新Mirai变体Mukashi重要攻击Zyxel NAS设备；TA505利用虚伪简历作为钓饵攻击德国企业

颁布功夫 2020-03-21

【威胁谍报】


新Mirai变体Mukashi重要攻击Zyxel NAS设备

https://threatpost.com/new-mirai-variant-mukashi-targets-zyxel-nas-devices/153982/  


APT28在去年重要针对Webmail和Exchange邮件服务器

https://www.zdnet.com/article/apt28-has-been-scanning-and-exploiting-vulnerable-email-servers-for-more-than-a-year


TA505利用虚伪简历作为钓饵攻击德国企业

https://www.darkreading.com/attacks-breaches/ta505-targets-hr-departments-with-poisoned-cvs-/d/d-id/1337355


【缝隙补丁】


Drupal颁布安全更新，建复两个影响CKEditor库的XSS缝隙

https://securityaffairs.co/wordpress/100040/security/drupal-xss-flaws-ckeditor.html


【数据泄露】


Sodinokibi团伙在暗网销售Brooks公司的12GB数据

https://www.bleepingcomputer.com/news/security/sodinokibi-ransomware-data-leaks-now-sold-on-hacker-forums/