CODESYS Web服务器缓冲区溢露马脚（CVE-2020-10245）；iOS蕴含未建复的VPN绕过缝隙

颁布功夫 2020-03-28

【缝隙补丁】


CODESYS Web服务器缓冲区溢露马脚（CVE-2020-10245）

https://threatpost.com/critical-codesys-bug-remote-code-execution/154213/


0patch颁布Windows Type 1字体0day的一时建复补丁

https://www.bleepingcomputer.com/news/security/windows-font-parsing-zero-days-get-temporary-fix/


【威胁谍报】


Silence和TA505攻击欧洲至少两家造药和造作业公司

https://www.bleepingcomputer.com/news/security/russian-speaking-hackers-attack-pharma-manufacturing-companies-in-europe/


网络保险公司Chubb成为勒索软件Maze的最新受害者

https://www.bleepingcomputer.com/news/security/chubb-cyber-insurer-allegedly-hit-by-maze-ransomware-attack/


【安全缝隙】


iOS蕴含未建复的VPN绕过缝隙，可露出用户数据及IP

https://www.bleepingcomputer.com/news/security/unpatched-ios-bug-blocks-vpns-from-encrypting-all-traffic/