11月25日每日安全热点 - “肚脑虫”利用Google云盘分发恶意插件

360安全客 安全资讯 11200 4

漏洞 Vulnerability
Apache JSPWiki 多个安全漏洞
https://jspwiki.apache.org/
安全事件 Security Incident
GoDaddy hack导致数据泄露影响120万客户
https://www.bleepingcomputer.com/news/security/godaddy-hack-causes-data-breach-affecting-12-million-customers/
犹他州成像协会数据泄露影响583643名患者
https://securityaffairs.co/wordpress/124886/data-breach/utah-imaging-associates-data-breach.html
风力涡轮机巨头维斯塔斯的数据在网络攻击中受损
https://www.bleepingcomputer.com/news/security/wind-turbine-giant-vestas-data-compromised-in-cyberattack/
Squirrelwaffle利用ProxyShell和ProxyLogon劫持电子邮件链
https://www.trendmicro.com/en_us/research/21/k/Squirrelwaffle-Exploits-ProxyShell-and-ProxyLogon-to-Hijack-Email-Chains.html
英国政府警告数千家中小企业他们的在线商店遭到黑客攻击
https://www.bleepingcomputer.com/news/security/uk-govt-warns-thousands-of-smbs-their-online-stores-were-hacked/
黑客滥用Glitch平台窃取凭证
https://www.databreachtoday.com/hackers-abusing-glitch-platform-to-steal-credentials-a-17968
Tardigrade黑客用秘密恶意软件瞄准大型制药疫苗制造商
https://www.bleepingcomputer.com/news/security/tardigrade-hackers-target-big-pharma-vaccine-makers-with-stealthy-malware/
APT-C-23的Android间谍软件新变种
https://news.sophos.com/en-us/2021/11/23/android-apt-spyware-targeting-middle-east-victims-improves-its-capabilities/
“肚脑虫”组织近期利用Google云盘分发新款恶意插件的攻击活动分析
https://mp.weixin.qq.com/s/J2FL52rVX2tTCODdwIin4Q
威胁组织利用Tardigrade恶意软件攻击疫苗生产基础设施
https://www.isac.bio/post/tardigrade
（完）