Facebook披露伊朗Tortoiseshell攻击美国国防机构；钻研人员发现HelloKitty针对ESXi虚构机的攻击活动

颁布功夫 2021-07-17

【威胁谍报】


Facebook披露伊朗Tortoiseshell攻击美国国防机构

https://www.securityweek.com/facebook-iranian-hackers-target-military-aerospace-entities-us


Radware称DragonForce对以色列提议屡次大规模攻击

https://therecord.media/new-dragonforce-hacktivist-group-causes-havoc-in-israel/


钻研人员发现HelloKitty针对ESXi虚构机的攻击活动

https://www.bleepingcomputer.com/news/security/linux-version-of-hellokitty-ransomware-targets-vmware-esxi-servers/


【缝隙补丁】


WooCommerce垂危更新建复已被利用的SQL注入0day

https://threatpost.com/zero-day-attacks-woocommerce-databases/167846/


【安全指南】


CISA颁布CISA Insights：MSP和中幼型企业指南

https://us-cert.cisa.gov/ncas/current-activity/2021/07/14/cisa-insights-guidance-msps-and-small-and-mid-sized-businesses