ÍøÂç·¸·¨·Ö×ÓÔÚÕ«ÔºͿªÕ«½Úʱ´ú²þâ±ÍøÂçÕ©Æ
Ðû²¼Ê±¼ä 2024-03-261. ÍøÂç·¸·¨·Ö×ÓÔÚÕ«ÔºͿªÕ«½Úʱ´ú²þâ±ÍøÂçÕ©Æ
3ÔÂ24ÈÕ£¬£¬£¬£¬Õ«ÔÂʱ´ú£¬£¬£¬£¬ResecurityÊӲ쵽ڲƻºÍÕ©Æ´ó·ùÔöÌí£¬£¬£¬£¬Í¬Ê±ÁãÊÛºÍÔÚÏßÉúÒ⼤Ôö¡£¡£¡£ÃæÁÙÕâÒ»¼Ó¾çΣº¦µÄÖж«ÆóÒµ±»±Þ²ßÔöÇ¿ÏûºÄÕß±£»£»£»£»£»£»£»£»¤²¢ÔöÇ¿Æ·ÅÆÇå¾²¡£¡£¡£ÖµµÃ×¢ÖØµÄÊÇ£¬£¬£¬£¬É³Ìذ¢À²®Íõ¹ú (KSA) µÄÏûºÄÕßÖ§³öÁè¼Ý 160 ÒÚÃÀÔª£¬£¬£¬£¬Î»¾ÓµØÇøÅÅÐаñÊ×λ¡£¡£¡£²»ÐÒµÄÊÇ£¬£¬£¬£¬µç×ÓÉÌÎñ»î¶¯µÄ¼¤ÔöÒýÆðÁËÍøÂç·¸·¨·Ö×ÓµÄ×¢ÖØ£¬£¬£¬£¬ËûÃÇʹÓÃÕâЩƽ̨ʵÑéÕ©Æ£¬£¬£¬£¬¸øÏûºÄÕßºÍÆóÒµ´øÀ´ÁËÖØ´óµÄ²ÆÎñÓ°Ïì¡£¡£¡£ÕâЩ»î¶¯µÄ×ܲÆÎñÓ°ÏìÔ¤¼ÆÔÚ 70 ÖÁ 1 ÒÚÃÀÔªÖ®¼ä£¬£¬£¬£¬ÆäÖаüÀ¨Õë¶ÔÍâ¼®ÈËÊ¿¡¢×¡ÃñºÍÍâ¹úÓο͵ÄÚ²ÆÐÐΪ¡£¡£¡£ÓÉÓÚÒ»Á¬Æð¾¢ÎªÖж«Ðí¶à¿Í»§Ìá¹©Æ·ÅÆ±£»£»£»£»£»£»£»£»¤£¬£¬£¬£¬Resecurity ÒÑÓÐÓÃ×èÖ¹ÁË 320 ¶à¸öð³äÖ÷ÒªÎïÁ÷ÌṩÉ̺͵ç×ÓÕþÎñЧÀ͵ÄÚ²Æ×ÊÔ´¡£¡£¡£ÍøÂç·¸·¨·Ö×ÓÆð¾¢Ê¹Óà Sadad¡¢Musaned¡¢Ajeer¡¢Ejar µÈƽ̨ÒÔ¼°×ÅÃûÎïÁ÷ЧÀÍÀ´ÓÕÆ»¥ÁªÍøÓû§£¬£¬£¬£¬²¢½«ËûÃÇÒýÈë²î±ðµÄȦÌס£¡£¡£Ç¿ÁÒ½¨Òé²»ÒªÔÚ¿ÉÒÉÍøÕ¾ÉÏ»òÓëð³äÒøÐлòÕþ¸®¹ÍÔ±µÄСÎÒ˽¼Ò·ÖÏíСÎÒ˽¼ÒºÍ¸¶¿îÐÅÏ¢¡£¡£¡£
https://securityaffairs.com/161009/cyber-crime/cybercriminals-accelerate-scams-ramadan.html
2. OpenVPN ÐÞ¸´ Windows ÖеĶà¸öÑÏÖØÎó²î
3ÔÂ24ÈÕ£¬£¬£¬£¬OpenVPN ÒÑÐû²¼Ö÷ÒªÇå¾²¸üУ¨°æ±¾ 2.6.10£©£¬£¬£¬£¬ÒÔ½â¾öÆä Windows Èí¼þÖеÄһϵÁÐÎó²î£¬£¬£¬£¬ÕâЩÎó²î¿ÉÄܵ¼ÖÂȨÏÞÉý¼¶¡¢Ô¶³Ì¹¥»÷ºÍϵͳÍ߽⡣¡£¡£ÕâЩÎó²î͹ÏÔÁ˰´ÆÚÈí¼þ¸üеÄÐëÒªÐÔ£¬£¬£¬£¬ÌØÊâÊǹØÓÚ OpenVPN µÈ´¦Öóͷ£ÍøÂçÁ÷Á¿µÄ¹¤¾ß¡£¡£¡£±¾´Î¸üеÄÎó²î°üÀ¨CVE-2024-27459£¨¿ÍÕ»Òç³ö±£»£»£»£»£»£»£»£»¤£©¡¢CVE-2024-24974£¨Ô¶³Ì»á¼ûÏÞÖÆ£©¡¢CVE-2024-27903£¨²å¼þ¼ÓÔØÏÞÖÆ£©ºÍCVE-2024-1305£¨TAP Çý¶¯³ÌÐòÒç³öÐÞ¸´£©¡£¡£¡£
https://securityonline.info/openvpn-patches-serious-vulnerabilities-in-windows-installations/
3. Vans Éù³ÆÍøÂçÆ×Ó²¢Î´ÇÔÈ¡¿Í»§µÄ²ÆÎñÐÅÏ¢
3ÔÂ24ÈÕ£¬£¬£¬£¬´ò°çºÍЬÀà¾ÞÍ· VF Corporation Ïò 3550 Íò¿Í»§×ª´ï£¬£¬£¬£¬¼ÌÈ¥ÄêµÄÇå¾²Îó²îÖ®ºó£¬£¬£¬£¬ËûÃÇ¿ÉÄÜ»á³ÉΪÉí·Ý͵ÇÔµÄÊܺ¦Õß¡£¡£¡£Vans ºÍ North Face ĸ¹«Ë¾ÔÚ¸ø¿Í»§µÄÒ»·âµç×ÓÓʼþÖÐÔÊÐí£¬£¬£¬£¬Æ×Ó²»»á͵ȡËûÃǵÄÐÅÓÿ¨»òÒøÐÐÕË»§ÏêϸÐÅÏ¢¡£¡£¡£²¢ÇÒ£¬£¬£¬£¬ËüÔö²¹Ëµ£¬£¬£¬£¬¡°Ã»ÓÐÖ¤¾Ý¡±Åú×¢Èκα»µÁµÄСÎÒ˽¼ÒÐÅÏ¢£¬£¬£¬£¬°üÀ¨ÐÕÃû¡¢µç×ÓÓʼþ¡¢µØµãºÍµç»°ºÅÂ룬£¬£¬£¬Òѱ»ÓÃÓÚа¶ñÄ¿µÄ¡£¡£¡£ÕâЩ¼Í¼ÊÇÔÚ VF ÓÚ 12 Ô 13 ÈÕÅû¶µÄÊý×ÖÈëÇÖÀú³ÌÖб»»á¼û»ò»ñÈ¡µÄ¡£¡£¡£´Ë´ÎÈëÈÅÂÒÂÒÁËÕâ¼Ò´ò°çÖÆÔìÉ̵ÄÔËÓª¼°ÆäÈÃÈËÃÇÒÂןߵÈÍâÒµÄÄÜÁ¦¡£¡£¡£ËäÈ» VF Æäʱ²¢Î´½«´Ë´ÎÍøÂçÇå¾²ÊÂÎñ³ÆÎªÀÕË÷Èí¼þ£¬£¬£¬£¬µ«ÆäÔÚî¿ÏµÎļþÖÐÏêϸÐÎò´Ë´ÎÈëÇÖµÄÓïÑÔʹÆäÌýÆðÀ´ºÜÊÇÏñ´øÓÐÀÕË÷ÒªÇóµÄÀÕË÷Èí¼þѬȾ¡£¡£¡£ÔÚÏòÃÀ¹ú֤ȯÉúÒâίԱ»á (SEC) Ìá½»µÄ×îР8-K ÎļþÖУ¬£¬£¬£¬Õâ¼Ò´ò°çÏúÊÛÉÌÅû¶£¬£¬£¬£¬Æä3550 Íò¿Í»§Êܵ½ IT Çå¾²Îó²îµÄÓ°Ï죬£¬£¬£¬µ«¶ÔÆ×Ó¿ÉÄÜÇÔÈ¡µÄÊý¾ÝÈ´ÃÔºýÆä´ÇÔÚ¹¥»÷ʱ´ú¡£¡£¡£
https://www.theregister.com/2024/03/24/vans_breach_disclosure/
4. ÓÐÏßµçÊÓ ISP ÒòÏò FCC »Ñ±¨¿í´øËùÔÚ¶ø±»·£¿£¿£¿î
3ÔÂ23ÈÕ£¬£¬£¬£¬Ò»¼Ò»¥ÁªÍøÐ§ÀÍÌṩÉÌÈÏ¿ÉÔÚÆäÌṩ¿í´øµÄËùÔÚ·½ÃæÏò FCC ˵»Ñ£¬£¬£¬£¬½«Ö§¸¶ 10,000 ÃÀÔªµÄ·£¿£¿£¿î£¬£¬£¬£¬²¢ÊµÑéºÏ¹æÍýÏëÒÔ±ÜÃâδÀ´·ºÆðÎ¥¹æÐÐΪ¡£¡£¡£ArsTechnica£º¶íº¥¶íÖݶàÂ×¶àµÄÒ»¼ÒСÐÍ ISP ½Üì³Ñ·ÏصçÀ (JCC) ÈϿɣ¬£¬£¬£¬Ëü¹ýʧµØÉù³ÆÔÚÉÐδÀ©Õ¹µ½µÄµØÇøÌṩ¹âÏËЧÀÍ¡£¡£¡£Ò»Î»¹«Ë¾¸ß¹Ü»¹ÈϿɣ¬£¬£¬£¬¸Ã¹«Ë¾Ìá½»ÁËÐéαµÄÁýÕÖÊý¾Ý£¬£¬£¬£¬ÒÔ×èÖ¹ÆäËû»¥ÁªÍøÐ§ÀÍÌṩÉÌ»ñµÃÕþ¸®²¦¿îÀ´Îª¸ÃµØÇøÌṩЧÀÍ¡£¡£¡£Ars ÔÚ 2023 Äê 2 ÔµÄһƪÎÄÕÂÖÐ×ÊÖú½ÒÆÆÁËÕâÒ»ÊÂÎñ¡£¡£¡£FCC ÓÚ 3 Ô 15 ÈÕÐû²¼ÁËÊÓ²ìЧ¹û£¬£¬£¬£¬³Æ Jefferson County Cable Î¥·´ÁË¿í´øÊý¾ÝÍøÂçÍýÏëµÄÒªÇóºÍÃÀ¹úÖ´·¨¡¶¿í´øÊý¾Ý·¨°¸¡·¡£¡£¡£
https://ordonews.com/cable-isp-fined-10000-for-lying-to-fcc-about-where-it-offers-broadband/
5. µÂ¹úÕþ¸®Ðû²¼È¡µÞÃûΪNemesis MarketµÄ°µÍøÊг¡
3ÔÂ24ÈÕ£¬£¬£¬£¬µÂ¹úÕþ¸®Ðû²¼È¡µÞÒ»¸öÃûΪNemesis MarketµÄ²»·¨µØÏÂÊг¡£¬£¬£¬£¬¸ÃÊг¡¶µÊÛ¶¾Æ·¡¢±»µÁÊý¾ÝºÍÖÖÖÖÍøÂç·¸·¨Ð§ÀÍ¡£¡£¡£Áª°îÐÌʾ¯Ô±¾Ö£¨ÓÖÃû Bundeskriminalamt »ò BKA£©ÌåÏÖ£¬£¬£¬£¬Ëü²é»ñÁËλÓڵ¹úºÍÁ¢ÌÕÍðµÄÓë°µÍøÐ§ÀÍÏà¹ØµÄÊý×Ö»ù´¡ÉèÊ©£¬£¬£¬£¬²¢Ã»ÊÕÁË 94,000 Å·Ôª£¨102,107 ÃÀÔª£©µÄ¼ÓÃÜÇ®±Ò×ʲú¡£¡£¡£´Ë´ÎÐж¯ÊÇÓëµÂ¹ú¡¢Á¢ÌÕÍðºÍÃÀ¹úµÄÖ´·¨»ú¹¹ÏàÖú¾ÙÐе쬣¬£¬£¬ÓÚ 2022 Äê 10 ÔÂ×îÏȾÙÐÐÆÕ±éÊÓ²ìºó£¬£¬£¬£¬ÓÚ 2024 Äê 3 Ô 20 ÈÕ¾ÙÐС£¡£¡£Nemesis Market ½¨ÉèÓÚ 2021 Ä꣬£¬£¬£¬Ô¤¼ÆÔڹرÕ֮ǰӵÓÐÀ´×ÔÌìϸ÷µØµÄÁè¼Ý 150,000 ¸öÓû§ÕÊ»§ºÍ 1,100 ¸öÂô¼ÒÕÊ»§¡£¡£¡£½ü 20 ÃÀÔªµÄÂô¼ÒÕË»§À´×Ե¹ú¡£¡£¡£½ü¼¸¸öÔÂÀ´£¬£¬£¬£¬µÂ¹úÕþ¸®»¹È¡µÞÁËKingdom MarketºÍCrimemarket£¬£¬£¬£¬ÕâÁ½¸öÍøÕ¾¶¼ÓµÓÐÊýǧÃûÓû§£¬£¬£¬£¬²¢ÌṩÆÕ±éµÄÏ´Ç®ºÍÍøÂç·¸·¨Ð§ÀÍ¡£¡£¡£
https://thehackernews.com/2024/03/german-police-seize-nemesis-market-in.html
6. î¿Ïµ»ú¹¹Ãé×¼¿Æ¼¼ÐÐÒµ£¬£¬£¬£¬¹È¸èºÍÆ»¹û·Ö²ðÌáÉÏÈÕ³Ì
3ÔÂ24ÈÕ£¬£¬£¬£¬´óÎ÷ÑóÁ½°¶µÄ·´Â¢¶Ïî¿Ïµ»ú¹¹ÕýÔÚ¹¥»÷¿ÉÄܵ¼ÖÂÆ»¹ûºÍ Alphabet ÆìϹȸ豻·Ö²ðµÄ·´¾ºÕùÐÐΪ£¬£¬£¬£¬´óÐͿƼ¼¹«Ë¾ÕýÃæÁÙÊýÊ®ÄêÀ´µÄ×î´óÌôÕ½¡£¡£¡£Òµ½çÊ×´´¡£¡£¡£Õâ·´¹ýÀ´¿ÉÄÜ»áÒý·¢Ììϸ÷µØµÄî¿Ïµ»ú¹¹¼Ó¶¦Á¦´ó¾Ù¶È£¬£¬£¬£¬Å·Ã˺ÍÃÀ¹ú°¸¼þÁ¢°¸ºó¸÷¹ú·´Â¢¶ÏÊÓ²ìÊýĿһֱÔöÌí¾Í֤ʵÎúÕâÒ»µã¡£¡£¡£×ÔAT&TÔÚÕûÕû40Äêǰ·Ö²ðÒÔÀ´£¬£¬£¬£¬Æù½ñΪֹ£¬£¬£¬£¬ÔÚÃÀ¹ú»¹Ã»ÓÐÒ»¼Ò¹«Ë¾ÃæÁÙî¿Ïµ»ú¹¹Ö÷µ¼·Ö²ðµÄ¿ÉÄÜÐÔ¡£¡£¡£¹È¸èÌåÏÖ²î±ðÒâÅ·Ã˵ÄÖ¸¿Ø£¬£¬£¬£¬¶øÆ»¹ûÔòÌåÏÖÃÀ¹úµÄËßËÏÔÚÊÂʵºÍÖ´·¨É϶¼ÊǹýʧµÄ¡£¡£¡£ÏÖÔÚÉв»È·¶¨î¿Ïµ»ú¹¹ÊÇ·ñ»áÐû²¼·Ö²ðÁ£¬£¬£¬ÓÉÓÚËûÃÇÕýÔÚ˼Á¿ÖÖÖÖÑ¡Ôñ£¬£¬£¬£¬ÈκÎÐж¯¶¼¿ÉÄܵ¼Ö·£¿£¿£¿î¡£¡£¡£
https://www.reuters.com/technology/google-apple-breakups-agenda-global-regulators-target-tech-2024-03-24/


¾©¹«Íø°²±¸11010802024551ºÅ