安全钻研人员披露已被利用的Windows提权0day；黑客在暗网销售110万个Lazada Redmart用户帐户

颁布功夫 2020-11-01

【安全缝隙】


安全钻研人员披露已被利用的Windows提权0day

https://www.zdnet.com/article/google-discloses-windows-zero-day-exploited-in-the-wild/


NVIDIA建复其DGX服务器AMI BMC固件中的9个缝隙

https://www.securityweek.com/nvidia-patches-ami-bmc-vulnerabilities-impacting-several-major-vendors


【威胁谍报】


黑客在暗网销售110万个Lazada Redmart用户帐户

https://www.bleepingcomputer.com/news/security/over-1m-lazada-redmart-accounts-sold-online-after-data-breach/


银行木马Wroba通过文本传布，重要针对美国用户

https://threatpost.com/wroba-mobile-banking-trojan-spreads-us/160785/


CISA和FBI颁布伊朗APT组织窃取选民数据的征询

https://us-cert.cisa.gov/ncas/current-activity/2020/10/30/cisa-and-fbi-release-joint-advisory-iranian-apt-actor-targeting