朝鲜 Lazarus 黑客利用 macOS 扩展文件属性隐藏恶意代码

今日安全资讯速递

TA455 的伊朗梦想工作活动利用恶意软件攻击航空航天业

https://www.infosecurity-magazine.com/news/ta455s-iranian-dream-job-campaign/

朝鲜黑客创建 Flutter 应用程序以绕过 macOS 安全保护

https://www.bleepingcomputer.com/news/security/north-korean-hackers-create-flutter-apps-to-bypass-macos-security/

朝鲜黑客利用 macOS 扩展文件属性隐藏恶意代码

https://www.bleepingcomputer.com/news/security/hackers-use-macos-extended-file-attributes-to-hide-malicious-code/

哈马斯黑客组织 WIRTE 使用 SameCoin Wiper 对以色列发动破坏性攻击

https://thehackernews.com/2024/11/hamas-affiliated-wirte-employs-samecoin.html

Radwan Cyber Pal 黑客组织声称获取了以色列士兵和定居者的敏感数据

https://thecyberexpress.com/radwan-cyber-pal-alleged-cyberattack/

网络攻击导致以色列信用卡读卡器发生故障

https://therecord.media/cyberattack-causes-credit-card-readers-in-israel-to-malfunction

朝鲜黑客瞄准加密货币公司，利用 macOS 上的Hidden Risk恶意软件

https://thehackernews.com/2024/11/north-korean-hackers-target-crypto.html

朝鲜加入乌克兰战争 亲俄黑客瞄准韩国

https://www.infosecurity-magazine.com/news/russian-hacktivits-south-korea/

IcePeony 和 Transparent Tribe 利用基于云的工具瞄准印度实体

https://thehackernews.com/2024/11/icepeony-and-transparent-tribe-target.html

1.22 亿信息泄露与 B2B 数据聚合器DemandScience有关

https://www.bleepingcomputer.com/news/security/leaked-info-of-122-million-linked-to-b2b-data-aggregator-breach/

Hannaford、Stop & Shop 等知名超市背后的荷兰公司称因网络攻击影响其美国商店运营

https://therecord.media/dutch-company-stop-shop-hannaford-cyber

攻击者瞄准 Palo Alto Networks 的客户迁移工具

https://www.cybersecuritydive.com/news/palo-alto-networks-expedition-cve-exploited/732390/

勒索软件罪犯宣称已从美国药房网络窃取 1.4TB 数据

https://www.theregister.com/2024/11/13/embargo_ransomware_breach_aap/

Emmenhtal Loader 使用脚本传播 Lumma 和其他恶意软件

https://hackread.com/emmenhtal-loader-uses-scripts-deliver-lumma-malware/

达美航空和亚马逊确认供应商遭入侵，暗网帖子再度引发 MOVEit 泄密担忧

https://therecord.media/delta-amazon-vendor-breach-confirmed

微软确认任务调度程序漏洞存在0day攻击

https://www.securityweek.com/microsoft-confirms-zero-day-exploitation-of-task-scheduler-flaw/

芯片制造商补丁日：英特尔发布 44 个新公告，AMD 发布 8 个新公告

https://www.securityweek.com/chipmaker-patch-tuesday-intel-publishes-44-and-amd-publishes-8-new-advisories/

OvrC 平台漏洞使物联网设备面临远程攻击和代码执行风险

https://thehackernews.com/2024/11/ovrc-platform-vulnerabilities-expose.html

EoL D-Link NAS 设备中的严重漏洞现已被利用进行攻击

https://www.bleepingcomputer.com/news/security/critical-bug-in-eol-d-link-nas-devices-now-exploited-in-attacks/

Citrix Session Recording 用户被警告 CVE 可能允许黑客获取控制权

https://www.cybersecuritydive.com/news/citrix-session-recording-cves-hackers/732794/

Citrix、Fortinet 修补高危漏洞

https://www.securityweek.com/citrix-fortinet-patch-high-severity-vulnerabilities/

Zoom、Chrome 中的高危漏洞已得到修复

https://www.securityweek.com/high-severity-vulnerabilities-patched-in-zoom-chrome/

Ivanti 修复多款产品的 50 个漏洞

https://www.securityweek.com/ivanti-patches-50-vulnerabilities-across-several-products/

顶级安全供应商的0day漏洞是 2023 年利用率最高的 CVE

https://www.cybersecuritydive.com/news/security-vendors-zero-days-top-cve-exploits/732814/