ŦԼͨ¹ýÐÂÊý¾Ýй¶֪ͨ·¨°¸ £¬Êý¾Ýî¿ÏµÔÙ´ÎÉý¼¶£»2019ÄêÉϰëÄêÁè¼Ý2300ÍòÕÅÐÅÓÿ¨ÔÚ°µÍø³öÊÛ

Ðû²¼Ê±¼ä 2019-07-29
1¡¢Å¦Ô¼Í¨¹ýÐÂÊý¾Ýй¶֪ͨ·¨°¸ £¬Êý¾Ýî¿ÏµÔÙ´ÎÉý¼¶


×ðÁú¿­Ê± - ÈËÉú¾ÍÊDz«!


ŦԼÖÝÖݳ¤Andrew M. Cuomo¿ËÈÕÇ©ÊðÁËÒ»ÏîеÄÊý¾Ýй¶֪ͨ·¨°¸ £¬¸Ã·¨°¸µÄÃû³ÆÎª¡°×èÖ¹ºÚ¿Í¼°Ë¢Ðµç×ÓÊý¾ÝÇå¾²¡± £¬¼´SHIELD·¨°¸ £¬Ö¼ÔÚ±£»¤Å¦Ô¼¹«ÃñµÄÒþ˽Êý¾Ý²¢ÔöÇ¿¸ÃÖݵÄÊý¾Ýй¶Õþ²ß¡£¸Ã·¨°¸À©´óÁËСÎÒ˽¼ÒÐÅÏ¢µÄ¹æÄ£ £¬½«ÉúÎïʶ±ðÐÅÏ¢¡¢µç×ÓÓʼþµØÖ·¼°ÃÜÂë¡¢Çå¾²ÎÊÌâ¼°ÃÕµ×ÁÐÈëÆäÖС£¸Ã·¨°¸»¹ÔöÌíÁËÃñÊ´¦·Ö £¬²¢½«Í¨ÖªÒªÇóÓ¦ÓÃÓÚÈκÎÓµÓÐŦԼ¹«ÃñÒþ˽ÐÅÏ¢µÄСÎÒ˽¼Ò»òʵÌå £¬¶ø²»µ«½öÊÇÔÚŦԼÖÝ¿ªÕ¹ÓªÒµµÄʵÌå¡£¸Ã·¨°¸»¹½«ÌṩÉí·Ý͵ÇÔ±£»¤·þÎñдÈëÖ´·¨ £¬ÒªÇóCRAÔÚ±¬·¢Éæ¼°Éç»áÇå¾²ºÅÂëµÄÊý¾Ýй¶ºó±ØÐèÏòÏûºÄÕßÌṩºÏÀíµÄ±£»¤·þÎñ¡£


Ô­ÎÄÁ´½Ó£ºhttps://www.bleepingcomputer.com/news/security/new-york-passes-law-to-update-data-breach-notification-requirements/


2¡¢°Ä´óÀûÑǹúÃñÒøÐÐÒòÈËΪʧÎóй¶1.3Íò¿Í»§ÐÅÏ¢


×ðÁú¿­Ê± - ÈËÉú¾ÍÊDz«!


°Ä´óÀûÑǹúÃñÒøÐУ¨NAB£©ÌåÏÖÓÐ1.3ÍòÃû¿Í»§µÄÐÅÏ¢Ô⵽й¶ £¬ÆäÔµ¹ÊÔ­ÓÉÊÇËûÃǵÄСÎÒ˽¼ÒÊý¾Ýδ¾­ÔÊÐí±»ÉÏ´«ÖÁÁ½¼ÒÊý¾Ý·þÎñ¹«Ë¾¡£NABÊ×ϯÊý¾Ý¹ÙGlenda CrispÔÚÒ»·ÝÉùÃ÷ÖÐÌåÏÖ £¬ÕâÒ»ÊÂÎñÊÇÓÉÈËΪʧÎóµ¼Ö嵀 £¬¸ÃÐÐΪΥ·´ÁËNABµÄÊý¾ÝÇå¾²Õþ²ß¡£Ð¹Â¶µÄÊý¾Ý°üÀ¨¿Í»§µÄÐÕÃû¡¢³öÉúÈÕÆÚ¡¢ÁªÏµ·½·¨ÒÔ¼°Éí·ÝÖ¤ºÅÂë¡£¸ÃÒøÐÐÔö²¹³ÆÃ»ÓеǼƾ֤»òÃÜÂëй¶ £¬²¢ÇÒûÓÐÖ¤¾ÝÅú×¢ÈκÎÐÅÏ¢±»¸´ÖÆ»ò½øÒ»²½Åû¶¡£


Ô­ÎÄÁ´½Ó£ºhttps://www.reuters.com/article/us-nab-cyber/australias-nab-says-13000-customers-personal-data-breached-idUSKCN1UL16P


3¡¢¼ÓÄô󰲼òªʡÔâÀÕË÷Èí¼þ¹¥»÷ £¬Õþ¸®¾Ü¾øÖ§¸¶Êê½ð    


×ðÁú¿­Ê± - ÈËÉú¾ÍÊDz«!


¼ÓÄô󰲼òªʡ¶«²¿ÊÐÇøÔÚ6ÔÂ30ÈÕÔâµ½ÀÕË÷Èí¼þ¹¥»÷ £¬ÊÐÕþ·þÎñÊܵ½Ó°Ïì¡£¸ÃÊеÄÅÌËã»úϵͳ±»²»·¨»á¼û £¬²¢Ñ¬È¾ÁËÀÕË÷Èí¼þ £¬ÊÜÓ°ÏìµÄϵͳ°üÀ¨ÊÐÕþÕþ¸®µÄµç×ÓÓʼþϵͳµÈ¡£¹¥»÷ÕßÒªÇóÒÔ±ÈÌØ±ÒÖ§¸¶7000µ½10000ÃÀÔªµÄÊê½ð £¬µ«ÊÐÕþÕþ¸®¾Ü¾øÁËÕâÒ»ÒªÇó £¬²¢×ÔÐоÙÐÐÊý¾Ý»Ö¸´¡£ÔÚÊÂÎñ±¬·¢¼¸Ììºó £¬³ýµç×ÓÓʼþϵͳÍâ £¬ËùÓÐÆäËüµÄ¶¼»á·þÎñ¶¼Òѻָ´Õý³£¡£ÊÐÕþ¸®ÒÑÏò¾¯·½ÒÔ¼°°²¼òªʡÐÅÏ¢ºÍÒþ˽רԱ±¨¸æÁË´ËÊÂÎñ £¬Ä¿½ñÊÓ²ìÈÔÔÚ¾ÙÐÐÖС£


Ô­ÎÄÁ´½Ó£ºhttps://www.spamfighter.com/News-22325-Eastern-Ontario-municipality-suffered-from-a-ransomware-attack.htm


4¡¢SynologyÖÒÑÔÕë¶ÔÆäNAS×°±¸µÄ±©Á¦ÆÆ½â¹¥»÷


×ðÁú¿­Ê± - ÈËÉú¾ÍÊDz«!


Synology£¨ÈºêÍ£©ÏòÆäNAS×°±¸µÄÓû§·¢³öÖÒÑÔ £¬¹¥»÷ÕßÕýÔÚʹÓñ©Á¦¹¥»÷£¨×ֵ乥»÷£©ÆÆ½âÓû§µÄ¹ÜÀíԱƾ֤ £¬²¢Í¨¹ýÀÕË÷Èí¼þeCh0raix¼ÓÃÜÓû§µÄÊý¾Ý¡£¸Ã¹¥»÷Ô˶¯ÓÚ7ÔÂ19ÈÕÆô¶¯ £¬SynologyÁ¬Ã¦Í¨ÖªÁËTWCERT/CCºÍCERT/CC £¬ÒÔÅäºÏ½â¾ö´ËÊÂÎñ¡£SynologyÇå¾²ÊÂÎñÏìÓ¦ÍŶӵÄ˾ÀíKen LeeÌåÏÖÕâÊÇÒ»´ÎÓÐ×éÖ¯µÄ¹¥»÷ £¬¹¥»÷ÕßʹÓý©Ê¬ÍøÂçµÄµØÖ·À´Òþ²ØÆäÕæÕýµÄÔ´IP¡£¸Ã¹«Ë¾½¨Òé¿Í»§Ê¹ÓÃSynologyµÄÍøÂçºÍÕÊ»§¹ÜÀíÉèÖÃÀ´±ÜÃâ»ùÓÚ»¥ÁªÍøµÄ¹¥»÷ £¬°üÀ¨ÆôÓ÷À»ðǽ¡¢½öÔÊÐí¹«¹²¶Ë¿ÚÌṩ»ù±¾·þÎñÒÔ¼°ÆôÓÃÁ½²½ÑéÖ¤¡£


Ô­ÎÄÁ´½Ó£ºhttps://www.zdnet.com/article/ransomware-crooks-hit-synology-nas-devices-with-brute-force-password-attacks/


5¡¢15Äêºóµç×ÓÓʼþÈ䳿MyDoomÔÚÈÔÔÚÈö²¥


×ðÁú¿­Ê± - ÈËÉú¾ÍÊDz«!


ƾ֤CylanceÑо¿ÍŶӵįÊÎö £¬µç×ÓÓʼþÈ䳿MyDoomÔÚ½µÉú15ÄêºóÈÔÔÚÍøÉÏÈö²¥¡£MydoomÖÁÉÙ´Ó2004Äê×îÏÈ»îÔ¾ £¬ÆäÖ÷ÒªÈö²¥ÒªÁìÊÇÔÚÊÜѬȾµÄϵͳÉÏÍøÂçµç×ÓÓʼþµØÖ·²¢Í¨¹ý¸½¼þ¾ÙÐз¢ËÍ¡£MyDoomÔÚÒÑÍù¼¸ÄêÖмá³ÖÏà¶ÔÎÈ¹Ì £¬ÔÚ2015ÄêÖÁ2018Äêʱ´úMyDoomÔÚPalo Alto Networks¼ì²âµ½µÄËùÓжñÒâµç×ÓÓʼþÖÐÕ¼1.1£¥ £¬Õ¼¶ñÒ⸽¼þÖÖ±ðÖеÄ21.4£¥¡£ÖйúºÍÃÀ¹úÊÇMyDoomµÄÖ÷ÒªÑ¬È¾Çø £¬¿Æ¼¼¹«Ë¾ÊÇ×î³£¼ûµÄÄ¿µÄÐÐÒµ¡£


Ô­ÎÄÁ´½Ó£ºhttps://www.bleepingcomputer.com/news/security/notorious-mydoom-worm-still-on-autopilot-after-15-years/


6¡¢2019ÄêÉϰëÄêÁè¼Ý2300ÍòÕÅÐÅÓÿ¨ÔÚ°µÍø³öÊÛ


×ðÁú¿­Ê± - ÈËÉú¾ÍÊDz«!


ƾ֤SixgillÐû²¼µÄ°µÍø½ðÈÚڲƭ±¨¸æ £¬ÔÚ2019ÄêÉϰëÄê¹²ÓÐÁè¼Ý2300ÍòÕű»µÁÐÅÓÿ¨ÔÚ°µÍøÉϳöÊÛ £¬ÆäÖÐÁè¼Ý1500ÍòÕÅÐÅÓÿ¨ÊÇÃÀ¹ú¿¯ÐÐµÄ £¬¶øÆäËü¹ú¼ÒµÄ±»µÁ¿¨ºÅ¾ùСÓÚ10%¡£À´×Ô¶íÂÞ˹µÄ±»µÁÐÅÓÿ¨ÊýÄ¿×îÉÙ £¬Õ¼±ÈÏÕЩΪ0£¨2300ÍòÖÐÖ»ÓÐ316ÕÅ¿¨£©¡£57%µÄ±»µÁ¼Í¼ÓëVisa¿¨ÓÐ¹Ø £¬Æä´ÎÊÇMastercard £¬Õ¼29% £¬AMEXÕ¼12%¡£·¸·¨·Ö×Ó¸üÇàíù°üÀ¨CVVºÅÂ루65£¥£©¶ø²»ÊÇÊý¾Ýת´¢£¨35£¥£©µÄ¼Í¼¡£°µÍøÉϱ»µÁÐÅÓÿ¨µÄ¼ÛÇ®×îµÍΪ5ÃÀÔª¡£


Ô­ÎÄÁ´½Ó£ºhttps://securityaffairs.co/wordpress/88990/deep-web/payment-card-data-dark-web.html