《维他命》逐日安全简讯20181013

颁布功夫 2018-10-13

【威胁谍报】


五眼同盟颁布关于五种公开可用的黑客工具的结合警报

https://www.us-cert.gov/ncas/alerts/AA18-284A


冰岛遭到史上最大规模的针对性垂钓邮件攻击

https://www.bleepingcomputer.com/news/security/largest-cyber-attack-against-iceland-driven-by-fareit-remcos-combo/


IBM发现利用Drupalgeddon 2.0缝隙的新一波网络攻击

https://securityintelligence.com/threat-actors-prey-on-drupalgeddon-vulnerability-to-mass-compromise-websites-and-underlying-servers/


【安全缝隙】


钻研人员披露Edge RCE缝隙（CVE-2018-8495）的PoC
https://www.bleepingcomputer.com/news/security/poc-code-available-for-microsoft-edge-remote-code-execution-bug/


【数据泄露】


健身利用FitMetrix的数百万用户信息泄露

https://threatpost.com/fitmetrix-exposes-millions-of-customer-details-accessed-by-criminals/138241/


申明：本资讯由GA黄金甲维他命安全幼组翻译和整顿