微软颁布有关Solorigate攻击活动的分析汇报；NSA颁布黑客伪造身份验证接见云平台的安全征询

颁布功夫 2020-12-20

【分析汇报】


微软颁布有关Solorigate攻击活动的分析汇报

https://www.microsoft.com/security/blog/2020/12/18/analyzing-solorigate-the-compromised-dll-file-that-started-a-sophisticated-cyberattack-and-how-microsoft-defender-helps-protect/


NSA颁布黑客伪造身份验证接见云平台的安全征询

https://us-cert.cisa.gov/ncas/current-activity/2020/12/17/nsa-releases-cybersecurity-advisory-detecting-abuse-authentication


【威胁谍报】


黑客利用伪造的Cyberpunk游戏传布CoderWare

https://securityaffairs.co/wordpress/112412/malware/fake-cyberpunk-2077-spreads-ransomware.html


【数据泄露】


CRM因Azure Blob配置谬误泄露50多万个文件

https://www.theregister.com/2020/12/18/probase_unsecured_azure_blob/


People's Energy遭到攻击，27万用户的信息泄露

https://www.bbc.com/news/technology-55350995