11月3日每日安全热点 - 始于ZDI-CAN-8807的挖洞故事

安全动态发布时间：2019-11-03 09:54:09 82 浏览

安全工具 Security Tools

Kuiper：数字调查平台

https://github.com/DFIRKuiper/Kuiper

安全资讯 Security Information

NordVPN用户的凭证泄漏并流传于在线论坛上

https://arstechnica.com/information-technology/2019/11/nordvpn-users-passwords-exposed-in-mass-credential-stuffing-attacks/

Google已对在野Chrome漏洞进行修补

https://www.bleepingcomputer.com/news/security/chrome-zero-day-bug-with-exploit-in-the-wild-gets-a-patch/

ElasticSearch数据库因配置错误暴露了将近750万Adobe Creative Cloud用户记录

https://www.trendmicro.com/vinfo/us/security/news/virtualization-and-cloud/misconfigured-elasticsearch-database-exposed-almost-7-5-million-adobe-creative-cloud-users-records?utm_source=trendmicroresearch&utm_medium=smk&utm_campaign=1019_elasticsearch

安全研究 Security Research

始于ZDI-CAN-8807的挖洞故事

https://www.zerodayinitiative.com/blog/2019/10/31/the-little-bitmap-that-couldnt

恶意软件 Malware

Corona bot分析

https://maxkersten.nl/binary-analysis-course/malware-analysis/corona-ddos-bot/

WIZARD SPIDER为Ryuk添加了新功能，用于在局域网上定位主机

https://www.crowdstrike.com/blog/wizard-spider-adds-new-feature-to-ryuk-ransomware/

安全报告 Security Report

CVE-2019-13720漏洞在野利用分析

https://securelist.com/chrome-0-day-exploit-cve-2019-13720-used-in-operation-wizardopium/94866/

欺诈，黑客和网络攻击：对电子竞技行业的威胁

https://documents.trendmicro.com/assets/white_papers/wp-threats-to-the-esports-industry-in-2019-and-beyond.pdf

NCSC2019年度回顾

https://www.ncsc.gov.uk/annual-review/2019/ncsc/docs/ncsc_2019-annual-review.pdf

免责声明：文章内容不代表本站立场，本站不对其内容的真实性、完整性、准确性给予任何担保、暗示和承诺，仅供读者参考，文章版权归原作者所有。如本文内容影响到您的合法权益（内容、图片等），请及时联系本站，我们会及时删除处理。查看原文