1月19日每日安全热点 - Earth Lusca针对全球组织的攻击活动

2022-01-19 09:30:36 360安全客安全资讯 37676 4

漏洞 Vulnerability

CVE-2021-44757：Zoho ManageEngine Desktop Central 身份验证绕过漏洞通告

https://cert.360.cn/warning/detail?id=ebd96266764e2c80293d3ccd41909f90

安全事件 Security Incident

Earth Lusca针对全球组织的攻击活动

https://www.trendmicro.com/en_us/research/22/a/earth-lusca-sophisticated-infrastructure-varied-tools-and-techni.html

继美国网络司令部披露后：MuddyWater近期攻击活动总结

https://mp.weixin.qq.com/s/zGO7xua7YWgFqAJqRE6MBA

针对可再生能源和工业技术组织的攻击活动

https://blog.bushidotoken.net/2022/01/tracking-renewable-energy-intelligence.html

3个WordPress插件中的高严重性漏洞影响了84000个网站

https://thehackernews.com/2022/01/high-severity-vulnerability-in-3.html

Kyiv将最近的网络攻击归咎于与白俄罗斯有关的APT UNC1151

https://securityaffairs.co/wordpress/126800/apt/unc1151-apt-ukraine.html

Earth Lusca采用先进的基础设施，各种工具和技术

https://www.trendmicro.com/en_us/research/22/a/earth-lusca-sophisticated-infrastructure-varied-tools-and-techni.html

（完）