日本加密钱币买卖所Bitpoint遭黑客入侵；Atlassian JIRA模板注入缝隙，可导致远程代码执行

颁布功夫 2019-07-13

【攻击事务】


买卖所Bitpoint遭黑客入侵，损失3200万美元

https://cyware.com/news/hackers-stole-32-million-worth-cryptocurrency-assets-from-bitpoint-cryptocurrency-exchange-5bd0667f


【勒索软件】


纽约门罗学院遭勒索软件攻击，黑客勒索200万美元赎金

https://www.bleepingcomputer.com/news/security/monroe-college-hit-with-ransomware-2-million-demanded/


【安全缝隙】


Atlassian JIRA模板注入缝隙，可导致远程代码执行

https://www.bleepingcomputer.com/news/security/jira-server-and-data-center-update-patches-critical-vulnerability/


【缝隙补丁】


SAP颁布7月安全更新，建复Diagnostics Agent中的注入缝隙

https://www.securityweek.com/sap-patches-critical-flaw-diagnostics-agent


罗克韦尔自动化建复PanelView HMI中的提权缝隙
https://www.securityweek.com/flaw-rockwell-panelview-allows-root-level-access-devices