10月29日每日安全热点 - 大规模网络攻击后伊朗加油站无运营

360安全客 安全资讯 6676 4
robots

漏洞 Vulnerability
Adobe Illustrator 多个漏洞安全更新
https://helpx.adobe.com/security/products/illustrator/apsb21-98.html
Apple tvOS 安全更新
https://support.apple.com/en-us/HT212876
Apple iOS 安全更新
https://support.apple.com/en-us/HT212866
安全事件 Security Incident
Donot组织的恶意软件新变种
https://isarc.tachyonlab.com/4592
Thallium发起网络钓鱼攻击活动
https://blog.alyac.co.kr/4227?category=957259
攻击者劫持Craigslist电子邮件以绕过安全，发送恶意软件
https://threatpost.com/attackers-hijack-craigslist-email-malware/175754/
大规模网络攻击后，伊朗加油站无运营
https://heimdalsecurity.com/blog/iranian-gas-stations-unable-to-operate-after-massive-cyberattack/
Lazarus黑客组织目前专注于IT供应链攻击
https://heimdalsecurity.com/blog/lazarus-hacking-group-now-focusing-on-it-supply-chain-attacks/
Wslink：作为服务器运行的唯一且未记录的恶意加载程序
https://www.welivesecurity.com/2021/10/27/wslink-unique-undocumented-malicious-loader-runs-server/
WordPress插件漏洞允许订阅者删除站点
https://www.bleepingcomputer.com/news/security/brutal-wordpress-plugin-bug-allows-subscribers-to-wipe-sites/
垃圾邮件发送者使用SquirreWaffle恶意软件进行攻击
https://www.bleepingcomputer.com/news/security/spammers-use-squirrelwaffle-malware-to-drop-cobalt-strike/
（完）