《维他命》逐日安全简讯20181223

颁布功夫 2018-12-23
【安全播报】


钻研人员颁布用于创建Facebook蠕虫的PoC代码

https://www.zdnet.com/article/researcher-publishes-proof-of-concept-code-for-creating-facebook-worm/


印度授予10个机构拦截、监控和解密公民数据的权势

https://www.zdnet.com/article/india-authorizes-10-agencies-to-intercept-monitor-and-decrypt-citizens-data/


【勒索软件】


钻研人员颁布勒索软件Stupid的解密工具StupidDecryptor

https://www.bleepingcomputer.com/ransomware/decryptor/how-to-decrypt-the-stupid-ransomware-family-with-stupiddecrypter/


【分析汇报】


FireEye颁布关于APT33恶意攻击活动的分析汇报

https://www.fireeye.com/blog/threat-research/2018/12/overruled-containing-a-potentially-destructive-adversary.html


【缝隙补丁】


思科建复自适应安全设备（ASA）中的一个提权缝隙

https://www.securityweek.com/cisco-patches-privilege-escalation-vulnerability-adaptive-security-appliance


申明：本资讯由GA黄金甲维他命安全幼组翻译和整顿