GoDaddy删除15000个与诓骗有关域名；WordPress插件文件上传缝隙；索尼智能电视信息泄露缝隙

颁布功夫 2019-04-27

【威胁谍报】


GoDaddy删除超过15000个与诓骗活动有关的子域名
https://cyware.com/news/godaddy-shuts-down-over-15000-subdomains-used-for-affiliate-marketing-spam-campaigns-fbabc1e8
新垂钓攻击要求用户上传手持身份证/驾照的自拍照
https://www.bleepingcomputer.com/news/security/devious-chase-bank-phishing-scam-asks-for-selfies/

【安全缝隙】


WordPress插件WooCommerce未建补的文件上传缝隙
https://thehackernews.com/2019/04/wordpress-woocommerce-security.html
索尼智能电视信息泄露缝隙，可导致Wi-Fi密码及照片泄露

https://cyware.com/news/android-based-sony-smart-tvs-expose-wi-fi-passwords-and-stored-images-due-to-security-bugs-bf5c0cec


【攻击事务】


克利夫兰市机场遭勒索软件攻击，导致机场显示屏黑屏
https://www.scmagazine.com/home/security-news/ransomware-disables-cleveland-airports-email-systems-information-screens/