3月1日安全热点 - Trustico和DigiCert撤销23000名用户的SSL证书

 

资讯类

 

花式熊：德国调查“俄罗斯人的网络攻击”
http://www.bbc.com/news/world-middle-east-43232520

 

用于加密挖掘的反序列化攻击
http://resources.infosecinstitute.com/deserialization-attacks-crypto-mining/

 

23000名用户在Trustico-DigiCert Spat中丢失SSL证书
https://www.bleepingcomputer.com/news/security/23-000-users-lose-ssl-certificates-in-trustico-digicert-spat/

 

安全漏洞的五大方式隐藏在您的IT系统中
http://www.eweek.com/security/top-five-ways-security-vulnerabilities-hide-in-your-it-systems

 

避免成为加密挖掘机器人：在哪里寻找挖掘恶意软件和如何响应
https://www.securityweek.com/avoid-becoming-crypto-mining-bot-where-look-mining-malware-and-how-respond

 

Sofacy袭击多个政府实体

https://researchcenter.paloaltonetworks.com/2018/02/unit42-sofacy-attacks-multiple-government-entities/

 

Facebook暴露的电子邮件中的漏洞和页面管理员的详细信息

http://securityaffairs.co/wordpress/69630/hacking/facebook-page-administrator.html

 

技术类

Re: Multiple vulnerabilities in Jenkins plugins
http://seclists.org/oss-sec/2018/q1/202

 

5种Linux工具帮助从损坏的驱动器中恢复数据
https://news.hitb.org/content/5-linux-tools-help-recover-data-corrupted-drives

 

D-Link DGS-3000-10TC跨站请求伪造
https://packetstormsecurity.com/files/146612/dlinkdgs300010tc-xsrf.txt

 

最新然之协同(包含专业版)及喧喧及时聊天系统远程命令执行漏洞详解
https://paper.seebug.org/534/

 

加密101：ShiOne勒索软件案例研究

https://blog.malwarebytes.com/threat-analysis/2018/02/encryption-101-shione-ransomware-case-study/