Authentic Jobs及Sonic Jobs泄露25万求职者信息；Mission Health被植入Magecart

颁布功夫 2019-10-20

【数据泄露】


Authentic Jobs及Sonic Jobs意表泄露25万求职者信息

https://www.infosecurity-magazine.com/news/personal-data-of-200k-jobseekers/


【安全播报】


数百个网站因Laravel配置谬误导致易受劫持攻击

https://threatpost.com/trump-campaign-website-allowed-email-hijack/149278/


Pitney Bowes确认其系统中断是由勒索软件Ryuk导致

https://securityaffairs.co/wordpress/92641/cyber-crime/pitney-bowes-ryuk-ransomware.html



Mission Health网站从2016年起就被植入Magecart

https://www.zdnet.com/article/mission-health-store-hijack-went-undetected-for-years/


【缝隙补丁】


Kubernetes建复可导致身份验证绕过及DoS的两个缝隙
https://threatpost.com/kubernetes-bugs-authentication-bypass-dos/149265/