乌克兰称：俄黑客在最近的网络间谍活动中以大使馆和国际组织为目标

今日安全资讯速递

亲巴勒斯坦的 APT 组织在新攻击活动中使用 IronWind 新型下载器

https://www.infosecurity-magazine.com/news/propalestine-apt-group-novel/

乌克兰安全研究人员发现，俄黑客在最近的网络间谍活动中以大使馆和国际组织为目标

https://therecord.media/cyber-espionage-campaign-embassies-apt29-cozy-bear

OpenSea NFT 用户报告大规模电子邮件网络钓鱼活动

https://cointelegraph.com/news/opensea-nft-email-phishing

OracleIV DDoS 僵尸网络以公共 Docker 引擎 API 为目标来劫持容器

https://thehackernews.com/2023/11/alert-oracleiv-ddos-botnet-targets.html

涉及假记者的网络钓鱼计划在 Friend.tech 攻击中暴露

https://www.tronweekly.com/phishing-scheme-involving-fake-journalists-ex/

加拿大主要金融科技公司 Moneris 遭 Medusa 勒索软件攻击

https://cybernews.com/news/moneris-medusa-data-breach/

FBI 捣毁了 IPStorm 恶意软件僵尸网络

https://therecord.media/fbi-takes-down-ipstorm-malware-botnet

FBI 和 CISA 警告警惕 Rhysida 勒索软件攻击

https://www.bleepingcomputer.com/news/security/fbi-and-cisa-warn-of-opportunistic-rhysida-ransomware-attacks/

美监管机构介入，要求停止向消费者销售已知受到恶意软件攻击的Android 电视机顶盒和移动设备

https://www.eff.org/press/releases/eff-urges-ftc-address-american-resellers-malware-android-tv-set-top-boxes

三星遭遇新数据泄露，影响英国在线商店客户

https://www.bleepingcomputer.com/news/security/samsung-hit-by-new-data-breach-impacting-uk-store-customers/

多伦多公共图书馆确认数据在勒索软件攻击中被盗

https://www.bleepingcomputer.com/news/security/toronto-public-library-confirms-data-stolen-in-ransomware-attack/

美国的医疗保健组织服务商PJ&A 称网络攻击暴露了近 900 万患者的数据

https://www.bleepingcomputer.com/news/security/pj-and-a-says-cyberattack-exposed-data-of-nearly-9-million-patients/

医疗保健分销商 Henry Schein 在黑客攻击事件中泄露了客户银行卡信息

https://cybernews.com/news/henry-schein-confirms-data-breach-customer-info-likely-exposed/

BlackCat勒索软件团伙通过 Google Ads 广告针对企业

https://www.infosecurity-magazine.com/news/alphvblackcat-targets-businesses/

英特尔、AMD 解决了 130 多个漏洞

https://www.securityweek.com/chipmaker-patch-tuesday-intel-amd-address-over-130-vulnerabilities/

新的英特尔 CPU 漏洞“Reptar”可能允许 DoS 攻击和权限提升

https://www.securityweek.com/new-intel-cpu-vulnerability-reptar-can-allow-dos-attacks-privilege-escalation/

Citrix Hypervisor 获得针对新 Reptar Intel CPU 缺陷的修补程序

https://www.bleepingcomputer.com/news/security/citrix-hypervisor-gets-hotfix-for-new-reptar-intel-cpu-flaw/

VMware 警告未修补的关键 Cloud Director 漏洞（CVE-2023-34060）

https://thehackernews.com/2023/11/urgent-vmware-warns-of-unpatched.html

Microsoft 修补 Azure CLI 中的敏感信息泄露漏洞

https://www.securityweek.com/microsoft-patches-sensitive-information-disclosure-vulnerability-in-azure-cli/

企业软件制造商 SAP 修补 Business One 产品中的严重漏洞

https://www.securityweek.com/sap-patches-critical-vulnerability-in-business-one-product/

CISA 新增了三个已知的被利用漏洞

https://www.cisa.gov/news-events/alerts/2023/11/14/cisa-adds-three-known-exploited-vulnerabilities-catalog

针对Apache ActiveMQ 漏洞（CVE-2023-46604）的新 PoC 可能会让攻击者绕过安全系统

https://thehackernews.com/2023/11/new-poc-exploit-for-apache-activemq.html

CacheWarp 攻击：AMD SEV 中的新漏洞暴露加密虚拟机

https://thehackernews.com/2023/11/cachewarp-attack-new-vulnerability-in.html