Software AG习染勒索软件并被勒索2300万美元；文档署名服务Docsketch遭到入侵

颁布功夫 2020-10-11

【攻击事务】


Software AG习染勒索软件并被勒索2300万美元

https://www.zdnet.com/article/german-tech-giant-software-ag-down-after-ransomware-attack/


文档署名服务Docsketch遭到入侵，数据或已泄露

https://www.zdnet.com/article/document-signing-service-docsketch-discloses-security-breach


【威胁谍报】


勒索团伙TA505利用ZeroLogon缝隙进行攻击

https://www.bleepingcomputer.com/news/security/ransomware-gang-now-using-critical-windows-flaw-in-attacks/


钻研人员发现可利用Fitbit设备分发恶意软件

https://www.bleepingcomputer.com/news/security/fitbit-gallery-can-be-used-to-distribute-malicious-apps/


【缝隙补丁】


Cisco颁布安全更新，建复多款产品中的缝隙

https://us-cert.cisa.gov/ncas/current-activity/2020/10/08/cisco-releases-security-updates