起亚经销商门户网站漏洞可能让攻击者仅通过车牌号即可入侵数百万辆汽车

今日安全资讯速递

25个与库尔德人有关的网站遭遇水坑攻击，传播恶意 APK 和间谍软件

https://thehackernews.com/2024/09/watering-hole-attack-on-kurdish-sites.html

Cloudflare 警告与印度有关的黑客正在针对南亚和东亚实体

https://thehackernews.com/2024/09/cloudflare-warns-of-india-linked.html

朝鲜黑客在针对性攻击中部署新型 KLogEXE 和 FPSpy 恶意软件

https://thehackernews.com/2024/09/n-korean-hackers-deploy-new-klogexe-and.html

新的 RomCom 恶意软件变种“SnipBot”被发现用于数据窃取攻击

https://www.bleepingcomputer.com/news/security/new-romcom-malware-variant-snipbot-spotted-in-data-theft-attacks/

起亚经销商门户网站漏洞可能让攻击者仅通过车牌号即可入侵数百万辆汽车

https://thehackernews.com/2024/09/hackers-could-have-remotely-controlled.html

勒索软件组织声称窃取了 AutoCanada 的财务、员工和销售数据

https://canada.autonews.com/retail/ransomware-outfit-claims-have-stolen-financial-employee-sales-data-autocanada

英国对影响多座火车站的 Wi-Fi 服务黑客事件展开调查

https://www.securityweek.com/police-are-probing-a-cyberattack-on-wi-fi-networks-at-uk-train-stations/

美国运输和物流公司成为信息窃取者和后门的目标

https://www.securityweek.com/us-transportation-and-logistics-firms-targeted-with-infostealers-backdoors/

3191 名美国国会工作人员的数据在暗网中泄露

https://securityaffairs.com/168912/deep-web/3000-congressional-staffers-data-leaked-dark-web.html

TeamViewer for Windows 漏洞可让攻击者提升权限

https://cybersecuritynews.com/teamviewer-for-windows-vulnerability/

思科修补 IOS 软件中的高危漏洞

https://www.securityweek.com/cisco-patches-high-severity-vulnerabilities-in-ios-software-2/

Nvidia 容器严重缺陷导致云 AI 系统面临主机接管风险

https://www.securityweek.com/critical-nvidia-container-flaw-exposes-cloud-ai-systems-to-host-takeover/

OpenPLC 中修补了远程代码执行和 DoS 漏洞

https://www.securityweek.com/remote-code-execution-dos-vulnerabilities-patched-in-openplc/

CUPS 开源打印系统漏洞可导致 Linux 远程代码执行

https://www.bleepingcomputer.com/news/security/cups-flaws-enable-linux-remote-code-execution-but-theres-a-catch/