4月7日热点 - 芬兰第三大数据泄露案，130000余名用户明文密码泄露

 

资讯类

Spring框架中发现的远程代码执行漏洞，快来升级它

https://securityaffairs.co/wordpress/71117/hacking/spring-framework-hack.html

https://thehackernews.com/2018/04/spring-framework-hacking.html

 

芬兰第三大数据泄露案，130000多名用户明文密码泄露

未知的攻击者设法破解了该网站（http://liiketoimintasuunnitelma.com），并窃取了超过130,000名用户的登录用户名和密码，这些用户名和密码以纯文本形式存储在网站中，而不使用任何加密哈希。

https://thehackernews.com/2018/04/helsingin-uusyrityskeskus-hack.html

 

在telegram拒绝交出加密密钥后，俄罗斯彻底阻止电报

https://www.bleepingcomputer.com/news/government/russia-readies-telegram-ban-after-app-refused-to-hand-over-encryption-keys-to-fsb/

https://www.zdnet.com/article/russia-moves-to-block-telegram-after-encryption-key-denial/

 

Microsoft在Office 365中添加了反勒索软件功能

https://www.bleepingcomputer.com/news/microsoft/microsoft-adds-anti-ransomware-features-in-office-365/

https://thehackernews.com/2018/04/microsoft-office-ransomware.html

 

LockCrypt勒索软件由于加密方案存在弱点而被破解

https://www.bleepingcomputer.com/news/security/lockcrypt-ransomware-cracked-due-to-bad-crypto/

 

黑客在像MSN这样的高流量网站上植入浏览器加密矿工，超过500个网站受影响

https://www.bleepingcomputer.com/news/security/cryptojacking-script-makes-it-on-the-msn-portal/

 

也许你不应该使用LinkedIn

Maybe you shouldn’t use LinkedIn

 

一周勒索软件回顾——Office 365文件恢复、勒索软件解密器发布

https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-april-6th-2018-office-365-file-restore-and-decryptors/

 

技术类

【代码审计】SQL二次编码注入漏洞实例（附tamper脚本）

https://mp.weixin.qq.com/s/5lzvyD1V7ligf_JsKrglMA

 

MOZILLA PWN2OWN漏洞详情

https://www.zerodayinitiative.com/blog/2018/4/5/quickly-pwned-quickly-patched-details-of-the-mozilla-pwn2own-exploit

 

通过7个链接漏洞妥善解决ShareFile的内部部署问题

https://blog.fox-it.com/2018/04/06/compromising-sharefile-on-premise-via-7-chained-vulnerabilities/

 

DCShadow – Minimal permissions, Active Directory Deception, Shadowception and more

http://www.labofapenetrationtester.com/2018/04/dcshadow.html

 

Cisco IOS和IOS XE软件智能安装远程执行代码漏洞

https://tools.cisco.com/security/center/publicationListing.x

 

pwntrace——对pwnlib.tubes.process实例使用ltrace，这对于堆的利用很有用

https://github.com/andreafioraldi/pwntrace

 

necp_client_action系统调用中的堆溢出

https://blog.grimm-co.com/post/heap-overflow-in-the-necp_client_action-syscall/

 

Linux内核防御地图

https://github.com/a13xp0p0v/linux-kernel-defence-map