Microsoft披露NOBELIUM的大规模垃圾邮件攻击活动；黑客利用富士通ProjectWEB攻击日本多个当局机构

颁布功夫 2021-05-29

【威胁谍报】


Microsoft披露NOBELIUM的大规模垃圾邮件攻击活动

https://www.microsoft.com/security/blog/2021/05/27/new-sophisticated-email-based-attack-from-nobelium/


黑客利用富士通ProjectWEB攻击日本多个当局机构

https://securityaffairs.co/wordpress/118318/data-breach/fujitsu-projectweb-hack.html


FBI称某APT组织利用Fortinet缝隙攻击美国处所当局

https://securityaffairs.co/wordpress/118338/apt/fortinet-vpn-us-municipal-government.html


黑客通过新的垂钓活动BazarCall分发BazarLoader

https://www.bleepingcomputer.com/news/security/new-bazaflix-attack-pushes-bazarloader-malware-via-fake-movie-site/


【缝隙补丁】


惠普建复去年12月披露的HPE SIM中的代码执行0day

https://www.bleepingcomputer.com/news/security/hpe-fixes-critical-zero-day-vulnerability-disclosed-in-december/