2019 Q2 CTNT汇报，勒索软件同比飙升365% ；Steam曝提权0day，影响超过1亿Windows用户

颁布功夫 2019-08-10

【安全汇报】


Malwarebytes颁布第二季度CTNT汇报，勒索软件同比飙升365%

https://blog.malwarebytes.com/reports/2019/08/labs-quarterly-report-finds-ransomware's-gone-rampant-against-businesses/


【安全缝隙】


Steam曝提权0day，影响超过1亿Windows用户
https://www.bleepingcomputer.com/news/security/steam-zero-day-vulnerability-affects-over-100-million-users/


Avaya VoIP电话存在超过10年的缝隙，可导致DoS及RCE

https://www.bleepingcomputer.com/news/security/avaya-voip-phones-harbored-10-year-old-vulnerability/


【攻击事务】


新西兰航空公司遭垂钓攻击，近7万客户的隐衷泄露
https://www.nzherald.co.nz/business/news/article.cfm?c_id=3&objectid=12257157


伦敦交通局官网遭撞库攻击，临时终场接见其Oyster系统

https://www.infosecurity-magazine.com/news/tfl-suspends-oyster-site/