11月16日每日安全热点 - 俄亥俄州医院因网络攻击转移救护车

360安全客 安全资讯 4635 4

漏洞 Vulnerability
QNAP NAS Multimedia Console 远程代码执行漏洞安全更新
https://www.qnap.com/en/security-advisory/qsa-21-45
Adobe RoboHelp Server 路径穿越漏洞安全更新
https://helpx.adobe.com/security/products/robohelp-server/apsb21-87.html
Apache Traffic Control LDAP注入漏洞安全更新
http://trafficcontrol.apache.org/security/
安全事件 Security Incident
Kimsuky组织的Light Shell行动
https://asec.ahnlab.com/ko/28619/
黑客在昆士兰水供应商的服务器上隐藏九个月未被发现
https://www.bleepingcomputer.com/news/security/hackers-undetected-on-queensland-water-supplier-server-for-9-months/
Magniber 勒索软件团伙正利用IE漏洞进行攻击
https://www.bleepingcomputer.com/news/security/magniber-ransomware-gang-now-exploits-internet-explorer-flaws-in-attacks/
macOS 0Day在香港被利用在水坑攻击用户
https://securityaffairs.co/wordpress/124513/malware/macos-zero-day-watering-hole-hong-kong.html
理解 .htaccess 恶意软件
https://blog.sucuri.net/2021/11/understanding-htaccess-malware.html
Costco 在发现信用卡欺诈后披露数据泄露
https://www.bleepingcomputer.com/news/security/costco-discloses-data-breach-after-finding-credit-card-skimmer/
Windows 10应用程序安装程序被BazarLoader恶意软件滥用
https://www.bleepingcomputer.com/news/security/windows-10-app-installer-abused-in-bazarloader-malware-attacks/
BotenaGo僵尸网络以数百万物联网设备为目标，利用33个漏洞攻击
https://www.bleepingcomputer.com/news/security/botenago-botnet-targets-millions-of-iot-devices-with-33-exploits/
伪造的端到端加密聊天应用程序分发Android Spyware
https://www.bleepingcomputer.com/news/security/fake-end-to-end-encrypted-chat-app-distributes-android-spyware/
美国联邦调查局(FBI)系统被黑客入侵，发送“紧急”邮件警告虚假网络攻击
https://www.bleepingcomputer.com/news/security/fbi-system-hacked-to-email-urgent-warning-about-fake-cyberattacks/
俄亥俄州医院因遭受网络攻击转移救护车，取消预约
https://www.scmagazine.com/analysis/breach/ohio-hospital-diverting-ambulances-canceling-appointments-amid-cyberattack
Abcbot：一种针对Linux的新型蠕虫僵尸网络恶意软件
https://blog.netlab.360.com/abcbot_an_evolving_botnet_en/
TeamTNT黑客组织再次盯上Docker主机服务器
https://www.trendmicro.com/en_us/research/21/k/compromised-docker-hub-accounts-abused-for-cryptomining-linked-t.html
（完）