·É»úÖÆÔìÉÌBombardier³ÆÆäÊý¾ÝÒÑÔÚClopÍøÕ¾ÉϹûÕæ£»£»£»£»£»£»ÃÀÁª´¢µÄITϵͳ¹ÊÕϵ¼ÖÂÉúÒâЧÀÍÔÝʱÖÐÖ¹£¬£¬£¬ £¬£¬£¬£¬Ôµ¹ÊÔ­ÓÉδ֪

Ðû²¼Ê±¼ä 2021-02-25

1.·É»úÖÆÔìÉÌBombardier³ÆÆäÊý¾ÝÒÑÔÚClopÍøÕ¾ÉϹûÕæ


1.jpg


¼ÓÄôó·É»úÖÆÔìÉÌBombardier³ÆÆäÊý¾ÝÒÑÔÚClopÍøÕ¾ÉϹûÕæ¡£¡£¡£¡£¡£ ¡£¸Ã¹«Ë¾ÔÚͨ¸æÖÐÌåÏÖ£¬£¬£¬ £¬£¬£¬£¬¾­³õ³ÌÐò²é£¬£¬£¬ £¬£¬£¬£¬ºÚ¿ÍʹÓÃÁ˵ÚÈý·½Îļþ´«ÊäÓ¦ÓÃÖеÄÎó²îÀ´»á¼ûºÍÇÔÈ¡Êý¾Ý¡£¡£¡£¡£¡£ ¡£Ö»¹Ü²¢Ã»ÓÐÏêϸָ³ö¸Ã×°±¸µÄÃû³Æ£¬£¬£¬ £¬£¬£¬£¬µ«¾ÝÍÆ²âºÜ¿ÉÄÜÊÇÖ¸µÄAccellion FTA¡£¡£¡£¡£¡£ ¡£±»µÁÊý¾ÝÒÑÔÚÀÕË÷ÍÅ»ïClopµÄÊý¾ÝÐ¹Â¶ÍøÕ¾¹ûÕæ£¬£¬£¬ £¬£¬£¬£¬°üÀ¨BombardierÖÖÖÖ·É»úºÍ·É»úÁã¼þµÄÉè¼ÆÎļþ£¬£¬£¬ £¬£¬£¬£¬²¢Ã»ÓÐÈκÎСÎÒ˽¼ÒÊý¾Ýй¶¡£¡£¡£¡£¡£ ¡£


Ô­ÎÄÁ´½Ó£º

https://www.zdnet.com/article/airplane-maker-bombardier-data-posted-on-ransomware-leak-site-following-fta-hack/


2.ÃÀÁª´¢µÄITϵͳ¹ÊÕϵ¼ÖÂÉúÒâЧÀÍÔÝʱÖÐÖ¹£¬£¬£¬ £¬£¬£¬£¬Ôµ¹ÊÔ­ÓÉδ֪


2.jpg


2ÔÂ24ÈÕÃÀÁª´¢£¨Fed£©µÄITϵͳ±¬·¢ÑÏÖØµÄ¹ÊÕÏ£¬£¬£¬ £¬£¬£¬£¬µ¼Öµç»ãµÈÉúÒâЧÀÍÖÐÖ¹£¬£¬£¬ £¬£¬£¬£¬ÏÖÔÚÔµ¹ÊÔ­ÓÉÈÔȻδ֪¡£¡£¡£¡£¡£ ¡£ÆäÖÐÖ¹Ó°ÏìÁ˸ÃÒøÐÐÏÕЩËùÓеĵç×ÓЧÀÍ£¬£¬£¬ £¬£¬£¬£¬°üÀ¨ÕÊ»§Ð§ÀÍ¡¢ÖÐÑëÒøÐС¢Check 21¡¢FedACH¡¢FedCash¡¢FedLine AdvantageµÈ¡£¡£¡£¡£¡£ ¡£±ðµÄ£¬£¬£¬ £¬£¬£¬£¬Ðí¶à¼ÓÃÜÇ®±ÒÉúÒâËù£¨ÀýÈçBinance£©Ò²ÌåÏÖЧÀÍÖÐÖ¹µ¼ÖÂÆäÎÞ·¨Ö´ÐÐACH´æ¿î»òÌá¿î¡£¡£¡£¡£¡£ ¡£Fed³ÆÊÇÓÉÓÚÆä²Ù×÷¹ýʧµ¼Ö´˴ÎÖÐÖ¹£¬£¬£¬ £¬£¬£¬£¬µ«²¢Î´Í¸Â¶¸ü¶àϸ½Ú£¬£¬£¬ £¬£¬£¬£¬¸ÃÎÊÌâÓÚÃÀ¹ú¶«²¿Ê±¼ä2ÔÂ24ÈÕÏÂÖç2:32±»½â¾ö¡£¡£¡£¡£¡£ ¡£


Ô­ÎÄÁ´½Ó£º

https://www.bleepingcomputer.com/news/government/federal-reserve-nationwide-outage-impacts-us-banking-system/


3.·ÒÀ¼TietoEVRYÔâµ½ÀÕË÷Èí¼þ¹¥»÷£¬£¬£¬ £¬£¬£¬£¬¿Í»§Ð§ÀÍÔÝʱÖÐÖ¹


3.jpg


·ÒÀ¼ITЧÀ͹«Ë¾TietoEVRYÔâµ½ÀÕË÷Èí¼þ¹¥»÷£¬£¬£¬ £¬£¬£¬£¬¿Í»§Ð§ÀÍÔÝʱÖÐÖ¹¡£¡£¡£¡£¡£ ¡£TietoEVRYÊÇÒ»¼ÒÈí¼þ¿ª·¢ºÍITЧÀ͹«Ë¾£¬£¬£¬ £¬£¬£¬£¬ÔÚ80¸ö¹ú¼ÒºÍµØÇøÓµÓÐ24000ÃûÔ±¹¤£¬£¬£¬ £¬£¬£¬£¬2019ÄêµÄÊÕÈëΪ29.5ÒÚÅ·Ôª¡£¡£¡£¡£¡£ ¡£±¾ÖÜÒ»£¬£¬£¬ £¬£¬£¬£¬TietoEVRYµÄÁãÊÛ¡¢ÖÆÔìºÍЧÀÍÏà¹ØÐÐÒµµÄ25¸ö¿Í»§ÌåÏÖÆäÓöµ½ÁËÊÖÒÕÎÊÌ⣬£¬£¬ £¬£¬£¬£¬ØÊºóµÃÖªÕâЩÎÊÌâÊÇÓÉÀÕË÷Èí¼þ¹¥»÷ÒýÆðµÄ¡£¡£¡£¡£¡£ ¡£TietoEVRY·¢Ã÷¹¥»÷ºóÁ¬Ã¦¹Ø±ÕÁËÊÜÓ°ÏìµÄϵͳºÍЧÀÍ£¬£¬£¬ £¬£¬£¬£¬²¢ÓëµØ·½Õþ¸®¶Ô´ËÊÂÕö¿ªÊӲ졣¡£¡£¡£¡£ ¡£


Ô­ÎÄÁ´½Ó£º

https://www.bleepingcomputer.com/news/security/finnish-it-services-giant-tietoevry-discloses-ransomware-attack/


4.IBMÐû²¼Çå¾²¸üУ¬£¬£¬ £¬£¬£¬£¬ÐÞ¸´Ó°Ïì¶à¸ö²úÆ·µÄÎó²î


4.jpg


IBMÐû²¼Çå¾²¸üУ¬£¬£¬ £¬£¬£¬£¬ÐÞ¸´ÁËJava Runtime¡¢Planning Analytics WorkspaceºÍKenexa LMSÖеÄÎó²î¡£¡£¡£¡£¡£ ¡£´Ë´ÎÐÞ¸´µÄ×îΪÑÏÖØµÄÎó²îÊÇEclipse OpenJ9ÖеĻùÓÚ¿ÍÕ»µÄ»º³åÇøÒç³öÎó²î£¨CVE-2020-27221£©£¬£¬£¬ £¬£¬£¬£¬CVSSµÃ·ÖΪ9.8£¬£¬£¬ £¬£¬£¬£¬¿É±»ÓÃÀ´Ö´ÐÐí§Òâ´úÂë»òµ¼ÖÂÓ¦ÓÃÍ߽⡣¡£¡£¡£¡£ ¡£Æä´ÎΪJava SE¿âµÄ×é¼þÖеÄCVE-2020-14782¡£¡£¡£¡£¡£ ¡£±ðµÄ£¬£¬£¬ £¬£¬£¬£¬»¹ÐÞ¸´ÁËNode.jsÖеľܾøÐ§ÀÍÎó²î£¨CVE-2020-8251£©»ººÍ³åÇøÒç³öÎó²î£¨CVE-2020-8252£©µÈÎó²î¡£¡£¡£¡£¡£ ¡£


Ô­ÎÄÁ´½Ó£º

https://securityaffairs.co/wordpress/114942/security/ibm-security-flaws.html


5.TalosÐû²¼ÓйغڿÍ×éÖ¯GamaredonµÄÆÊÎö±¨¸æ


5.jpg


Cisco TalosÐû²¼ÁËÓйغڿÍ×éÖ¯GamaredonµÄÆÊÎö±¨¸æ¡£¡£¡£¡£¡£ ¡£±¨¸æÖ¸³ö£¬£¬£¬ £¬£¬£¬£¬GamaredonÖÁÉÙ´Ó2013Äê×îÏÈ»îÔ¾£¬£¬£¬ £¬£¬£¬£¬¶àÄêÀ´Ò»Ö±ÔÚÓëÇ×¶íÂÞ˹µÄ»î¶¯ÓйØ¡£¡£¡£¡£¡£ ¡£ËüÒ»Ö±±»ÒÔΪÊÇAPT£¬£¬£¬ £¬£¬£¬£¬¿ÉÊÇÆäÌØÕ÷ÓëAPT²»·û¡£¡£¡£¡£¡£ ¡£GamaredonÍ»ÆÆÁËAPTģʽ£¬£¬£¬ £¬£¬£¬£¬Ê¹ÓÃÁË´ó×ÚµÄÓòÃû£¬£¬£¬ £¬£¬£¬£¬¿ØÖÆ×Å600¶à¸öÓò£¬£¬£¬ £¬£¬£¬£¬ºÜÉÙÓÐÔÆÔÆÖØ´ó»ù´¡¼Ü¹¹µÄAPTС×éºã¾Ã»îÔ¾¡£¡£¡£¡£¡£ ¡£±ðµÄ£¬£¬£¬ £¬£¬£¬£¬Gamaredon²»ÏñÆäËûAPT×éÖ¯Ò»ÑùÒþ²Ø×ã¼££¬£¬£¬ £¬£¬£¬£¬Ò²Ã»ÓÐÕë¶ÔÐÔµÄÄ¿µÄ£¬£¬£¬ £¬£¬£¬£¬Òò´ËÆä¸üÏñÊÇΪAPTÌṩЧÀ͵폷¨ÍŻ¡£¡£¡£¡£ ¡£


Ô­ÎÄÁ´½Ó£º

https://blog.talosintelligence.com/2021/02/gamaredonactivities.html


6.Trend MicroÐû²¼2020ÄêÍøÂçÇå¾²Ì¬ÊÆµÄ»ØÊ×±¨¸æ


6.jpg


Trend MicroÐû²¼ÁË2020ÄêÍøÂçÇå¾²Ì¬ÊÆµÄ»ØÊ×±¨¸æ¡£¡£¡£¡£¡£ ¡£±¨¸æÊÓ²ìÁË2020Äê·ºÆð²¢Ò»Á¬±£´æµÄ×îÏÔןÍÒªº¦µÄÇå¾²ÎÊÌ⣬£¬£¬ £¬£¬£¬£¬²¢ÎªÓû§ºÍ×éÖ¯ÌṩÁËÓ¦¶Ô¼±¾çת±äµÄÍþвµÄ½¨Òé¡£¡£¡£¡£¡£ ¡£ÐÂÀÕË÷Èí¼þ¼Ò×åµÄÊýÄ¿ÓÉ2019ÄêµÄ¸öÔöÌíµ½2020ÄêµÄ127¸ö£¬£¬£¬ £¬£¬£¬£¬ÆäÖ÷ÒªÕë¶ÔÕþ¸®¡¢ÒøÐС¢ÖÆÔìÒµºÍÒ½ÁƱ£½¡ÐÐÒµ¡£¡£¡£¡£¡£ ¡£±ðµÄ£¬£¬£¬ £¬£¬£¬£¬2020Äê¼ì²âµ½Áè¼Ý1600Íò¸öÓëCovid-19Ïà¹ØµÄÍþв£¬£¬£¬ £¬£¬£¬£¬ÆäÖÐÓÐ60£¥ÒÔÉÏÀ´×ÔÃÀ¹ú¡¢µÂ¹úºÍ·¨¹ú¡£¡£¡£¡£¡£ ¡£


Ô­ÎÄÁ´½Ó£º

https://www.trendmicro.com/vinfo/us/security/research-and-analysis/threat-reports/roundup/a-constant-state-of-flux-trend-micro-2020-annual-cybersecurity-report