Cloud Atlas 部署 VBCloud 恶意软件：超过 80% 的目标位于俄罗斯

今日安全资讯速递

乌克兰国家登记处遭受网络攻击，婚姻登记和房地产交易中断

https://therecord.media/cyberattack-on-ukraine-state-register-disrupts-real-estate-marriages

Cloud Atlas 部署 VBCloud 恶意软件：超过 80% 的目标位于俄罗斯

https://thehackernews.com/2024/12/cloud-atlas-deploys-vbcloud-malware.html

曹县APT组织利用虚假工作机会部署新型“OtterCookie”恶意软件针对开发人员

https://www.bleepingcomputer.com/news/security/new-ottercookie-malware-used-to-backdoor-devs-in-fake-job-offers/

曹县LazarusAPT组织被发现利用 CookiePlus 恶意软件攻击核工程师

https://thehackernews.com/2024/12/lazarus-group-spotted-targeting-nuclear.html

曹县黑客今年窃取了价值 13 亿美元的加密货币

https://www.bleepingcomputer.com/news/security/north-korean-hackers-stole-13-billion-worth-of-crypto-this-year/

日美指责曹县黑客抢劫 3.08 亿美元加密货币

https://www.infosecurity-magazine.com/news/us-japan-north-korea-crypto-heist/

伊朗迷人小猫部署 BellaCPP：BellaCiao 恶意软件的新 C++ 变体

https://thehackernews.com/2024/12/irans-charming-kitten-deploys-bellacpp.html

FortiGuard 实验室观察到Ficora 和 Kaiten 僵尸网络活动激增

https://securityaffairs.com/172373/uncategorized/surge-ficora-kaiten-botnets.html

黑客利用 DoS 漏洞禁用 Palo Alto Networks 防火墙

https://www.bleepingcomputer.com/news/security/hackers-exploit-dos-flaw-to-disable-palo-alto-networks-firewalls/

网络安全公司的 Chrome 扩展程序被劫持以窃取用户数据

https://www.bleepingcomputer.com/news/security/cybersecurity-firms-chrome-extension-hijacked-to-steal-users-data/

Cl0p 勒索软件袭击了 60 多家使用 Cleo 平台的公司

https://cybernews.com/security/cl0p-ransomware-hits-over-60-companies-using-cleo-platform/

黑客发布第二批被盗思科数据

https://hackread.com/hackers-release-second-batch-of-stolen-cisco-data/

巴西黑客入侵 30 万个账户，勒索 320 万美元比特币

https://thehackernews.com/2024/12/brazilian-hacker-charged-for-extorting.html

ESET报告称，Lumma 信息窃取恶意程序检测量飙升近 400%

https://www.infosecurity-magazine.com/news/infostealers-lumma-stealer/

印度铁路网站本月第二次崩溃，导致全印度特快车票预订中断

https://thecyberexpress.com/irctc-outage-disrupts-tatkal-bookings/

日本航空遭遇网络攻击，导致航班延误和取消

https://cybernews.com/news/japan-airlines-jal-cyberattack-flight-delays-cancellations/

技术问题导致美国航空短暂停飞美国境内航班

https://www.theregister.com/2024/12/24/american_airlines_grounds/

勒索软件攻击导致匹兹堡区域交通运输服务中断

https://securityaffairs.com/172333/cyber-crime/pittsburgh-regional-transit-ransomware-attack.html

Apache MINA CVE-2024-52046：CVSS评分为10的漏洞可通过不安全的序列化实现 RCE

https://thehackernews.com/2024/12/apache-mina-cve-2024-52046-cvss-100.html

Apache 警告 MINA、HugeGraph 和 Traffic Control 存在严重缺陷

https://www.bleepingcomputer.com/news/security/apache-warns-of-critical-flaws-in-mina-hugegraph-traffic-control/

Apache Traffic Control 中的严重 SQL 注入漏洞 CVSS 评分为 9.9

https://thehackernews.com/2024/12/critical-sql-injection-vulnerability-in.html

Palo Alto 发布 PAN-OS DoS 漏洞补丁

https://thehackernews.com/2024/12/palo-alto-releases-patch-for-pan-os-dos.html

Adobe 警告 ColdFusion 存在严重漏洞，并附带 PoC 漏洞代码

https://www.bleepingcomputer.com/news/security/adobe-warns-of-critical-coldfusion-bug-with-poc-exploit-code/