Firefox颁布安全更新，建复两个UAF 0day；Kinsing挖矿活动重要攻击配置谬误的Docker API

颁布功夫 2020-04-05

【缝隙补丁】


Firefox颁布安全更新，建复两个UAF 0day

https://www.zdnet.com/article/firefox-gets-fixes-for-two-zero-days-exploited-in-the-wild/


【数据泄露】


马耳他33.7万条选民信息在网上泄露

https://timesofmalta.com/articles/view/massive-data-leak-leaves-more-than-377000-voting-records-exposed.782483


钻研人员发现8000多个Redis云事俘在网上露出

https://blog.trendmicro.com/trendlabs-security-intelligence/more-than-8000-unsecured-redis-instances-found-in-the-cloud/


【威胁谍报】


黑客利用垃圾邮件分发GuLoader和NetWire RAT

https://unit42.paloaltonetworks.com/guloader-installing-netwire-rat/


Kinsing挖矿活动重要攻击配置谬误的Docker API

https://threatpost.com/self-propagating-malware-docker-ports/154453/