11月18日每日安全热点 - Meta披露巴基斯坦和叙利亚APT组织的攻击活动

360安全客 安全资讯 67112 4

漏洞 Vulnerability
WECON PLC Editor安全漏洞
https://us-cert.cisa.gov/ics/advisories/icsa-21-315-01
Siemens Siveillance Video DLNA Server目录穿越漏洞安全更新
https://cert-portal.siemens.com/productcert/pdf/ssa-755517.pdf
安全事件 Security Incident
疑似SideCopy黑客组织利用双平台武器对印度发起网络攻击
https://mp.weixin.qq.com/s/BSfKTlMlOnNlsWKjV1NM8w
Meta披露巴基斯坦和叙利亚APT组织的攻击活动
https://about.fb.com/news/2021/11/taking-action-against-hackers-in-pakistan-and-syria/
UNC1151疑似与白俄罗斯政府有关联
https://www.mandiant.com/resources/unc1151-linked-to-belarus-government
微软分析六个伊朗APT组织的演变
https://www.microsoft.com/security/blog/2021/11/16/evolving-trends-in-iranian-threat-actor-activity-mstic-presentation-at-cyberwarcon-2021/
NPM修复了私有包名称泄漏、严重授权错误
https://www.bleepingcomputer.com/news/security/npm-fixes-private-package-names-leak-serious-authorization-bug/
海姆达尔™ 黑色星期五电子欺诈研究显示加密挖掘领域的热潮
https://heimdalsecurity.com/blog/black-friday-cryptomining/
Emotet恶意软件似乎又重新投入业务
https://heimdalsecurity.com/blog/emotet-malware-appears-to-be-back-in-business/
Mac零日警报：野外水坑攻击
https://www.databreachtoday.com/mac-zero-day-alert-watering-hole-attacks-in-wild-a-17909
Moses Staff黑客对以色列组织造成严重破坏
https://www.bleepingcomputer.com/news/security/moses-staff-hackers-wreak-havoc-on-israeli-orgs-with-ransomless-encryptions/
阿里云服务器实例被加密挖掘恶意软件主动劫持
https://www.bleepingcomputer.com/news/security/alibaba-ecs-instances-actively-hijacked-by-cryptomining-malware/
Cloudflare缓解了2 Tbps DDoS攻击，这是迄今为止最大的攻击
https://securityaffairs.co/wordpress/124634/security/cloudflare-mitigated-ddos-2-tbps.html
新银行特洛伊木马SharkBot在欧美掀起波澜
https://www.zdnet.com/article/new-banking-trojan-sharkbot-makes-waves-across-europe/
（完）