´óÁ¿QNAP NASÉ豸Óû§³ÆÆäÔâµ½eCh0raixÀÕË÷¹¥»÷

Ðû²¼Ê±¼ä 2021-12-29

´óÁ¿QNAP NASÉ豸Óû§³ÆÆäÔâµ½eCh0raixÀÕË÷¹¥»÷


´óÁ¿QNAP NASÉ豸Óû§³ÆÆäÔâµ½eCh0raixÀÕË÷¹¥»÷.png


¾ÝýÌåÓÚ12ÔÂ27ÈÕ±¨µÀ £¬´óÁ¿QNAPÍøÂ總¼Ó´æ´¢É豸(NAS)µÄÓû§³ÂË߯äϵͳÔâµ½ÀÕË÷Èí¼þeCh0raix£¨Ò²³ÆQNAPCrypt£©µÄ¹¥»÷¡£ID ransomware serviceÊý¾ÝÏÔʾ £¬Óû§³ÂËߵĹ¥»÷ÊýÁ¿´Ó12ÔÂ19ÈÕ¿ªÊ¼Ôö¼Ó £¬²¢ÔÚ12ÔÂ26ÈÕÇ÷ÓÚÆ½»º¡£Ä¿Ç°Éв»Çå³þ×î³õµÄѬȾý½é £¬²¿ÃÅÓû§ÌåÏÖÆäδӦÓÃÕýÈ·µÄÄþ¾²¼ÆÄ± £¬ÁíÒ»²¿ÃÅÓû§Éù³Æ¹¥»÷ÓëQNAP Photo StationÖеÄ©¶´ÓйØ¡£


Ô­ÎÄÁ´½Ó£º

https://www.bleepingcomputer.com/news/security/qnap-nas-devices-hit-in-surge-of-ech0raix-ransomware-attacks/


LastPassÓû§Ô⵽ƾ֤Ìî³ä¹¥»÷µ¼ÖÂÖ÷ÃÜԿй¶


LastPassÓû§Ô⵽ƾ֤Ìî³ä¹¥»÷µ¼ÖÂÖ÷ÃÜԿй¶.png


12ÔÂ28ÈÕ £¬ÃÜÂë¹ÜÀíÓ¦ÓÃLastPassÌåÏÖ¹¥»÷Õß¶ÔÆäÓû§Ìᳫײ¿â¹¥»÷ £¬²¢ÊÔͼ·ÃÎÊËûÃǵÄÔÆÃÜÂë¿â¡£½üÈÕ £¬´óÁ¿Óû§ÊÕµ½À´×Ըù«Ë¾µÄÄþ¾²¾¯±¨ £¬³Æ¡°ÓÐÈËʹÓÃÄúµÄÖ÷ÃÜÂëʵÑé´ÓÎÒÃÇÎÞ·¨Ê¶´ËÍâÉ豸»òλÖõǼÄúµÄÕÊ»§¡±¡£LastPass³Æ´Ë´Î»î¶¯¿ªÊ¼ÓÚ±¾ÖÜÒ» £¬ËüÒѾ­×èÖ¹ÁË´óÁ¿À´×ÔÍâ¹úIPµØÖ·£¨´ó²¿ÃÅλÓÚ°ÍÎ÷£©Ê¹ÓÃÕýÈ·ÃÜÂëµÄµÇ¼ʵÑé¡£


Ô­ÎÄÁ´½Ó£º

https://therecord.media/lastpass-confirms-credential-stuffing-attack-against-some-of-its-users/


Ê©ÄÍµÂµçÆøÐÞ¸´ÆäEVlinkµç¶¯Æû³µ³äµçÕ¾Öжà¸ö©¶´


Ê©ÄÍµÂµçÆøÐÞ¸´ÆäEVlinkµç¶¯Æû³µ³äµçÕ¾Öжà¸ö©¶´.jpg


¾ÝýÌåÔÚ12ÔÂ27ÈÕ³Æ £¬Ê©ÄÍµÂµçÆøÒÑÐÞ¸´EVlinkµç¶¯Æû³µ³äµçÕ¾Öжà¸öÑÏÖØµÄ©¶´¡£¸Ã²¹¶¡Ðû²¼ÓÚ12ÔÂ14ÈÕ £¬Ó°ÏìÁËVlink City¡¢ParkingºÍSmart WallboxµÈÉ豸¡£´Ë´ÎÐÞ¸´µÄ×îΪÑÏÖØµÄ©¶´Îª·þÎñÆ÷¶ËÇëÇóαÔì©¶´£¨CVE-2021-22821£© £¬CVSSÆÀ·ÖΪ9.3£»Æä´ÎΪ¿çÕ¾½Å±¾Â©¶´£¨CVE-2021-22822£©µÈ¡£¸Ã¹«Ë¾³ÆÕâЩ©¶´¿ÉÄܵ¼Ö¾ܾø·þÎñ¹¥»÷ £¬»òÓû§ÉèÖúÍÕÊ»§±»¸Ä¶¯ºÍй¶ £¬Òò´Ë¶Ø´ÙÓû§Á¢¼´°²×°×îв¹¶¡¡£


Ô­ÎÄÁ´½Ó£º

https://www.securityweek.com/new-flaws-expose-evlink-electric-vehicle-charging-stations-remote-hacking


Windows 11±¬³öÐÂBug £¬²¿ÃÅHDRÏÔʾÆ÷³ÊÉ«·ºÆðÎÊÌâ


Windows 11±¬³öÐÂBug£¬²¿ÃÅHDRÏÔʾÆ÷³ÊÉ«·ºÆðÎÊÌâ.png


12ÔÂ27ÈÕ £¬MicrosoftÒÑÈ·ÈÏÓ°ÏìWindows 11 21H2É豸µÄÐÂBug £¬¼´Ê¹ÓÃWin32 APIÔÚ²¿ÃŸ߶¯Ì¬·¶Î§(HDR)ÏÔʾÆ÷ÉϳÊÉ«µÄÓ¦Ó÷ºÆðÎÊÌâ¡£Microsoft½âÊ͵À £¬Ä³Ð©Í¼Ïñ±à¼­Ó¦ÓÃÎÞ·¨ÔÚHDRÏÔʾÆ÷ÉÏÕýÈ·³ÊÉ« £¬ÌرðÊǰ×É«¾­³£»áÏÔʾ³ÉÁÁ»ÆÉ«»òÆäËüÑÕÉ«¡£µ±Ä³Ð©ÏÔÉ«Win32 API·µ»ØÒâÍâÐÅÏ¢»ò´íÎóʱ¾Í»á·ºÆð´ËÎÊÌâ £¬²¢·ÇËùÓÐÅäÖÃÎļþ¹ÜÀí·¨Ê½¶¼ÊÜ´ËÎÊÌâÓ°Ïì¡£MicrosoftÒÑÌṩ¿É½ÓÄɵÄÐÞ¸´´ëÊ© £¬Ô¤¼ÆÔÚ1ÔÂÏÂÑ®ÐÞ¸´¸ÃÎÊÌâ¡£


Ô­ÎÄÁ´½Ó£º

https://www.bleepingcomputer.com/news/microsoft/windows-11-bug-causes-color-rendering-issues-on-hdr-displays/


°µÍøÊг¡ToRReZÔÝÍ£ÔËÓª²¢³Æ¿ÉÄÜÔÚÉÔºó½×¶Î»Ø¹é


°µÍøÊг¡ToRReZÔÝÍ£ÔËÓª²¢³Æ¿ÉÄÜÔÚÉÔºó½×¶Î»Ø¹é.png


ýÌå12ÔÂ27ÈÕ³Æ £¬°µÍøÊг¡ToRReZÐû²¼ÔÝÍ£ÔËÓª¡£Torrez Market½¨Á¢ÓÚ2020Äê4Ô £¬ÊÇΨһ½ÓÊÜBitcoin¡¢Monero¡¢ZcashºÍLitecoinµÄ°µÍøÊг¡¡£¸ÃÍøÕ¾µÄ¹ÜÀíÔ±mrblondeÉù³ÆÕâÊÇËûÃÇ×Ô¼º¾ö¶¨µÄ½á¹û £¬²¢½âÊÍËûÃÇ¿ÉÄÜ»áÔÚÉÔºó½×¶Î»Ø¹é¡£×Ô12ÔÂ17ÈÕÆð £¬¸ÃÍøÕ¾ÒÑÎÞ·¨×¢²áÐÂÕÊ»§ £¬Ö®ºó¹ÜÀíÔ±Ô¤ÁôÁ½µ½ÈýÖܵÄʱ¼äÆÚ´ýËùÓÐÓû§Íê³É½»Òס£


Ô­ÎÄÁ´½Ó£º

https://securityaffairs.co/wordpress/126052/cyber-crime/torrez-marketplace-shut-down.html    


Cisco TalosÐû²¼2021Äê¶ÈÍøÂç¹¥»÷»î¶¯µÄ»Ø¹Ë³ÂËß


Cisco TalosÐû²¼2021Äê¶ÈÍøÂç¹¥»÷»î¶¯µÄ»Ø¹Ë³ÂËß.png


12ÔÂ27ÈÕ £¬Cisco TalosÐû²¼2021Äê¶ÈÍøÂç¹¥»÷»î¶¯µÄ»Ø¹Ë³ÂËß¡£¸Ã³ÂËßÖ¼Ôڻع˱¾Äê·¢ÉúµÄÖØ´óÄþ¾²Ê¼þ £¬ÆäÖаüÂÞ1Ô·ݴó¹æÄ£SolarWinds¹©Ó¦Á´¹¥»÷£»3Ô·ÝProxyLogon©¶´ºÍHAFNIUM ÍŻﷺÆð£»5Ô·ÝʯÓ͹ܵÀColonial PipelineÔâµ½¹¥»÷£»7Ô·ÝKaseya¹©Ó¦Á´¹¥»÷£»12Ô·ÝLog4j©¶´·ºÆðµÈʼþ¡£³ÂËßÔ¤²â £¬ÔÚ2022Äê £¬´óÐ͹¥»÷»î¶¯ºÍÀÕË÷Èí¼þÈÔ½«³ÊÉÏÉýÇ÷ÊÆ¡£


Ô­ÎÄÁ´½Ó£º

https://blog.talosintelligence.com/2021/12/2021-looking-back-on-year-in-malware.html