英国逐日电讯报ES配置谬误泄露10TB数据；研发团队建复Apache中蹊径遍历缝隙

颁布功夫 2021-10-08

【安全运维】


英国逐日电讯报Elasticsearch配置谬误泄露10TB数据


https://securityaffairs.co/wordpress/123020/data-breach/the-telegraph-data-leak.html


【缝隙补丁】


研发团队建复Apache中蹊径遍历缝隙（CVE-2021-41773）


https://www.bleepingcomputer.com/news/security/apache-fixes-actively-exploited-zero-day-vulnerability-patch-now/


Google颁布10月份Android更新，建复50多个缝隙


https://www.securityweek.com/google-patches-over-50-serious-vulnerabilities-android


【威胁谍报】


Sophos发现利用Python剧本加密虚构机的攻击活动


https://www.bleepingcomputer.com/news/security/ransomware-gang-encrypts-vmware-esxi-servers-with-python-script/


【分析汇报】


BlackBerry颁布有关APT41的攻击活动的分析汇报


https://blogs.blackberry.com/en/2021/10/drawing-a-dragon-connecting-the-dots-to-find-apt41