2月17日每日安全热点 - 起亚美国地区遇大面积网络错误

Inspired by 360CERT

安全研究 Security Research

Electron API误用安全隐患

https://blog.doyensec.com/2021/02/16/electron-apis-misuse.html

 

NPM VSCode插件RCE

https://github.com/jackadamson/CVE-2021-26700

 

Ubuntu本地提权

https://alephsecurity.com/2021/02/16/apport-lpe/

 

Python Wheel劫持

https://www.vdoo.com/blog/python-wheel-jacking-supply-chain-attacks

安全资讯 Security Information

Edge浏览器加入青少年模式

https://www.bleepingcomputer.com/news/security/microsoft-edge-is-getting-a-new-child-friendly-kids-mode/

 

Windows安全更新触发BitLocker密钥还原

https://www.bleepingcomputer.com/news/microsoft/windows-10-secure-boot-update-triggers-bitlocker-key-recovery/

安全事件 Security Incident

起亚美国地区遇大面积网络错误

https://www.bleepingcomputer.com/news/security/kia-motors-america-experiences-massive-it-outage-across-the-us/

 

ScamClub组织利用浏览器0day将用户重定向传播恶意软件

https://www.bleepingcomputer.com/news/security/malvertisers-exploited-browser-zero-day-to-redirect-users-to-scams/