3月16日安全热点–GrayKey解锁工具盒首次曝光,iphone分分钟被破解

资讯类

GrayKey 解锁工具盒首次曝光，iphone分分钟被破解

https://blog.malwarebytes.com/security-world/2018/03/graykey-iphone-unlocker-poses-serious-security-concerns/

 

https://threatpost.com/hyperbole-swirls-around-amd-processor-security-threat/130481/

 

语音设备,企业安全和’Big Truck’ 攻击
https://www.darkreading.com/endpoint/voice-operated-devices-enterprise-security-and-the-big-truck-attack–/a/d-id/1331261?_mc=rss_x_drr_edt_aud_dr_x_x-rss-simple

 

PinkKite POS Malware——一种新颖的数据泄露软件
https://www.tripwire.com/state-of-security/latest-security-news/unique-data-exfiltration-method-makes-pinkkite-pos-malware-stand-out/

 

美国称俄罗斯在其能源电网上发起了网络攻击
https://news.hitb.org/content/us-says-russia-launched-cyberattack-its-energy-grid

 

遇见斯嘉丽约翰逊——PostgreSQL恶意软件攻击
流行女星的图像被用作开源DBMS PostgreSQL上的恶意软件攻击媒介。
http://www.zdnet.com/article/meet-the-scarlett-johansson-postgresql-malware-attack/

 

在5百万热门Android手机上发现预装恶意软件
https://thehackernews.com/2018/03/android-botnet-malware.html

 

NEW WEB-BASED MALWARE DISTRIBUTION CHANNEL ‘BLACKTDS’ SURFACES
https://threatpost.com/new-web-based-malware-distribution-channel-blacktds-surfaces/130431/

 

预警：三种流行的vpn服务正泄露你的ip地址
https://thehackernews.com/2018/03/vpn-leak-ip-address.html

 

技术类

CVE-2017-13253：多个Android DRM服务中的缓冲区溢出
https://blog.zimperium.com/cve-2017-13253-buffer-overflow-multiple-android-drm-services/

 

Chrome: V8: Empty BytecodeJumpTable may lead to OOB read
https://www.seebug.org/vuldb/ssvid-97176

 

Samba 4.x密码更改

https://cxsecurity.com/issue/WLB-2018030123

 

个人区域网络中的漏洞（PAN）

https://www.beyondtrust.com/blog/vulnerabilities-personal-area-networks-pan/

 

帮助Android应用欺骗X-App-Token的应用

https://0x00sec.org/t/help-spoofing-x-app-token-of-an-android-app/5849

 

 

以下技术热点来自360cert