Ò˼ҷ¨¹ú¹«Ë¾ÓÃÌØ¹¤Èí¼þ²»·¨¼à¿ØÔ±¹¤±»·£¿£¿£¿£¿£¿£¿£¿î120ÍòÃÀÔª£»£»£»£»£»£»£»ÃÀ¹úCVS HealthÊý¾Ý¿âÉèÖùýʧй¶Áè¼Ý10ÒÚÌõ¼Í¼
Ðû²¼Ê±¼ä 2021-06-171.Ò˼ҷ¨¹ú¹«Ë¾ÓÃÌØ¹¤Èí¼þ²»·¨¼à¿ØÔ±¹¤±»·£¿£¿£¿£¿£¿£¿£¿î120ÍòÃÀÔª
Èðµä¼Ò¾ß¼¯ÍÅÒ˼ҷ¨¹ú·Ö¹«Ë¾ÒòʹÓÃÌØ¹¤Èí¼þ²»·¨¼à¿ØÔ±¹¤±»·£¿£¿£¿£¿£¿£¿£¿î120ÍòÃÀÔª¡£¡£¡£¡£¸ÃÊÂÎñ±¬·¢ÔÚ2009ÄêÖÁ2012Äê¼ä£¬£¬£¬£¬£¬£¬Ò˼ҷ¨¹ú¹«Ë¾¿ª·¢ÁËÒ»¸öÌØ¹¤ÏµÍ³À´¼à¿ØÔ±¹¤ºÍÌá³ö¾À·×µÄ¿Í»§¡£¡£¡£¡£¸ÃϵͳΪ¹«Ë¾1996ÄêÖÁ2002ÄêµÄÈÏÕæÈËJean-Louis Baillot½¨ÉèµÄ£¬£¬£¬£¬£¬£¬Æä±»´¦ÒÔÁ½Ä껺Ð̺Í60630ÃÀÔª·£¿£¿£¿£¿£¿£¿£¿î¡£¡£¡£¡£Éó²é¹ÙÌåÏÖ£¬£¬£¬£¬£¬£¬Ò˼ҷ¨¹ú¹«Ë¾Ê¹Óþ¯·½ÐÂÎÅȪԴ£¬£¬£¬£¬£¬£¬Ô¼ÇëÁËÒ»¼Ò˽È˱£°²¹«Ë¾ºÍ˽ÈËÕì̽²»·¨»ñÈ¡ÆäÔ±¹¤µÄÉñÃØÐÅÏ¢¡£¡£¡£¡£¸ÃÐÌÊÂÊÓ²ìÓÚ2012ÄêÆô¶¯£¬£¬£¬£¬£¬£¬Ö±µ½±¾Öܶþ²ÅÏÂÁî·£¿£¿£¿£¿£¿£¿£¿î¡£¡£¡£¡£
ÔÎÄÁ´½Ó£º
https://www.infosecurity-magazine.com/news/ikea-fined-12m-for-spying-on/
2.ÃÀ¹úCVS HealthÊý¾Ý¿âÉèÖùýʧй¶Áè¼Ý10ÒÚÌõ¼Í¼
Ñо¿ÍŶÓÓÚ2021Äê3ÔÂ21ÈÕ·¢Ã÷ÁËÒ»¸ö²»ÊÜÃÜÂë±£»£»£»£»£»£»£»¤µÄÊý¾Ý¿â¡£¡£¡£¡£¾ÓɽøÒ»²½Ñо¿£¬£¬£¬£¬£¬£¬¸ÃÊý¾Ý¿âÓëÃÀ¹úÒ½ÁƱ£½¡¹«Ë¾CVS HealthÓйء£¡£¡£¡£Êý¾Ý¿â¾ÞϸΪ204GB£¬£¬£¬£¬£¬£¬×ܼÆÓÐ1148327940Ìõ¼Í¼£¬£¬£¬£¬£¬£¬°üÀ¨·Ã¿ÍID¡¢»á»°ID¡¢×°±¸ÐÅÏ¢ºÍÈÕ־ϵͳÔõÑù´Óºó¶ËÔËÐеÄÀ¶Í¼µÈÄÚÈÝ£¬£¬£¬£¬£¬£¬ÒÔ¼°ÓйØÒ©Îï¡¢COVID-19ÒßÃçºÍCVSÖݪֲúÆ·µÄÐÅÏ¢¡£¡£¡£¡£CVS HealthÌåÏÖ£¬£¬£¬£¬£¬£¬¸ÃÊý¾Ý¿âÓÉÒ»¸öµÚÈý·½¹©Ó¦ÉÌÔÚÖÎÀí£¬£¬£¬£¬£¬£¬ÏÖÔÚÒѾ±»±£»£»£»£»£»£»£»¤ÆðÀ´¡£¡£¡£¡£
ÔÎÄÁ´½Ó£º
https://www.zdnet.com/article/billions-of-records-belonging-to-cvs-health-exposed-online/
3.ÃÀ¹ú±ûÍ鹩ӦÉÌAmeriGas×Ô¶¯Åû¶Æä½üÆÚµÄÊý¾Ýй¶ÊÂÎñ
ÃÀ¹ú×î´óµÄ±ûÍ鹩ӦÉÌAmeriGas×Ô¶¯Åû¶Æä½üÆÚ±¬·¢µÄÊý¾Ýй¶ÊÂÎñ¡£¡£¡£¡£AmeriGasÔÚÃÀ¹úµÄ50¸öÖÝΪÁè¼Ý200Íò¿Í»§ÌṩЧÀÍ£¬£¬£¬£¬£¬£¬ÓµÓÐ2500¶à¸ö·ÖÏúµã¡£¡£¡£¡£5ÔÂ10ÈÕ£¬£¬£¬£¬£¬£¬ÏòAmeriGasÌṩÔËÊ䲿 (DOT) ºÏ¹æÐ§À͵ũӦÉÌJJ KellerÔÚÆäϵͳÉϼì²âµ½¿ÉÒɻ£¬£¬£¬£¬£¬£¬ºó·¢Ã÷ÆäÔ±¹¤Ôâµ½ÁË´¹ÂÚ¹¥»÷µ¼ÖÂÕÊ»§±»µÁ£¬£¬£¬£¬£¬£¬¸Ã¹«Ë¾Á¬Ã¦×îÏÈÈ·¶¨´Ë´Îй¶µÄ¹æÄ£¡£¡£¡£¡£5ÔÂ21ÈÕ£¬£¬£¬£¬£¬£¬JJ Keller֪ͨAmeriGas´ËÊÂÎñ¿ÉÄÜй¶ÁËAmeriGasµÄ123ÃûÔ±¹¤µÄ¼Í¼£¬£¬£¬£¬£¬£¬°üÀ¨ÊµÑéÊÒID¡¢Éç»áÇå¾²ºÅÂë¡¢¼ÝʻִÕÕºÅÂëºÍ³öÉúÈÕÆÚ¡£¡£¡£¡£
ÔÎÄÁ´½Ó£º
https://www.bleepingcomputer.com/news/security/largest-us-propane-distributor-discloses-8-second-data-breach/
4.ThroughTek P2P SDKÃ÷ÎÄй¶£¬£¬£¬£¬£¬£¬Ó°ÏìÊý°ÙÍòÉãÏñÍ·
CISAÅû¶ÁËThroughTekµÄP2P SDKÖеÄÃ÷ÎÄй¶Îó²î£¬£¬£¬£¬£¬£¬Ó°ÏìÁËÊý°ÙÍò¸öÉãÏñÍ·¡£¡£¡£¡£¸ÃÎó²î×·×ÙΪCVE-2021-32934£¬£¬£¬£¬£¬£¬CVSS v3»ù±¾ÆÀ·ÖΪ9.1¡£¡£¡£¡£¸Ã×é¼þÒѱ»¶à¼ÒÇå¾²ÉãÏñÍ·µÄÔʼװ±¸ÖÆÔìÉÌ (OEM) ÒÔ¼°ÎïÁªÍø×°±¸ÖÆÔìÉÌʹÓ㬣¬£¬£¬£¬£¬Òѱ»×°ÖÃÔÚÊý°ÙÍò¸ö×°±¸ÖУ¬£¬£¬£¬£¬£¬ÀýÈçÓ¤¶ùºÍ³èÎï¼à¿ØÉãÏñÍ·¡¢»úеÈËºÍµç³Ø×°±¸µÈ¡£¡£¡£¡£CISAÌåÏÖ£¬£¬£¬£¬£¬£¬¹¥»÷Õß¿ÉʹÓøÃÎó²î»á¼ûÃô¸ÐÐÅÏ¢£¬£¬£¬£¬£¬£¬ÈçÏà»úÒôƵ/ÊÓÆµÔ´µÈ£¬£¬£¬£¬£¬£¬×èÖ¹ÏÖÔÚ»¹Ã»±»ÔÚҰʹÓᣡ£¡£¡£
ÔÎÄÁ´½Ó£º
https://us-cert.cisa.gov/ics/advisories/icsa-21-166-01
5.ÒÔÉ«Áйú·À¾üǰÕÕÁϳ¤µÄÅÌËã»úÔâµ½ÒÁÀʺڿ͵ÄÈëÇÖ
±¾Öܶþ£¬£¬£¬£¬£¬£¬ÒÔÉ«ÁÐʱ±¨³ÆÒÁÀʺڿ͹¥»÷ÁËÒÔÉ«Áйú·À¾üµÄǰÕÕÁϳ¤µÄÅÌËã»ú£¬£¬£¬£¬£¬£¬²¢»ñµÃÁËËûµÄÕû¸öÅÌËã»úÊý¾Ý¿âµÄ»á¼ûȨÏÞ¡£¡£¡£¡£Channel 10ÌåÏָúڿÍÊÇYaser Balaghi£¬£¬£¬£¬£¬£¬¾Ý³ÆËûÔÚØÊºó´µÅõ×Ô¼ºµÄÐÐΪʱ²»Öª²»¾õµØÁôÏÂÁ˺ۼ££¬£¬£¬£¬£¬£¬µ¼ÖÂÒÁÀÊ×èÖ¹ÁËÕë¶ÔÈ«Çò1800ÈË£¨°üÀ¨ÒÔÉ«Áн¾ü½«¾ü¡¢²¨Ë¹ÍåÈËȨº´ÎÀÕߺÍѧÕߣ©µÄÍøÂçÐж¯¡£¡£¡£¡£ÔÚÒÑÍùµÄÁ½ÄêÖУ¬£¬£¬£¬£¬£¬ÒÔÉ«ÁÐÒ»Ö±ÊÇÐí¶àÍøÂç¹¥»÷µÄÄ¿µÄ¡£¡£¡£¡£
ÔÎÄÁ´½Ó£º
https://news.softpedia.com/news/iran-said-to-hack-former-israeli-army-chief-of-staff-access-his-entire-computer-533222.shtml
6.CybereasonÐû²¼ÆóÒµÔâµ½ÀÕË÷¹¥»÷µÄËðʧµÄÆÊÎö±¨¸æ
CybereasonÐû²¼ÁËÆóÒµÔâµ½ÀÕË÷¹¥»÷µÄËðʧµÄÆÊÎö±¨¸æ¡£¡£¡£¡£±¨¸æÖ¸³ö£¬£¬£¬£¬£¬£¬Æ½¾ùÿ11Ãë¾Í»á±¬·¢Ò»´ÎÀÕË÷Èí¼þ¹¥»÷£¬£¬£¬£¬£¬£¬Ô¤¼Æ2021Äê×éÖ¯µÄËðʧ½«µÖ´ï200ÒÚÃÀÔª£¬£¬£¬£¬£¬£¬±È2020ÄêÔöÌí225%¡£¡£¡£¡£66%µÄ×éÖ¯±¨¸æ³ÆÔÚÀÕË÷Èí¼þ¹¥»÷ºóÊÕÈë·ºÆðËðʧ£»£»£»£»£»£»£»35%ÆóÒµÖ§¸¶ÁË35ÍòÖÁ140ÍòÃÀÔªÊê½ð£¬£¬£¬£¬£¬£¬7%µÄÆóÒµÖ§¸¶µÄÊê½ðÁè¼Ý140ÍòÃÀÔª£»£»£»£»£»£»£»53%×éÖ¯³ÆÆäÆ·ÅÆºÍÉùÓþÊÜË𣬣¬£¬£¬£¬£¬32%×éÖ¯³ÆC¼¶È˲ÅÁ÷ʧ£»£»£»£»£»£»£»26%×éÖ¯±¨¸æ³Æ¹¥»÷µ¼ÖÂÆóÒµÔÚÒ»¶Îʱ¼äÄÚÍêÈ«¹Ø±Õ¡£¡£¡£¡£
ÔÎÄÁ´½Ó£º
https://www.cybereason.com/blog/report-ransomware-attacks-and-the-true-cost-to-business