朝鲜加入乌克兰战争，亲俄黑客瞄准韩国

今日安全资讯速递

朝鲜黑客瞄准加密货币公司，利用 macOS 上的Hidden Risk恶意软件

https://thehackernews.com/2024/11/north-korean-hackers-target-crypto.html

朝鲜加入乌克兰战争 亲俄黑客瞄准韩国

https://www.infosecurity-magazine.com/news/russian-hacktivits-south-korea/

IcePeony 和 Transparent Tribe 利用基于云的工具瞄准印度实体

https://thehackernews.com/2024/11/icepeony-and-transparent-tribe-target.html

德克萨斯州油田供应商 Newpark 遭受勒索软件攻击

https://www.securityweek.com/texas-oilfield-supplier-newpark-hit-by-ransomware/

诺基亚称近期源代码泄露影响非常有限

https://www.securityweek.com/nokia-says-impact-of-recent-source-code-leak-is-very-limited/

恶意 NPM 软件包利用窃取数据的恶意软件攻击 Roblox 用户

https://thehackernews.com/2024/11/malicious-npm-packages-target-roblox.html

严重的 Veeam RCE 漏洞现已用于 Frag 勒索软件攻击

https://www.bleepingcomputer.com/news/security/critical-veeam-rce-bug-now-used-in-frag-ransomware-attacks/

思科发布针对工业无线系统中严重 URWB 漏洞的补丁

https://thehackernews.com/2024/11/cisco-releases-patch-for-critical-urwb.html

严重漏洞影响思科工业重型 WiFi 接入点

https://cybernews.com/security/critical-vulnerability-affects-cisco-industrial-wifi-routers/

D-Link 不会修复影响 60,000 台旧 NAS 设备的严重漏洞

https://www.bleepingcomputer.com/news/security/d-link-wont-fix-critical-flaw-affecting-60-000-older-nas-devices/

CISA 警告：Palo Alto Networks Expedition 漏洞（CVE-2024-5910）遭利用

https://www.securityweek.com/palo-alto-networks-expedition-vulnerability-exploited-in-attacks-cisa-warns/

HPE 修补 Aruba 接入点中的严重漏洞

https://www.securityweek.com/hpe-patches-critical-vulnerabilities-in-aruba-access-points/

趋势科技披露多款马自达车型的信息娱乐系统漏洞，可能导致黑客攻击

https://www.securityweek.com/unpatched-vulnerabilities-allow-hacking-of-mazda-cars-zdi/