Kaspersky披录国中情局开发的后门Purple Lambert；PHP Composer存在号令注入缝隙

颁布功夫 2021-05-01

【威胁谍报】


Kaspersky披录国中情局开发的后门Purple Lambert

https://www.hackread.com/kaspersky-cia-malware-backdoor-capabilities/


FiveHands利用SonicWall VPN中0day针对欧美地域

https://thehackernews.com/2021/04/hackers-exploit-sonicwall-zero-day-bug.html


【勒索软件】


巴西南里约热内卢司法法院系统习染REvil ，被迫关关

https://www.bleepingcomputer.com/news/security/brazils-rio-grande-do-sul-court-system-hit-by-revil-ransomware/


QNAP发现针对其NAS的设备的勒索软件Agelocker

https://www.bleepingcomputer.com/news/security/qnap-warns-of-agelocker-ransomware-attacks-on-nas-devices/


【缝隙补丁】


PHP Composer存在可导致供给链攻击的号令注入缝隙

https://securityaffairs.co/wordpress/117366/security/php-composer-flaw.html