以色列公司 Cellebrite 利用安卓 0day漏洞进行间谍软件攻击

今日安全资讯速递

新的 Glutton 恶意软件利用 Laravel 和 ThinkPHP 等流行 PHP 框架

https://thehackernews.com/2024/12/new-glutton-malware-exploits-popular.html

以色列公司 Cellebrite利用Android0day漏洞进行间谍软件攻击

https://www.securityweek.com/android-zero-day-exploited-in-serbian-spyware-campaigns-amnesty-international-points-to-cellebrite/

Yokai 后门攻击活动利用 DLL 侧载技术攻击泰国官员

https://thehackernews.com/2024/12/thai-officials-targeted-in-yokai.html

Winnti 黑客利用新的 Glutton PHP 后门攻击其他威胁组织

https://www.bleepingcomputer.com/news/security/winnti-hackers-target-other-threat-actors-with-new-glutton-php-backdoor/

与伊朗有关的 IOCONTROL 恶意软件针对 SCADA 和基于 Linux 的物联网平台

https://thehackernews.com/2024/12/iran-linked-iocontrol-malware-targets.html

网络犯罪工具成为侵入乌克兰军事设备的途径

https://therecord.media/turla-secret-blizzard-russia-espionage-ukraine-cybercrime-tools

美国大型汽车零部件公司 LKQ 遭受网络攻击

https://www.securityweek.com/major-auto-parts-firm-lkq-hit-by-cyberattack/

Cicada3301 勒索软件声称对法国标致经销商发起攻击

https://hackread.com/cicada3301-ransomware-french-peugeot-dealership/

Citrix 警告针对 NetScaler 设备的密码喷洒攻击

https://www.securityweek.com/citrix-warns-of-password-spraying-attacks-targeting-netscaler-appliances/

DrayTek 路由器中未记录的漏洞被利用于勒索软件活动，危害 300 多个组织

https://www.securityweek.com/undocumented-draytek-vulnerabilities-exploited-to-hack-hundreds-of-orgs/

恶意广告通过虚假 CAPTCHA 页面推送 Lumma 信息窃取程序

https://www.bleepingcomputer.com/news/security/malicious-ads-push-lumma-infostealer-via-fake-captcha-pages/

Microsoft Teams 网络钓鱼传播 DarkGate RAT

https://www.darkreading.com/cyberattacks-data-breaches/vishing-via-microsoft-teams-spreads-darkgate-rat

德克萨斯理工大学健康科学中心系统数据泄露影响 140 万名患者

https://www.bleepingcomputer.com/news/security/texas-tech-university-system-data-breach-impacts-14-million-patients/

ConnectOnCall 远程医疗应用程序漏洞导致超过 910,000 名患者的健康数据泄露

https://www.bleepingcomputer.com/news/security/connectoncall-breach-exposes-health-data-of-over-910-000-patients/

PUMAKIT：一款采用先进隐身机制的复杂Linuxrootkit

https://securityaffairs.com/172016/malware/pumakit-sophisticated-rootkit.html

FBI 发现 HiatusRAT 恶意软件攻击针对网络摄像头、DVR

https://www.bleepingcomputer.com/news/security/fbi-spots-hiatusrat-malware-attacks-targeting-web-cameras-dvrs/

大众汽车信息娱乐系统存在多个缺陷，可能导致车辆被实时追踪

https://securityaffairs.com/172024/hacking/volkswagen-group-infotainment-unit-flaws.html

研究人员发现 iOS 和 macOS 中允许绕过 TCC 的符号链接漏洞

https://thehackernews.com/2024/12/researchers-uncover-symlink-exploit.html

OpenWrt 严重漏洞使设备面临恶意固件注入风险

https://thehackernews.com/2024/12/critical-openwrt-vulnerability-exposes.html

戴尔产品存在严重漏洞，可导致攻击者入侵受影响系统

https://cybersecuritynews.com/dell-vulnerabilities-alert/

部分高通 CPU 在主流 Linux 上暴露于 Spectre 漏洞

https://www.phoronix.com/news/Qualcomm-Spectre-Mainline-Patch

微软修补了服务器端更新目录和 Windows Defender 中潜在的严重漏洞

https://www.securityweek.com/microsoft-patches-vulnerabilities-in-windows-defender-update-catalog/

对 Cleo 文件传输软件中严重漏洞的利用仍在继续

https://www.cybersecuritydive.com/news/security-cleo-file-transfer-cve-delayed/735517

锐捷Reyee云管理平台发现严重漏洞

https://www.securityweek.com/critical-vulnerabilities-found-in-ruijie-reyee-cloud-management-platform/