与印度有关的黑客针对巴基斯坦政府和执法部门

今日安全资讯速递

与印度有关的黑客针对巴基斯坦政府和执法部门

https://www.securityweek.com/india-linked-hackers-targeting-pakistani-government-law-enforcement/

亲俄黑客针对奥地利网站发起 DDoS 攻击
https://therecord.media/austria-websites-ddos-incidents-pro-russia-hacktivists

堪萨斯州水务设施在遭受网络攻击后转为手动操作

https://www.securityweek.com/kansas-water-facility-switches-to-manual-operations-following-cyberattack/

伊朗 APT 是中东地区网络的初始接入提供商

https://www.securityweek.com/iranian-apt-operating-as-initial-access-provider-to-networks-in-the-middle-east/

与朝鲜有关的 APT Gleaming Pisces 通过恶意 Python 包提供新的 PondRAT 后门

https://securityaffairs.com/168781/apt/gleaming-pisces-malicious-python-packages.html

以色列是否渗透了黎巴嫩电信网络？

https://securityaffairs.com/168817/intelligence/did-israel-infiltrate-lebanese-telecoms-networks.html

超过 9000 万条法国公民记录被泄露

https://cybernews.com/security/french-records-exposed-by-mysterious-data-hoarder/

网络安全研究人员警告新型基于 Rust 的 Splinter 后利用工具

https://thehackernews.com/2024/09/cybersecurity-researchers-warn-of-new.html

北美物流公司遭受 Lumma Stealer 和 NetSupport 恶意软件的网络攻击

https://thehackernews.com/2024/09/transportation-companies-hit-by.html

82% 的钓鱼网站以移动设备为目标

https://www.infosecurity-magazine.com/news/82-phishing-target-mobile-devices/

堪萨斯州水厂遭受网络攻击 被迫转为手动操作

https://www.bleepingcomputer.com/news/security/kansas-water-plant-cyberattack-forces-switch-to-manual-operations/

信息窃取恶意软件绕过 Chrome 的新 cookie 窃取防御措施

https://www.bleepingcomputer.com/news/security/infostealer-malware-bypasses-chromes-new-cookie-theft-defenses/

美国点对点支付和汇款公司 MoneyGram 证实，网络攻击导致其服务中断

https://securityaffairs.com/168827/security/moneygram-outage-caused-by-cyberattack.html

AutoCanada 称，员工数据可能在勒索软件攻击中被泄露

https://www.bleepingcomputer.com/news/security/autocanada-says-ransomware-attack-may-impact-employee-data/

美国医疗保险和医疗补助服务中心（CMS）称，数据泄露影响310万人

https://www.bleepingcomputer.com/news/healthcare/us-govt-agency-cms-says-data-breach-impacted-31-million-people/

在 Play Store 上的热门相机和浏览器应用中发现 Necro Android 恶意软件

https://thehackernews.com/2024/09/necro-android-malware-found-in-popular.html

新型 Octo2 Android 银行木马出现，具备设备接管功能

https://thehackernews.com/2024/09/new-octo2-android-banking-trojan.html

黑客声称入侵德勤服务器，德勤称敏感数据还安全

https://www.securityweek.com/deloitte-says-no-threat-to-sensitive-data-after-hacker-claims-server-breach/

人工智能生成的恶意软件在野外被发现

https://www.securityweek.com/ai-generated-malware-found-in-the-wild/

Ivanti 近期第三个漏洞遭野外利用

https://www.securityweek.com/third-recent-ivanti-product-vulnerability-exploited-in-the-wild/

安全公司称未修补的漏洞使 Riello UPS 面临黑客攻击

https://www.securityweek.com/unpatched-vulnerabilities-expose-riello-upss-to-hacking-security-firm/

关键基础设施中使用的自动油箱计量器存在严重漏洞

https://www.theregister.com/2024/09/24/security_bugs_fuel_storage_tanks/

Versa Networks 修补暴露身份验证令牌的漏洞

https://www.securityweek.com/versa-networks-patches-vulnerability-exposing-authentication-tokens/

CERT/CC 警告 Microchip ASF 中存在未修补的严重漏洞

https://www.securityweek.com/cert-cc-warns-of-unpatched-critical-vulnerability-in-microchip-asf/