3月17日每日安全热点 - WeLeakInfo确认出现数据泄露

Inspired by 360CERT

恶意软件 Malware

FBI称Pysa勒索软件大肆攻击教育行业

https://www.bleepingcomputer.com/news/security/fbi-warns-of-escalating-pysa-ransomware-attacks-on-education-orgs/

 

HCrypt分析

https://blog.morphisec.com/tracking-hcrypt-an-active-crypter-as-a-service

 

安全研究 Security Research

Duckduckgo漏洞与UXSS

https://palant.info/2021/03/15/duckduckgo-privacy-essentials-vulnerabilities-insecure-communication-and-universal-xss/

 

VoIPmonitor RCE

https://www.rtcsec.com/post/2021/03/bug-discovery-diaries-abusing-voipmonitor-for-remote-code-execution/

 

Chrome沙盒逃逸

https://securitylab.github.com/research/one_day_short_of_a_fullchain_sbx

 

安全资讯 Security Information

少年黑客因Twitter钓鱼事件获刑三年

https://www.bleepingcomputer.com/news/security/teen-hacker-agrees-to-3-years-in-prison-for-twitter-bitcoin-scam/

 

安全事件 Security Incident

WeLeakInfo确认出现数据泄露

https://www.bleepingcomputer.com/news/security/hacker-leaks-payment-data-from-defunct-weleakinfo-breach-site/

 

Mimecast证实Solarwinds事件中部分源代码泄露

https://www.bleepingcomputer.com/news/security/mimecast-solarwinds-hackers-stole-some-of-our-source-code/

 

安全客 Security Geek

2021_DiceCTF_hashbrown 一道内核题目

https://www.anquanke.com/post/id/233531