12月11日每日安全热点 - 黑客在暗网出售超85000个MySQL数据库

360安全客 安全资讯 94558 4

漏洞 Vulnerability
GitLab文件读取远程代码执行
https://cxsecurity.com/issue/WLB-2020120076
安全工具 Security Tools
Wireshark Analyzer 3.4.1
https://packetstormsecurity.com/files/160440/wireshark-3.4.1.tar.xz
安全事件 Security Incident
黑客正在暗网上出售超过85,000个MySQL数据库
https://www.databreaches.net/hackers-are-selling-more-than-85000-sql-databases-on-a-dark-web-portal/
黑客从流行的应用窃取并出售4000个.nz电子邮件地址和密码
https://www.databreaches.net/hackers-sell-4000-nz-email-addresses-passwords-stolen-from-popular-app/
安全资讯 Security Information
“指纹劫持”攻击技术操纵Android UI
https://www.darkreading.com/threat-intelligence/fingerprint-jacking-attack-technique-manipulates-android-ui-/d/d-id/1339684
思科解决了Jabber中严重的RCE漏洞
https://securityaffairs.co/wordpress/112163/hacking/cisco-jabber-rce.html
MoleRats APT使用Facebook和Dropbox进行间谍活动
https://threatpost.com/molerats-apt-espionage-facebook-dropbox/162162/
勒索软件Campaign的目标是MySQL服务器
https://www.infosecurity-magazine.com/news/ransomware-campaign-targets-mysql/
安全研究 Security Research
BypassAv小技巧
https://sec-in.com/article/733
CVE-2020-17049 Kerberos Bronze Bit 攻击复现
https://mp.weixin.qq.com/s?__biz=MzU0MjUxNjgyOQ==&mid=2247486399&idx=1&sn=b95f17f831387e049b67636f1afbe1ec
设置iptables规则来保护CS服务器
https://mp.weixin.qq.com/s?__biz=Mzg2NjQ2NzU3Ng==&mid=2247486051&idx=1&sn=8aaa4f04a30c1f4fd91d4bede5c26c92
（完）