《维他命》逐日安全简讯20181007

颁布功夫 2018-10-07

【攻击事务】


Apollo公司遭黑客攻击，超过2亿条联系人纪录被窃


https://securityaffairs.co/wordpress/76878/data-breach/apollo-data-breach.html


支付服务Click2Gov遭黑客入侵，部门客户的信誉卡信息被窃


https://news.softpedia.com/news/city-of-st-petersburg-s-click2gov-payment-system-breached-523077.shtml


【安全缝隙】


钻研人员披露索尼智能电视中的3个安全缝隙


https://www.fortinet.com/blog/threat-research/sony-smart-tv-exploit-inside-view-hijacking-your-living-room.html


【缝隙补丁】


VMware颁布安全更新，建复一个SAML认证绕过缝隙


https://news.softpedia.com/news/vmware-releases-patches-for-critical-a-w-console-auth-bypass-vulnerability-523079.shtml


D-Link颁布Central WiFiManager安全更新，建复多个RCE和XSS缝隙


https://www.securityweek.com/d-link-patches-code-execution-xss-flaws-management-tool

申明：本资讯由GA黄金甲维他命安全幼组翻译和整顿