Kaspersky披露美国中情局开发的后门Purple Lambert；；；PHP Composer保存下令注入误差

宣布时间 2021-05-01

【威胁情报】


Kaspersky披露美国中情局开发的后门Purple Lambert

https://www.hackread.com/kaspersky-cia-malware-backdoor-capabilities/


FiveHands使用SonicWall VPN中0day针对西欧地区

https://thehackernews.com/2021/04/hackers-exploit-sonicwall-zero-day-bug.html


【勒索软件】


巴西南里约热内卢司法法院系统熏染REvil，，， ，被迫关闭

https://www.bleepingcomputer.com/news/security/brazils-rio-grande-do-sul-court-system-hit-by-revil-ransomware/


QNAP发明针对其NAS的装备的勒索软件Agelocker

https://www.bleepingcomputer.com/news/security/qnap-warns-of-agelocker-ransomware-attacks-on-nas-devices/


【误差补丁】


PHP Composer保存可导致供应链攻击的下令注入误差

https://securityaffairs.co/wordpress/117366/security/php-composer-flaw.html