024-10914，CVSS 评分为 9.2）遭受远程攻击

https://www.securityweek.com/many-legacy-d-link-nas-devices-exposed-to-remote-attacks-via-critical-flaw/

严重 WPLMS WordPress 主题漏洞使网站面临 RCE 攻击的风险

https://thecyberexpress.com/critical-wplms-wordpress-theme-vulnerability/

Microsoft Bookings 漏洞可导致账户劫持和冒充

https://hackread.com/microsoft-bookings-flaw-account-hijack-impersonate/

流行机器学习工具包中的安全漏洞可导致服务器劫持和权限提升

https://thehackernews.com/2024/11/security-flaws-in-popular-ml-toolkits.html