FBI×·»ØColonial PipelineÖ§¸¶µÄ230ÍòÃÀÔªÊê½ð£» £»£»£»£»¹È¸èÒòÀÄÓÃÆäÔÚ¹ã¸æÁìÓòµÄְλ±»·¨¹ú·£¿£¿£¿£¿£¿î2.2ÒÚÅ·Ôª

Ðû²¼Ê±¼ä 2021-06-09

1.FBI×·»ØColonial PipelineÖ§¸¶µÄ230ÍòÃÀÔªÊê½ð


1.jpg


ÃÀ¹úFBIºÍDOJÁªºÏ×·»ØÁËColonial PipelineÖ§¸¶µÄÌ©°ëÊê½ð¡£¡£¡£¡£¡£5ÔÂ7ÈÕ£¬£¬£¬£¬£¬¸Ã¹«Ë¾Ôâµ½ÁËDarkSideÀÕË÷Èí¼þ¹¥»÷ȼÁϹܵÀ¹Ø±Õ£¬£¬£¬£¬£¬Îª´ËÆäÖ§¸¶ÁË×ܼÆ440ÍòÃÀÔªµÄÊê½ð£¬£¬£¬£¬£¬´Ë´Î×·»ØÁËÆäÖеÄ230ÍòÃÀÔª¡£¡£¡£¡£¡£DOJÌåÏÖ£¬£¬£¬£¬£¬ËûÃÇͨ¹ýÉó²é±ÈÌØ±Ò¹«¹²·ÖÀàÕË£¬£¬£¬£¬£¬¸ú×ÙÁ˶à´Î±ÈÌØ±ÒתÕË£¬£¬£¬£¬£¬²¢È·¶¨Ô¼Äª63.7±ÈÌØ±ÒÒÑ×ªÒÆµ½Ìض¨µØµã£¬£¬£¬£¬£¬¶øFBIÓµÓиõصãµÄ˽Կ»ò´óÖµÈЧµÄµØµã¡£¡£¡£¡£¡£ÃÀ¹ú˾·¨²¿»¹³Æ£¬£¬£¬£¬£¬ÊÂʵÉÏÁª°îÊÓ²ì¾Ö´ÓÒ»×îÏȾÍÉèÁËȦÌס£¡£¡£¡£¡£


Ô­ÎÄÁ´½Ó£º

https://threatpost.com/fbi-claws-back-millions-darksides-ransom/166705/


2.¹È¸èÒòÀÄÓÃÆäÔÚ¹ã¸æÁìÓòµÄְλ±»·¨¹ú·£¿£¿£¿£¿£¿î2.2ÒÚÅ·Ôª


2.jpg


·¨¹ú¾ºÕùÖÎÀí»ú¹¹¶Ô¹È¸è´¦ÒÔ2.2ÒÚÅ·ÔªµÄ·£¿£¿£¿£¿£¿î£¬£¬£¬£¬£¬ÀíÓÉÊǹȸèÀÄÓÃÆäÔÚ¹ã¸æÁìÓòµÄÖ÷µ¼Ö°Î»²¢×óÌ»ÆäЧÀͶø¶ÔÆäËü³öÊéÉ̺;ºÕùµÐÊÖ²»¹«¡£¡£¡£¡£¡£GoogleûÓжԴ˴ÎÖ¸¿ØÌá³öÒìÒ飬£¬£¬£¬£¬ÔÞ³ÉÖ§¸¶·£¿£¿£¿£¿£¿î²¢ÔÊÐí½«¸ÄÉÆ¹È¸èAd ManagerЧÀÍ£¬£¬£¬£¬£¬ÒÔ¼°ÖÕÖ¹ÓÐÀûÓÚGoogleµÄÌõ¿î¡£¡£¡£¡£¡£ÔçÔÚ2017Äê6Ô£¬£¬£¬£¬£¬Å·ÃËίԱ»áÒòÆäʹÓÃÖ÷µ¼Ö°Î»µ÷½âËÑË÷Ч¹û¶øË𺦾ºÕùµÐÊÖµÄÀûÒæ£¬£¬£¬£¬£¬·£¿£¿£¿£¿£¿î27.2ÒÚÃÀÔª£» £»£»£»£»2019Äê3ÔÂÅ·ÃËίԱ»áÓÖÒòÆäÀÄÓÃÊг¡Ö§Åäְλ·£¿£¿£¿£¿£¿î17ÒÚÃÀÔª¡£¡£¡£¡£¡£


Ô­ÎÄÁ´½Ó£º

https://www.bleepingcomputer.com/news/google/google-fined-220-million-for-abusing-dominant-role-in-online-ads/


3.MicrosoftÇå¾²¸üУ¬£¬£¬£¬£¬ÐÞ¸´7¸ö0dayÔÚÄÚµÄ50¸öÎó²î


3.jpg


MicrosoftÐû²¼ÁË6Ô·ݵÄÖܶþÇå¾²¸üУ¬£¬£¬£¬£¬ÐÞ¸´Á˰üÀ¨7¸ö0dayÔÚÄÚµÄ50¸öÎó²î¡£¡£¡£¡£¡£´Ë´ÎÐÞ¸´µÄ0day°üÀ¨WindowsÄÚºËÐÅϢй¶Îó²î£¨CVE-2021-31955£©¡¢Windows NTFSÌáȨÎó²î£¨CVE-2021-31956£©¡¢Microsoft DWMÌáȨÎó²î£¨CVE-2021-33739£©¡¢Windows MSHTMLƽ̨RCEÎó²î£¨CVE-2021-33742£©¡¢MicrosoftÔöÇ¿ÐͼÓÃÜÌṩ³ÌÐòÌáȨÎó²î£¨CVE-2021-31199ºÍCVE-2021-31201£©ºÍWindowsÔ¶³Ì×ÀÃæÐ§À;ܾøÐ§ÀÍÎó²î£¨CVE-2021-31968£©¡£¡£¡£¡£¡£ÆäÖУ¬£¬£¬£¬£¬Ç°6¸ö0dayÒÑÔÚÒÑÍù±»Ê¹Óùý¡£¡£¡£¡£¡£


Ô­ÎÄÁ´½Ó£º

https://www.bleepingcomputer.com/news/microsoft/microsoft-june-2021-patch-tuesday-fixes-6-exploited-zero-days-50-flaws/


4.ÃÀ¹ú¾ü³µÖÆÔìÉÌNavistar³ÆÆäÔâµ½¹¥»÷£¬£¬£¬£¬£¬²¿·ÖÊý¾Ýй¶


4.jpg


ÃÀ¹ú¿¨³µºÍ¾üÓóµÁ¾ÖÆÔìÉÌNavistar International Corporation³ÆÆäÔâµ½¹¥»÷£¬£¬£¬£¬£¬²¿·ÖÊý¾Ýй¶¡£¡£¡£¡£¡£¸Ã¹«Ë¾ÌåÏÖÆäÔÚ2021Äê5ÔÂ20ÈÕ·¢Ã÷´Ë´ÎÊÂÎñ£¬£¬£¬£¬£¬²¢ÓÚ5ÔÂ31ÈÕÊÕµ½ÁËÒ»·ÝÉùÃ÷³ÆÄ³Ð©Êý¾ÝÒѱ»ÇÔÈ¡¡£¡£¡£¡£¡£µ±±»Îʼ°ÊÇ·ñÓëÀÕË÷¹¥»÷ÓйØÊ±£¬£¬£¬£¬£¬¸Ã¹«Ë¾½²»°È˳ÆÏÖÔÚÊÓ²ìÕýÔÚ¾ÙÐÐÖУ¬£¬£¬£¬£¬Ã»Óиü¶àϸ½Ú¿ÉÒÔ·ÖÏí¡£¡£¡£¡£¡£¸Ã¹«Ë¾»¹ÌåÏÖ£¬£¬£¬£¬£¬ÆäÔËÓª²¢Î´Êܵ½Ó°Ï죬£¬£¬£¬£¬ITϵͳҲÒÑÕý³£ÔËÐС£¡£¡£¡£¡£


Ô­ÎÄÁ´½Ó£º

https://www.securityweek.com/military-vehicles-maker-navistar-reports-data-theft-cyberattack


5.Unit42Åû¶Ê׸öÕë¶ÔWindowsÈÝÆ÷µÄ¶ñÒâÈí¼þSiloscape


5.jpg


Unit42Åû¶ÁËÊ׸öÕë¶ÔWindowsÈÝÆ÷µÄ¶ñÒâÈí¼þSiloscape¡£¡£¡£¡£¡£SiloscapeÊÇÒ»ÖÖ¾­Óɸ߶ȻìÏýµÄ¶ñÒâÈí¼þ£¬£¬£¬£¬£¬¿ÉÒÔͨ¹ýWindowsÈÝÆ÷Õë¶ÔKubernetes¼¯Èº£¬£¬£¬£¬£¬ÆäÖ÷ҪĿµÄÊÇÔÚÉèÖò»µ±µÄKubernetes¼¯ÈºÖÐÖ´ÐкóÃÅ£¬£¬£¬£¬£¬ÔËÐжñÒâÈÝÆ÷¡£¡£¡£¡£¡£¸Ã¶ñÒâÈí¼þʹÓÃTorÊðÀíºÍ.onionÓòÄäÃûÅþÁ¬µ½ÆäC2£¬£¬£¬£¬£¬Ñо¿Ö°Ô±Ïë·¨»á¼ûÁËÕą̂ЧÀÍÆ÷£¬£¬£¬£¬£¬È·¶¨ÁË23¸öSiloscapeµÄÊܺ¦Õß¡£¡£¡£¡£¡£±ðµÄ£¬£¬£¬£¬£¬»¹·¢Ã÷¸ÃЧÀÍÆ÷ÍйÜÁË313¸öÓû§£¬£¬£¬£¬£¬ÕâÒâζ×ÅSiloscapeÖ»ÊǸü´ó¹æÄ£»î¶¯µÄһС²¿·Ö¡£¡£¡£¡£¡£


Ô­ÎÄÁ´½Ó£º

https://unit42.paloaltonetworks.com/siloscape/


6.KasperskyÐû²¼ÓйضñÒâÈí¼þGootkitµÄÆÊÎö±¨¸æ


6.jpg


KasperskyÐû²¼ÓйضñÒâÈí¼þGootkitµÄÆÊÎö±¨¸æ¡£¡£¡£¡£¡£GootkitÊÇÖØ´óµÄÒøÐжñÒâÈí¼þ£¬£¬£¬£¬£¬ÓÉDoctor WebÓÚ2014ÄêÊ״η¢Ã÷¡£¡£¡£¡£¡£GootkitÄܹ»´Óä¯ÀÀÆ÷ÇÔÈ¡Êý¾Ý¡¢Ö´ÐÐä¯ÀÀÆ÷ÖÐÐÄÈ˹¥»÷¡¢¼Í¼¼üÅÌÊäÈëÄÚÈÝ¡¢½ØÈ¡ÆÁÄ»½ØÍ¼ºÍÐí¶àÆäËû¶ñÒâ²Ù×÷¡£¡£¡£¡£¡£2019Ä꣬£¬£¬£¬£¬GootkitÔÚ±¬·¢Êý¾Ýй¶ºó×èÖ¹ÔËÓª£¬£¬£¬£¬£¬µ«×Ô2020Äê11ÔÂÒÔÀ´ÔٴλîÔ¾¡£¡£¡£¡£¡£GootkitµÄÊܺ¦ÕßÖ÷ÒªÂþÑÜÔڵ¹úºÍÒâ´óÀûµÈÅ·ÓѰî¼Ò¡£¡£¡£¡£¡£


Ô­ÎÄÁ´½Ó£º

https://securelist.com/gootkit-the-cautious-trojan/102731/