ŦԼͨ¹ýÐÂÊý¾Ýй¶֪ͨ·¨°¸£¬£¬£¬£¬Êý¾Ýî¿ÏµÔÙ´ÎÉý¼¶£»£»£»£»£»£»2019ÄêÉϰëÄêÁè¼Ý2300ÍòÕÅÐÅÓÿ¨ÔÚ°µÍø³öÊÛ

Ðû²¼Ê±¼ä 2019-07-29
1¡¢Å¦Ô¼Í¨¹ýÐÂÊý¾Ýй¶֪ͨ·¨°¸£¬£¬£¬£¬Êý¾Ýî¿ÏµÔÙ´ÎÉý¼¶


¿­·¢¡¤k8(ÖйúÓÎ)¹Ù·½ÍøÕ¾


ŦԼÖÝÖݳ¤Andrew M. Cuomo¿ËÈÕÇ©ÊðÁËÒ»ÏîеÄÊý¾Ýй¶֪ͨ·¨°¸£¬£¬£¬£¬¸Ã·¨°¸µÄÃû³ÆÎª¡°×èÖ¹ºÚ¿Í¼°Ë¢Ðµç×ÓÊý¾ÝÇå¾²¡±£¬£¬£¬£¬¼´SHIELD·¨°¸£¬£¬£¬£¬Ö¼ÔÚ±£»£»£»£»£»£»¤Å¦Ô¼¹«ÃñµÄÒþ˽Êý¾Ý²¢ÔöÇ¿¸ÃÖݵÄÊý¾Ýй¶Õþ²ß¡£¡£¡£¸Ã·¨°¸À©´óÁËСÎÒ˽¼ÒÐÅÏ¢µÄ¹æÄ££¬£¬£¬£¬½«ÉúÎïʶ±ðÐÅÏ¢¡¢µç×ÓÓʼþµØµã¼°ÃÜÂë¡¢Çå¾²ÎÊÌâ¼°ÃÕµ×ÁÐÈëÆäÖС£¡£¡£¸Ã·¨°¸»¹ÔöÌíÁËÃñÊ´¦·Ö£¬£¬£¬£¬²¢½«Í¨ÖªÒªÇóÓ¦ÓÃÓÚÈκÎÓµÓÐŦԼ¹«ÃñÒþ˽ÐÅÏ¢µÄСÎÒ˽¼Ò»òʵÌ壬£¬£¬£¬¶ø²»µ«½öÊÇÔÚŦԼÖÝ¿ªÕ¹ÓªÒµµÄʵÌå¡£¡£¡£¸Ã·¨°¸»¹½«ÌṩÉí·Ý͵ÇÔ±£»£»£»£»£»£»¤Ð§ÀÍдÈëÖ´·¨£¬£¬£¬£¬ÒªÇóCRAÔÚ±¬·¢Éæ¼°Éç»áÇå¾²ºÅÂëµÄÊý¾Ýй¶ºó±ØÐèÏòÏûºÄÕßÌṩºÏÀíµÄ±£»£»£»£»£»£»¤Ð§ÀÍ¡£¡£¡£


Ô­ÎÄÁ´½Ó£ºhttps://www.bleepingcomputer.com/news/security/new-york-passes-law-to-update-data-breach-notification-requirements/


2¡¢°Ä´óÀûÑǹúÃñÒøÐÐÒòÈËΪʧÎóй¶1.3Íò¿Í»§ÐÅÏ¢


¿­·¢¡¤k8(ÖйúÓÎ)¹Ù·½ÍøÕ¾


°Ä´óÀûÑǹúÃñÒøÐУ¨NAB£©ÌåÏÖÓÐ1.3ÍòÃû¿Í»§µÄÐÅÏ¢Ô⵽й¶£¬£¬£¬£¬ÆäÔµ¹ÊÔ­ÓÉÊÇËûÃǵÄСÎÒ˽¼ÒÊý¾Ýδ¾­ÔÊÐí±»ÉÏ´«ÖÁÁ½¼ÒÊý¾ÝЧÀ͹«Ë¾¡£¡£¡£NABÊ×ϯÊý¾Ý¹ÙGlenda CrispÔÚÒ»·ÝÉùÃ÷ÖÐÌåÏÖ£¬£¬£¬£¬ÕâÒ»ÊÂÎñÊÇÓÉÈËΪʧÎóµ¼Öµģ¬£¬£¬£¬¸ÃÐÐΪΥ·´ÁËNABµÄÊý¾ÝÇå¾²Õþ²ß¡£¡£¡£Ð¹Â¶µÄÊý¾Ý°üÀ¨¿Í»§µÄÐÕÃû¡¢³öÉúÈÕÆÚ¡¢ÁªÏµ·½·¨ÒÔ¼°Éí·ÝÖ¤ºÅÂë¡£¡£¡£¸ÃÒøÐÐÔö²¹³ÆÃ»ÓеǼƾ֤»òÃÜÂëй¶£¬£¬£¬£¬²¢ÇÒûÓÐÖ¤¾ÝÅú×¢ÈκÎÐÅÏ¢±»¸´ÖÆ»ò½øÒ»²½Åû¶¡£¡£¡£


Ô­ÎÄÁ´½Ó£ºhttps://www.reuters.com/article/us-nab-cyber/australias-nab-says-13000-customers-personal-data-breached-idUSKCN1UL16P


3¡¢¼ÓÄô󰲼òªʡÔâÀÕË÷Èí¼þ¹¥»÷£¬£¬£¬£¬Õþ¸®¾Ü¾øÖ§¸¶Êê½ð    


¿­·¢¡¤k8(ÖйúÓÎ)¹Ù·½ÍøÕ¾


¼ÓÄô󰲼òªʡ¶«²¿ÊÐÇøÔÚ6ÔÂ30ÈÕÔâµ½ÀÕË÷Èí¼þ¹¥»÷£¬£¬£¬£¬ÊÐÕþЧÀÍÊܵ½Ó°Ïì¡£¡£¡£¸ÃÊеÄÅÌËã»úϵͳ±»²»·¨»á¼û£¬£¬£¬£¬²¢Ñ¬È¾ÁËÀÕË÷Èí¼þ£¬£¬£¬£¬ÊÜÓ°ÏìµÄϵͳ°üÀ¨ÊÐÕþÕþ¸®µÄµç×ÓÓʼþϵͳµÈ¡£¡£¡£¹¥»÷ÕßÒªÇóÒÔ±ÈÌØ±ÒÖ§¸¶7000µ½10000ÃÀÔªµÄÊê½ð£¬£¬£¬£¬µ«ÊÐÕþÕþ¸®¾Ü¾øÁËÕâÒ»ÒªÇ󣬣¬£¬£¬²¢×ÔÐоÙÐÐÊý¾Ý»Ö¸´¡£¡£¡£ÔÚÊÂÎñ±¬·¢¼¸Ììºó£¬£¬£¬£¬³ýµç×ÓÓʼþϵͳÍ⣬£¬£¬£¬ËùÓÐÆäËüµÄ¶¼»áЧÀͶ¼Òѻָ´Õý³£¡£¡£¡£ÊÐÕþ¸®ÒÑÏò¾¯·½ÒÔ¼°°²¼òªʡÐÅÏ¢ºÍÒþ˽רԱ±¨¸æÁË´ËÊÂÎñ£¬£¬£¬£¬Ä¿½ñÊÓ²ìÈÔÔÚ¾ÙÐÐÖС£¡£¡£


Ô­ÎÄÁ´½Ó£ºhttps://www.spamfighter.com/News-22325-Eastern-Ontario-municipality-suffered-from-a-ransomware-attack.htm


4¡¢SynologyÖÒÑÔÕë¶ÔÆäNAS×°±¸µÄ±©Á¦ÆÆ½â¹¥»÷


¿­·¢¡¤k8(ÖйúÓÎ)¹Ù·½ÍøÕ¾


Synology£¨ÈºêÍ£©ÏòÆäNAS×°±¸µÄÓû§·¢³öÖÒÑÔ£¬£¬£¬£¬¹¥»÷ÕßÕýÔÚʹÓñ©Á¦¹¥»÷£¨×ֵ乥»÷£©ÆÆ½âÓû§µÄÖÎÀíԱƾ֤£¬£¬£¬£¬²¢Í¨¹ýÀÕË÷Èí¼þeCh0raix¼ÓÃÜÓû§µÄÊý¾Ý¡£¡£¡£¸Ã¹¥»÷»î¶¯ÓÚ7ÔÂ19ÈÕÆô¶¯£¬£¬£¬£¬SynologyÁ¬Ã¦Í¨ÖªÁËTWCERT/CCºÍCERT/CC£¬£¬£¬£¬ÒÔÅäºÏ½â¾ö´ËÊÂÎñ¡£¡£¡£SynologyÇå¾²ÊÂÎñÏìÓ¦ÍŶӵÄ˾ÀíKen LeeÌåÏÖÕâÊÇÒ»´ÎÓÐ×éÖ¯µÄ¹¥»÷£¬£¬£¬£¬¹¥»÷ÕßʹÓý©Ê¬ÍøÂçµÄµØµãÀ´Òþ²ØÆäÕæÕýµÄÔ´IP¡£¡£¡£¸Ã¹«Ë¾½¨Òé¿Í»§Ê¹ÓÃSynologyµÄÍøÂçºÍÕÊ»§ÖÎÀíÉèÖÃÀ´±ÜÃâ»ùÓÚ»¥ÁªÍøµÄ¹¥»÷£¬£¬£¬£¬°üÀ¨ÆôÓ÷À»ðǽ¡¢½öÔÊÐí¹«¹²¶Ë¿ÚÌṩ»ù±¾Ð§ÀÍÒÔ¼°ÆôÓÃÁ½²½ÑéÖ¤¡£¡£¡£


Ô­ÎÄÁ´½Ó£ºhttps://www.zdnet.com/article/ransomware-crooks-hit-synology-nas-devices-with-brute-force-password-attacks/


5¡¢15Äêºóµç×ÓÓʼþÈ䳿MyDoomÔÚÈÔÔÚÈö²¥


¿­·¢¡¤k8(ÖйúÓÎ)¹Ù·½ÍøÕ¾


ƾ֤CylanceÑо¿ÍŶӵįÊÎö£¬£¬£¬£¬µç×ÓÓʼþÈ䳿MyDoomÔÚ½µÉú15ÄêºóÈÔÔÚÍøÉÏÈö²¥¡£¡£¡£MydoomÖÁÉÙ´Ó2004Äê×îÏÈ»îÔ¾£¬£¬£¬£¬ÆäÖ÷ÒªÈö²¥ÒªÁìÊÇÔÚÊÜѬȾµÄϵͳÉÏÍøÂçµç×ÓÓʼþµØµã²¢Í¨¹ý¸½¼þ¾ÙÐз¢ËÍ¡£¡£¡£MyDoomÔÚÒÑÍù¼¸ÄêÖмá³ÖÏà¶ÔÎȹ̣¬£¬£¬£¬ÔÚ2015ÄêÖÁ2018Äêʱ´úMyDoomÔÚPalo Alto Networks¼ì²âµ½µÄËùÓжñÒâµç×ÓÓʼþÖÐÕ¼1.1£¥£¬£¬£¬£¬Õ¼¶ñÒ⸽¼þÖÖ±ðÖеÄ21.4£¥¡£¡£¡£ÖйúºÍÃÀ¹úÊÇMyDoomµÄÖ÷ÒªÑ¬È¾Çø£¬£¬£¬£¬¿Æ¼¼¹«Ë¾ÊÇ×î³£¼ûµÄÄ¿µÄÐÐÒµ¡£¡£¡£


Ô­ÎÄÁ´½Ó£ºhttps://www.bleepingcomputer.com/news/security/notorious-mydoom-worm-still-on-autopilot-after-15-years/


6¡¢2019ÄêÉϰëÄêÁè¼Ý2300ÍòÕÅÐÅÓÿ¨ÔÚ°µÍø³öÊÛ


¿­·¢¡¤k8(ÖйúÓÎ)¹Ù·½ÍøÕ¾


ƾ֤SixgillÐû²¼µÄ°µÍø½ðÈÚڲƭ±¨¸æ£¬£¬£¬£¬ÔÚ2019ÄêÉϰëÄê¹²ÓÐÁè¼Ý2300ÍòÕű»µÁÐÅÓÿ¨ÔÚ°µÍøÉϳöÊÛ£¬£¬£¬£¬ÆäÖÐÁè¼Ý1500ÍòÕÅÐÅÓÿ¨ÊÇÃÀ¹ú¿¯Ðе쬣¬£¬£¬¶øÆäËü¹ú¼ÒµÄ±»µÁ¿¨ºÅ¾ùСÓÚ10%¡£¡£¡£À´×Ô¶íÂÞ˹µÄ±»µÁÐÅÓÿ¨ÊýÄ¿×îÉÙ£¬£¬£¬£¬Õ¼±ÈÏÕЩΪ0£¨2300ÍòÖÐÖ»ÓÐ316ÕÅ¿¨£©¡£¡£¡£57%µÄ±»µÁ¼Í¼ÓëVisa¿¨Óйأ¬£¬£¬£¬Æä´ÎÊÇMastercard£¬£¬£¬£¬Õ¼29%£¬£¬£¬£¬AMEXÕ¼12%¡£¡£¡£·¸·¨·Ö×Ó¸üÇàíù°üÀ¨CVVºÅÂ루65£¥£©¶ø²»ÊÇÊý¾Ýת´¢£¨35£¥£©µÄ¼Í¼¡£¡£¡£°µÍøÉϱ»µÁÐÅÓÿ¨µÄ¼ÛÇ®×îµÍΪ5ÃÀÔª¡£¡£¡£


Ô­ÎÄÁ´½Ó£ºhttps://securityaffairs.co/wordpress/88990/deep-web/payment-card-data-dark-web.html