6月3日每日安全热点 - 苹果越狱零日补丁

2020-06-03 09:45:14 360安全客安全资讯 77892 4

漏洞 Vulnerability

CVE-2020-5410: Spring Cloud Config Server 目录遍历漏洞通告

https://cert.360.cn/warning/detail?id=005b0371f251e8e397836bcc6baff8dc

（更新）远程利用POC公布|CVE-2020-0796：微软发布SMBv3协议“蠕虫级”漏洞补丁通告

https://cert.360.cn/warning/detail?id=d7e05fde363cf38ead4761a04caefd87

安全资讯 Security Information

最新的AWS钓鱼活动已让全球数百万用户处于安全威胁之下

https://www.anquanke.com/post/id/207401

移动网络钓鱼攻击急剧增加

https://www.darkreading.com/mobile/mobile-phishing-attacks-increase-sharply/d/d-id/1337982?_mc=rss_x_drr_edt_aud_dr_x_x-rss-simple

Apple修复了登录错误可能启用对第三方帐户的劫持

https://www.scmagazine.com/home/security-news/vulnerabilities/fixed-apple-sign-in-bug-could-have-enabled-hijacking-of-3rd-party-accounts/

苹果越狱零日补丁

https://packetstormsecurity.com/news/view/31258/Apple-Jailbreak-Zero-Day-Gets-A-Patch.html

8Belts公开了全球100,000个在线学习者的个人数据

https://www.hackread.com/8belts-exposes-data-of-100000-e-learners/

VMware Cloud Director中的关键漏洞使黑客可以接管公司的基础架构

https://securityaffairs.co/wordpress/104157/hacking/vmware-cloud-director-flaw.html

Sodinokibi勒索软件泄露从英国电力交易机构Elexon窃取的文件

https://securityaffairs.co/wordpress/104149/cyber-crime/sodinokibi-published-elexon-files.html

安全研究 Security Research

后堆栈时代的信息泄露漏洞挖掘思路

https://www.freebuf.com/vuls/237398.html

SMB RPC类漏洞攻防对抗系列：利用SMB_COM_WRITE_ANX分割PRC流量特征

https://www.freebuf.com/vuls/235800.html

（完）