3月24日每日安全热点 - 多家公司遭勒索软件攻击

Inspired by 360CERT

恶意软件 Malware

Purple Fox恶意软件正大肆攻击Windows设备

https://www.bleepingcomputer.com/news/security/purple-fox-malware-worms-its-way-into-exposed-windows-systems/

 

安全研究 Security Research

H2C Smuggling

https://blog.assetnote.io/2021/03/18/h2c-smuggling/

 

安全工具 Security Tools

越狱iOS设备流量嗅探

https://github.com/doronz88/harlogger

 

安全资讯 Security Information

Clop勒索软件团队已公布部分大学学生及员工信息

https://www.bleepingcomputer.com/news/security/ransomware-gang-leaks-data-stolen-from-colorado-miami-universities/

 

TLS 1.0/1.1正式停用

https://datatracker.ietf.org/doc/rfc8996/

 

安全事件 Security Incident

CNA遭网络攻击并暂时关闭网站

https://www.bleepingcomputer.com/news/security/cna-insurance-firm-hit-by-a-cyberattack-operations-impacted/

 

Stratus遭勒索软件攻击

https://www.bleepingcomputer.com/news/security/high-availability-server-maker-stratus-hit-by-ransomware/

 

Sierra遭勒索软件攻击并被迫停工

https://www.bleepingcomputer.com/news/security/ransomware-attack-shuts-down-sierra-wireless-iot-maker/

 

安全客 Security Geek

红队安全研发轻松学系列之-网络不稳定下的传输设计

https://www.anquanke.com/post/id/234749