11月8日每日安全热点 - Lockean多个勒索软件分支机构与袭击法国组织有关

360安全客 安全资讯 20667 4

漏洞 Vulnerability
Cisco Series Switches 安全更新
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-smb-switches-tokens-UzwpR4e5
npm 软件包 coa存在恶意代码
https://github.com/veged/coa/issues/99
安全事件 Security Incident
乌克兰国家安全局披露俄罗斯APT组织Gamaredon的人员信息
https://ssu.gov.ua/en/novyny/sbu-vstanovyla-khakeriv-fsb-yaki-zdiisnyly-ponad-5-tys-kiberatak-na-derzhavni-orhany-ukrainy
英国工党披露勒索软件攻击后数据泄露
https://www.bleepingcomputer.com/news/security/uk-labour-party-discloses-data-breach-after-ransomware-attack/
Free Discord Nitro网络钓鱼主要针对Steam玩家
https://www.bleepingcomputer.com/news/security/beware-free-discord-nitro-phishing-targets-steam-gamers/
Lockean多个勒索软件分支机构与袭击法国组织有关
https://www.bleepingcomputer.com/news/security/lockean-multi-ransomware-affiliates-linked-to-attacks-on-french-orgs/
乌克兰将Gamaredon黑客组织成员与俄罗斯联邦安全局联系起来
https://www.bleepingcomputer.com/news/security/ukraine-links-members-of-gamaredon-hacker-group-to-russian-fsb/
CISA通过指令，强制联邦民事机构修复306个漏洞
https://www.zdnet.com/article/cisa-passes-directive-forcing-federal-civilian-agencies-to-fix-306-vulnerabilities/
（完）