西门子颁布《能源行业网络安全：事务响应手册》；NordVPN API缝隙允许攻击者查看用户支付信息

颁布功夫 2020-03-08

【安全播报】


西门子颁布《能源行业网络安全：事务响应手册》

https://new.siemens.com/us/en/company/press/siemens-stories/energy/simulating-a-cyberattack-on-the-energy-industry-a-playbook-for-incident-response.html


【缝隙补丁】


Zoho建复ManageEngine Desktop Central中的RCE 0day

https://www.bleepingcomputer.com/news/security/zoho-fixes-no-auth-rce-zero-day-in-manageengine-desktop-central/


NordVPN API缝隙允许攻击者查看用户支付信息

https://www.theregister.co.uk/2020/03/06/nordvpn_no_auth_needed_view_user_payments/


【攻击事务】


Koodo Mobile系统遭黑客攻击，被盗数据已在网上销售

https://www.bleepingcomputer.com/news/security/telus-owned-koodo-mobile-announces-data-breach-stolen-info-for-sale/


【威胁谍报】


TrickBot利用虚伪WHO冠状病毒邮件分发，针对意大利

https://www.bleepingcomputer.com/news/security/trickbot-malware-targets-italy-in-fake-who-coronavirus-emails/