HPE已建复影响其SSMC的身份验证绕过缝隙；Symantec披露伊朗APT Seedworm针对中东

颁布功夫 2020-10-25

【缝隙补丁】


HPE已建复影响其SSMC的身份验证绕过缝隙

https://www.bleepingcomputer.com/news/security/hpe-fixes-maximum-severity-remote-auth-bypass-bug-in-ssmc-console/


【安全播报】


美国颁发要对俄罗斯开发Triton的科研机构执行造裁

https://www.zdnet.com/article/us-treasury-sanctions-russian-research-institute-behind-triton-malware/


【威胁谍报】


新RAT Abaddon可将Discord作为C2窃取数据

https://www.bleepingcomputer.com/news/security/new-rat-malware-gets-commands-via-discord-has-ransomware-feature/


Symantec披露伊朗APT团伙Seedworm针对中东

https://securityaffairs.co/wordpress/109911/apt/iran-seedworm-middle-east.html


诳骗团伙利用伪造的选民登记表网络用户数据

https://www.zdnet.com/article/phishing-groups-are-collecting-user-data-email-and-banking-passwords-via-fake-voter-registration-forms/