Aqua发现利用Bitbucket和Docker Hub的挖矿活动 ；美国NSA和DHS结合颁布有关PDNS的指南

颁布功夫 2021-03-07

【威胁谍报】


Aqua发现利用Bitbucket和Docker Hub的挖矿活动

https://www.hackread.com/threat-actors-hijack-bitbucket-docker-hub-monero-mining/


针对D-Link和IoT设备的Gafgyt新变种依赖Tor通讯

https://threatpost.com/d-link-iot-tor-gafgyt-variant/164529/


FINRA忠告利用审计警报针对经纪公司的垂钓攻击

https://www.bleepingcomputer.com/news/security/ongoing-phishing-attacks-target-us-brokers-with-fake-finra-audits/


【攻击事务】


美国联国机构的Exchange服务器遭到0day攻击

https://www.zdnet.com/article/microsoft-exchange-zero-day-vulnerabilities-exploited-in-attacks-against-us-local-govts-university/


【安全指南】


美国NSA和DHS结合颁布有关PDNS的指南

https://www.securityweek.com/nsa-dhs-issue-guidance-protective-dns