思科建复IOS XE和Webex产品中的RCE和CSRF缝隙；纽约奥尔巴尼国际机场习染勒索软件Sodinokibi

颁布功夫 2020-01-12



【攻击事务】


纽约奥尔巴尼国际机场习染勒索软件Sodinokibi

https://www.bleepingcomputer.com/news/security/sodinikibi-ransomware-hits-new-york-airport-systems/


澳大利亚山火捐款网站习染Magecart恶意剧本

https://www.bleepingcomputer.com/news/security/australia-bushfire-donors-affected-by-credit-card-skimming-attack/


【威胁谍报】


Maze攻击者颁布Southwire公司的14GB被盗文件

https://www.bleepingcomputer.com/news/security/maze-ransomware-publishes-14gb-of-stolen-southwire-files/


【缝隙补丁】


思科建复IOS XE和Webex产品中的RCE和CSRF缝隙

https://threatpost.com/cisco-webex-bug-allows-remote-code-execution/151724/


Broadcom电缆调造解调器受Cable Haunt缝隙影响

https://www.zdnet.com/article/hundreds-of-millions-of-cable-modems-are-vulnerable-to-new-cable-haunt-vulnerability/