乌克兰黑客在普京生日当天对俄罗斯国家媒体 发起前所未有的网络攻击

今日安全资讯速递

朝鲜“Shrouded Sleep”恶意软件活动针对柬埔寨和其他东南亚国家

https://therecord.media/north-korea-malware-espionage-cambodia

荷兰政府指责“国家行为者”入侵警察网络

https://www.securityweek.com/dutch-government-blames-a-state-actor-for-hacking-a-police-network/

微软和美国政府扰乱俄罗斯Star Blizzard威胁组织运营

https://www.infosecurity-magazine.com/news/microsoft-us-govenment-disrupt/

CeranaKeeper 成为泰国政府网络的新威胁

https://www.infosecurity-magazine.com/news/ceranakeeper-new-threat-thai/

Salt Typhoon 入侵美宽带提供商，可能访问系统并获取其他数据

https://securityaffairs.com/169460/apt/salt-typhoon-hacked-us-broadband-providers.html

Trinity 勒索软件促使联邦政府向医疗行业发出警告

https://therecord.media/trinity-ransomware-alert-healthcare-industry-hhs-cyber-center

美国水务公司在网络攻击后关闭在线服务

https://www.bleepingcomputer.com/news/security/american-water-shuts-down-online-services-after-cyberattack/

乌克兰人承认操作 Raccoon Stealer 恶意软件

https://www.bleepingcomputer.com/news/security/ukrainian-pleads-guilty-to-operating-raccoon-stealer-malware/

MoneyGram 确认黑客在网络攻击中窃取了客户数据

https://www.bleepingcomputer.com/news/security/moneygram-confirms-hackers-stole-customer-data-in-cyberattack/

家庭和小型企业安全公司 ADT 披露 2 个月内第二次入侵事件，黑客通过窃取凭证进行攻击

https://www.bleepingcomputer.com/news/security/adt-discloses-second-breach-in-2-months-hacked-via-stolen-credentials/

乐高网站遭黑客攻击，推动加密货币骗局

https://www.bleepingcomputer.com/news/security/legos-website-hacked-to-push-cryptocurrency-scam/

新型 Gorilla 僵尸网络在 100 个国家/地区发起超过 300,000 次 DDoS 攻击

https://thehackernews.com/2024/10/new-gorilla-botnet-launches-over-300000.html

隐秘“Perfctl”恶意软件感染数千台 Linux 服务器

https://www.securityweek.com/stealthy-perfctl-malware-infects-thousands-of-linux-servers/

环球音乐数据泄露导致个人信息泄露

https://www.securityweek.com/personal-information-compromised-in-universal-music-data-breach/

238,000 名康卡斯特客户遭受 FBCS 勒索软件攻击

https://www.securityweek.com/238000-comcast-customers-hit-by-fbcs-ransomware-attack/

三星和 LG 的智能电视使用类似 Shazam 的追踪器来监控用户观看的内容

https://www.securityweek.com/smart-tv-surveillance-how-samsung-and-lgs-acr-technology-tracks-what-you-watch/

Okta 提醒用户检查新修补漏洞的潜在利用情况

https://www.securityweek.com/okta-tells-users-to-check-for-potential-exploitation-of-newly-patched-vulnerability/

苹果发布关键 iOS 和 iPadOS 更新以修复 VoiceOver 密码漏洞

https://thehackernews.com/2024/10/apple-releases-critical-ios-and-ipados.html

高通修复了在攻击中被利用的高危零日漏洞( CVE-2024-43047 )

https://www.bleepingcomputer.com/news/security/qualcomm-patches-high-severity-zero-day-exploited-in-attacks/

Apache Avro SDK 严重缺陷导致 Java 应用程序中存在远程代码执行

https://thehackernews.com/2024/10/critical-apache-avro-sdk-flaw-allows.html