微软宣布有关Solorigate攻击活动的剖析报告；；；；NSA宣布黑客伪造身份验证会见云平台的清静咨询

宣布时间 2020-12-20

【剖析报告】


微软宣布有关Solorigate攻击活动的剖析报告

https://www.microsoft.com/security/blog/2020/12/18/analyzing-solorigate-the-compromised-dll-file-that-started-a-sophisticated-cyberattack-and-how-microsoft-defender-helps-protect/


NSA宣布黑客伪造身份验证会见云平台的清静咨询

https://us-cert.cisa.gov/ncas/current-activity/2020/12/17/nsa-releases-cybersecurity-advisory-detecting-abuse-authentication


【威胁情报】


黑客使用伪造的Cyberpunk游戏撒播CoderWare

https://securityaffairs.co/wordpress/112412/malware/fake-cyberpunk-2077-spreads-ransomware.html


【数据泄露】


CRM因Azure Blob设置过失泄露50多万个文件

https://www.theregister.com/2020/12/18/probase_unsecured_azure_blob/


People's Energy遭到攻击，，，，，，27万用户的信息泄露

https://www.bbc.com/news/technology-55350995