6月15日每日安全热点 - Maze攻击美咨询公司Threadstone Advisors

2020-06-15 09:45:31 360安全客安全资讯 82882 4

漏洞 Vulnerability

Microsoft Windows LNK远程执行代码漏洞-CVE-2020-1299

https://blog.vincss.net/2020/06/cve49-microsoft-windows-lnk-remote-code-execution-vuln-cve-2020-1299-eng.html

D-Link路由器DIR-865L中发现多个安全漏洞

https://www.ehackingnews.com/2020/06/six-new-vulnerabilities-found-in-dir.html

安全研究 Security Research

关于红蓝对抗那些事儿：以攻促防

https://www.freebuf.com/articles/others-articles/237823.html

TroyStealer –针对葡萄牙互联网用户的新型信息窃取者

https://securityaffairs.co/wordpress/104699/malware/troystealer-targets-portugal.html

Linux下的Kerberosting和票据传递攻击

https://www.hackingarticles.in/kerberosting-and-pass-the-ticket-attack-using-linux/

实战笔记—滑动验证码攻防对抗

https://www.freebuf.com/articles/web/238038.html

基于请求/响应对象搜索的Java中间件通用回显方法（针对HTTP）

https://blog.csdn.net/fnmsd/article/details/106709736

安全事件 Security Incident

勒索软件Maze攻击美国独立咨询公司Threadstone Advisors

https://securityaffairs.co/wordpress/104718/cyber-crime/threadstone-advisors-maze-ransomware.html

AWS 遭到创纪录的 2.3 Tbps DDoS 攻击：持续了 3 天

https://www.anquanke.com/post/id/208458

攻击者冒充privnote窃取比特币

https://www.bleepingcomputer.com/news/security/attackers-impersonate-secure-messaging-site-to-steal-bitcoins/

勒索软件攻击破坏了澳大利亚饮料公司Lion的运营

https://securityaffairs.co/wordpress/104749/cyber-crime/ransomware-attack-hit-lion.html

安全工具 Security Tools

Fast-Google-Dorks-Scan – 快速谷歌Dorks扫描

http://feedproxy.google.com/~r/PentestTools/~3/wZgjNA3IKjw/fast-google-dorks-scan-fast-google.html

nodejsscan – Nodejs静态安全代码扫描程序

https://github.com/ajinabraham/nodejsscan

（完）