4月19日每日安全热点 - 美国因网络攻击制裁俄罗斯

360安全客 安全资讯 13520 4

漏洞 Vulnerability
GitLab修复两个严重漏洞
https://about.gitlab.com/releases/2021/04/14/security-release-gitlab-13-10-3-released/
CVE-2021-30245：Apache OpenOffice代码执行漏洞
https://www.mail-archive.com/announce@apache.org/msg06491.html
安全事件 Security Incident
DarkSide发布更新
https://twitter.com/3xp0rtblog/status/1382608070833016834
美国因太阳风网络攻击制裁俄罗斯并驱逐10名外交官
https://thehackernews.com/2021/04/us-sanctions-russia-and-expels-10.html
研究人员发布Chrome，Edge，Brave，Opera的0day POC
https://www.hackread.com/poc-exploit-for-0-day-chrome-edge-brave-opera/
美国和英国指责俄罗斯情报部门黑客发动重大网络攻击
https://www.zdnet.com/article/solarwinds-us-and-uk-blame-russian-intelligence-service-hackers-for-major-cyber-attack/
Chrome安全问题可能导致Windows版微信任意代码执行
https://mp.weixin.qq.com/s/nEpTW6ROQFRq-oV0jklCTA
APT SideWinder针对南亚某区域的最新攻击活动
https://mp.weixin.qq.com/s/uIuYqWxN73jdPcfEUWJt7Q
Malware Analysis Report (AR21-105A) MAR-10327841-1.v1 – SUNSHUTTLE
https://us-cert.cisa.gov/ncas/analysis-reports/ar21-105a
Lazarus BTC Changer
https://www.group-ib.com/blog/btc_changer
（完）