6月21日每日安全热点 - 勒索软件团伙拍卖美国医疗保健数据

360安全客 安全资讯 81704 4

漏洞 Vulnerability
Adobe修复了Illustrator，After Effects等产品中的安全缺陷
https://www.bleepingcomputer.com/news/security/adobe-fixes-critical-flaws-in-illustrator-after-effects-more/
CVE-2020-14932：SquirrelMail 1.4.22中的compose.php调用$sertodata值的反序列化
https://vulmon.com/vulnerabilitydetails?qid=CVE-2020-14932
安全工具 Security Tools
oss-fuzz：针对开源软件的模糊测试
https://github.com/google/oss-fuzz
安全报告 Security Report
AcidBox恶意软件分析
https://unit42.paloaltonetworks.com/acidbox-rare-malware/
安全资讯 Security Information
勒索软件团伙拍卖美国医疗保健数据
https://cointelegraph.com/news/ransomware-gang-auctions-off-us-healthcare-data-for-bitcoin
CERT-In警告Covid-19话题相关的网络钓鱼诈骗
https://inc42.com/buzz/with-surge-in-cyber-attacks-govt-warns-of-covid-19-linked-phishing-scams/
奥地利电信运营商与黑客进行了为期六个月的猫鼠游戏
https://www.wsj.com/articles/austrian-telecoms-operator-played-six-month-game-of-cat-and-mouse-with-hacker-11592559001
安全研究 Security Research
破解BattlEye数据包加密
https://secret.club/2020/06/19/battleye-packet-encryption.html
入侵星巴克并访问近1亿客户记录
https://samcurry.net/hacking-starbucks/
威胁情报和恶意软件分析的局限性
https://www.youtube.com/watch?v=KJIqgQKoHYg
逆向对比Nintendo Game Boy两款音频放大器芯片
http://www.righto.com/2020/06/reverse-engineering-and-comparing-two.html
恶意软件 Malware
LODEINFO恶意文档分析
https://www.cyberandramen.net/2020/06/analysis-of-lodeinfo-maldoc.html
BitterAPT：Android间谍工具的演变
https://labs.bitdefender.com/2020/06/bitterapt-revisited-the-untold-evolution-of-an-android-espionage-tool/
（完）