勒索团伙REvil利用Kaseya VSA进行供给链攻击；钻研人员披露西门子SIMATIC HMI产品中的安全缝隙

颁布功夫 2021-07-04

【威胁谍报】


勒索团伙REvil利用Kaseya VSA进行供给链攻击活动

https://blog.talosintelligence.com/2021/07/revil-ransomware-actors-attack-kaseya.html


【缝隙补丁】


Microsoft披露PowerShell 7中的远程代码执行缝隙

https://www.bleepingcomputer.com/news/security/microsoft-warns-of-critical-powershell-7-code-execution-vulnerability/


钻研人员披露西门子SIMATIC HMI产品中的安全缝隙

https://therecord.media/telnet-service-left-enabled-and-without-a-password-on-simatic-hmi-comfort-panels/


0patch平台颁布PrintNightmare 0day的非官方补丁

https://www.bleepingcomputer.com/news/security/actively-exploited-printnightmare-zero-day-gets-unofficial-patch/


【分析汇报】


Which颁布有关针对智能家居的攻击活动的分析汇报

https://www.which.co.uk/news/2021/07/how-the-smart-home-could-be-at-risk-from-hackers/