資安事件新聞週報 2020/2/17 ~ 2020/2/21
1.重大弱點漏洞/後門/Exploit/Zero Day
全景公司ServiSign元件存在多個弱點，可導致任意程式碼執行或是任意檔案讀取及刪除
https://www.chtsecurity.com/news/1179d48b-7609-4f67-9d7e-3bac2979c6ce
中華資安國際Red Team團隊發現，國內某證券選股系統具有多項弱點
https://gist.github.com/chtsecurity/d42564a3f92ebe697ae2c69266640529
https://gist.github.com/chtsecurity/5a74ef5445a8aea34904c5691a477534
https://gist.github.com/chtsecurity/d936e2381a0087dddc0cadf7c61a4a7b
Palo Alto PAN-OS 遠端執行程式碼漏洞
https://security.paloaltonetworks.com/CVE-2020-1975
SonicWall SMA設備被曝超危漏洞，易遭受遠程攻擊
https://www.freebuf.com/column/227639.html
Fortinet FortiOS 安全漏洞
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6696
美國五州使用的投票程式Voatz被揪出含有可竄改的漏洞
https://www.ithome.com.tw/news/135839
IBM DB2 阻斷服務漏洞
https://www.hkcert.org/my_url/zh/alert/20021901
IBM Security Identity Manager跨站脚本漏洞
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-4451
JVNVU#99571081 IBM ServeRAID Manager における任意のコード実行が可能な脆弱性
https://jvn.jp/vu/JVNVU99571081/
卡巴斯基：Windows 10升級漏洞並非由公司殺毒工具引起
https://www.cnbeta.com/articles/tech/945341.htm
快下載！一口氣修補99個漏洞 Windows 10 有始以來最大更新
https://newtalk.tw/news/view/2020-02-14/366627
想升級先等等！微軟 Windows 10 安全更新連續爆出 Bug 災情
https://3c.ltn.com.tw/news/39546
Second Windows 10 update is now causing problems by hiding user profiles
https://www.zdnet.com/article/second-windows-10-update-is-now-causing-problems-by-hiding-user-profiles/#ftag=RSSbaffb68
Nearly half of hospital Windows systems still vulnerable to RDP bugs
https://nakedsecurity.sophos.com/2020/02/20/nearly-half-of-hospital-windows-systems-still-vulnerable-to-rdp-bugs/
12,000個Jenkins服務器漏洞被用於放大DDoS攻擊
https://netsecurity.51cto.com/art/202002/610679.htm
OpenSSH adds support for FIDO/U2F security keys
https://www.zdnet.com/article/openssh-adds-support-for-fidou2f-security-keys/#ftag=RSSbaffb68
SweynTooth漏洞影響大量使用了BLE協議的設備
https://nosec.org/home/detail/4114.html
Unknown number of Bluetooth LE devices impacted by SweynTooth vulnerabilities
https://www.zdnet.com/article/unknown-number-of-bluetooth-le-devices-impacted-by-sweyntooth-vulnerabilities/#ftag=RSSbaffb68
Bluetooth bugs – researchers find 10 “Sweyntooth” security holes
https://nakedsecurity.sophos.com/2020/02/14/bluetooth-bugs-researchers-find-10-sweyntooth-security-holes/
Critical XSS vulnerability patched in WordPress plugin GDPR Cookie Consent
https://www.zdnet.com/article/critical-vulnerability-patched-in-gdpr-cookie-consent-wordpress-plugin/#ftag=RSSbaffb68
Oracle Outside In Technology存在未明漏洞
https://www.oracle.com/security-alerts/cpujan2020.html
Oracle WebLogic Server存在未明漏洞
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2519
Oracle Identity Manager存在未明漏洞
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2729
CVE-2020-3937-3939
https://www.chtsecurity.com/news/a791f509-9782-4be1-b71f-22fc619f8215
OpenSIPS 安全漏洞
http://github.com/OpenSIPS/opensips/commit/54e027adfa486cfcf993828512b2e273aeb163c2
Vulnerability Spotlight: Memory corruption, DoS vulnerabilities in CoTURN
https://blog.talosintelligence.com/2020/02/vuln-spotlight-coturn-DoS-memory-feb-2020.html
黑客正利用WordPress中ThemeREX插件的漏洞來接管網站
https://nosec.org/home/detail/4136.html
Apache Tomcat服務器存在文件包含漏洞
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1938
谷歌翻譯服務（Google Translator）的跨站漏洞
https://cloud.tencent.com/developer/article/1587222
Cybermdx：許多醫院沒有針對設備已知重大漏洞進行修補
https://www.ithome.com.tw/news/135943
2.銀行/金融/保險/證券/支付系統/ 新聞及資安
強化業績能力 臺企銀鎖定八大政策金融業務
https://readers.ctee.com.tw/cm/20200214/a12aa12/1040714/c2ba88e402a5fe0d0b0208c88a5d1d1f/share
資訊界「4師1員」職缺現最搶手！純網銀廣發徵才英雄帖
http://bit.ly/2Sz6HM1
國泰推首檔網路資安ETF 3月開募
https://money.udn.com/money/story/5618/4350214
亞洲首檔資安ETF要來了 反駭客概念成投資新趨勢
http://bit.ly/37Hy3Ul
資安指數漲勢更勝納斯達克 資安概念股看俏
https://news.cnyes.com/news/id/4444848
今年首場行庫會報，財部祭四指令
http://bit.ly/37yjRgw
美國國稅局呼籲線上報稅民眾啟用多因素認證
https://www.ithome.com.tw/news/135879
確保營運不中斷 金管會下令銀行採五大防疫措施
https://udn.com/news/story/7238/4353702
以色列耶路撒冷創投JVP在紐約設立資安中心
http://bit.ly/38HNg9w
嚴防疫情延燒 金控業啟動「異地備援」
https://news.cts.com.tw/cts/life/202002/202002191991109.html
Central Bank as the regions with the highest and lowest cybercrime
http://www.kxan36news.com/central-bank-as-the-regions-with-the-highest-and-lowest-cybercrime
Nedbank says 1.7 million customers impacted by breach at third-party provider
https://www.zdnet.com/article/nedbank-says-1-7-million-customers-impacted-by-breach-at-third-party-provider/#ftag=RSSbaffb68
3.電子支付/電子票證/行動支付/ pay/新聞及資安
亞太電 跨國行動支付Q2有望上線
https://money.udn.com/money/story/5612/4355277
你聽過 GtPay 嗎？亞太電信行動支付不只 NFC-SIM 感應支付與手機悠遊卡、信用卡服務，之後還能「跨國行動支付」
http://bit.ly/2SOf9au
行動支付成主流 分析師預測：Apple Pay 5年內將佔全球信用卡交易10%
https://cnews.com.tw/137200214a03/
恩智浦攜手 NTT DoCoMo 與 Sony 發表 UWB 技術行動支付
https://technews.tw/2020/02/11/nxp-ntt-docomo-sony-uwb-mobile-pay/
小確幸！民眾在街口等電子支付帳戶 可省手續費
https://money.udn.com/money/story/5613/4358826
金管會鬆綁電支機構合作帳戶 幫民眾省手續費
https://taronews.tw/2020/02/20/615912/
萊爾富開放icash支付 成為首家可使用4大票證的超商
https://udn.com/news/story/7193/4360092
4.虛擬貨幣/區塊鍊相關新聞及資安
數位時代打擊仿冒：瑞士鐘錶業如何用區塊鏈防偽
https://udn.com/news/story/6871/4342176
用戶報告台灣交易所比特之星出金不順，官方表示 : 系統升級中
http://bit.ly/38wvm9x
MIT：區塊鏈投票系統VOATZ存在一系列漏洞極易受到攻擊
http://bit.ly/37zkqqA
防止虛擬貨幣洗錢！美制定新法管控
https://newtalk.tw/news/view/2020-02-13/366270
bZx駭客事件分析
https://pttdigit.com/digicurrency/M.1582017234.A.D49.html
怎麼透過 Defi 組合做到的？詳細還原轟動全球社群的「bZx」駭客事件始末
https://www.blocktempo.com/analyze-bzx-hacking-process/
DeFi 借貸協議 bZx 再遭套利！產品漏洞損失 64.5 萬美元
https://blockcast.it/2020/02/19/defi-lending-protocol-bzx-has-just-been-exploited-again/
閃電貸款｜駭客第二次對「各 DeFi 產品壓力測試」，從 bZx 再次獲利「2378 ETH」
https://www.blocktempo.com/defi-project-bzx-exploited-for-second-time-in-a-week-loses-630k-in-ether/
比特幣減半倒數：幣價上漲的傳統，誰是被淘汰的礦工
https://www.inside.com.tw/article/18950-bitcoin-price-next-halving
IOTA Trinity錢包漏洞報告，被盜160萬美元
https://0xzx.com/202002141220513402.html
IOTA 錢包爆發代幣遭竊事件！基金會關閉節點進行調查
https://news.cnyes.com/news/id/4442840
Mt.Gox事件受害者有望拿回88％的資金！那些被駭的交易所後來都怎麼了
https://news.knowing.asia/news/abddda59-d60d-4541-9a63-969b20c78177
【Block 週記】以太坊遊戲開發平台 Enjin 上線，遊戲內貨幣與加密貨幣將可通用
https://technews.tw/2020/02/21/block-weekly-20200220/
IOTA cryptocurrency shuts down entire network after wallet hack
https://www.zdnet.com/article/iota-cryptocurrency-shuts-down-entire-network-after-wallet-hack/
Inside J-CAT – Europol’s Joint Cybercrime Action Taskforce
https://portswigger.net/daily-swig/inside-j-cat-europols-joint-cybercrime-action-taskforce
Police bust alleged operator of Bitcoin mixing service Helix
https://nakedsecurity.sophos.com/2020/02/17/police-bust-alleged-operator-of-bitcoin-mixing-service-helix/
5.資安事件新聞
A.病毒木馬 / 殭屍網路 / 勒索軟體 / Adware /APT /後門程式
一年40個美國公部門遭駭客攻擊 遇上勒索病毒時，該付贖金嗎
https://www.cw.com.tw/article/article.action?id=5098988
RobbinHood：利用 Windows 驅動程序漏洞關閉殺軟的勒索軟件
https://www.chainnews.com/zh-hant/articles/899104922855.htm
點開立馬被綁架！ 超強 Android 病毒 竟藏身電子收據
http://bit.ly/2SYBd11
宅經濟招駭客 手機惡意病毒隨網購商品簡訊四處流竄
https://newtalk.tw/news/view/2020-02-17/367847?
您的商品已到貨？手機病毒藏後頭
https://www.chinatimes.com/realtimenews/20200214001601-260412?chdtv
國內出現「訂購商品查詢」手機簡訊夾病毒，點選連結後就成病毒超級傳播者
https://www.techbang.com/posts/76178-your-goods-have-arrived-cell-phone-virus-hidden-behind
小心別亂點！「超強金融木馬病毒」 偽裝電子收據騙你
https://www.ettoday.net/news/20200215/1646250.htm
木馬程式一點就完蛋！攻擊安卓用戶 金融資料、自然人憑證都遭竊
https://cnews.com.tw/137200218a03/
新發現：惡意軟體 Emotet 可透過駭侵鄰近無線網路進行擴散
https://www.twcert.org.tw/tw/cp-104-3341-7a3b2-1.html
挖礦程式使用 Haiduc 駭客工具和 Xhide 應用程式隱藏工具,暴力登入電腦與伺服器
https://blog.trendmicro.com.tw/?p=63218
新電子郵件勒索手法，不付錢就讓你網站廣告被Google封鎖
https://www.ithome.com.tw/news/135892
比特幣勒贖最新手法：用機器人灌爆你的 Google AdSense
https://www.inside.com.tw/article/18946-email-scheme-google-adsense-bitcoin
想用約會 app 尋求新關係?當心找到了手機病毒
https://blog.trendmicro.com.tw/?p=63450
偽裝韓國公平貿易委員會的惡意垃圾郵件,夾帶勒索病毒與竊個資木馬
https://blog.trendmicro.com.tw/?p=63430
CISA：勒索軟體攻陷美國天然氣壓縮公司
https://ithome.com.tw/news/135917
Eclypsium：沒簽章的周邊裝置韌體成為惡意程式溫床
https://times.hinet.net/news/22793158
Malicious Spam Campaign Targets South Korean Users
https://www.trendmicro.com/vinfo/us/security/news/cybercrime-and-digital-threats/malicious-spam-campaign-targets-south-korean-users
超過170萬次下載！Google 一口氣下架逾 500個Chrome 惡意擴充程式
https://3c.ltn.com.tw/news/39542
Google移除逾500個惡意的Chrome擴充程式
https://www.ithome.com.tw/news/135838
500 Chrome Extensions Caught Stealing Private Data of 1.7 Million Users
https://thehackernews.com/2020/02/chrome-extension-malware.html
There's finally a way to remove xHelper, the unremovable Android malware
https://www.zdnet.com/article/theres-finally-a-way-to-remove-xhelper-the-unremovable-android-malware/#ftag=RSSbaffb68
ViperSoftX - New JavaScript Threat
https://www.fortinet.com/blog/threat-research/vipersoftx-new-javascript-threat.html
CISA Issues Multiple Agency Malware Analysis Reports on Hidden Cobra
https://www.fortinet.com/blog/threat-research/cisa-issues-multiple-agency-malware-analysis-reports-on-hidden-cobra.html
US Cyber Command, DHS, and FBI expose new North Korean malware
https://www.zdnet.com/article/us-cyber-command-dhs-and-fbi-expose-new-north-korean-malware/#ftag=RSSbaffb68
North Korean Malicious Cyber Activity
https://www.us-cert.gov/ncas/current-activity/2020/02/14/north-korean-malicious-cyber-activity
AR20-045A : MAR-10265965-1.v1 – North Korean Trojan: BISTROMATH
https://www.us-cert.gov/ncas/analysis-reports/ar20-045a
AR20–045B : MAR-10265965-2.v1 – North Korean Trojan: SLICKSHOES
https://www.us-cert.gov/ncas/analysis-reports/ar20-045b
AR20-045C : MAR-10265965-3.v1 – North Korean Trojan: CROWDEDFLOUNDER
https://www.us-cert.gov/ncas/analysis-reports/ar20-045c
AR20-045D : MAR-10271944-1.v1 – North Korean Trojan: HOTCROISSANT
https://www.us-cert.gov/ncas/analysis-reports/ar20-045d
AR20-045E : MAR-10271944-2.v1 – North Korean Trojan: ARTFULPIE
https://www.us-cert.gov/ncas/analysis-reports/ar20-045e
AR20-045F : MAR-10271944-3.v1 – North Korean Trojan: BUFFETLINE
https://www.us-cert.gov/ncas/analysis-reports/ar20-045f
Rutter's store chain discloses security breach involving POS malware
https://www.zdnet.com/article/rutters-store-chain-discloses-security-breach-involving-pos-malware/#ftag=RSSbaffb68
Ginp mobile Trojan fakes incoming SMS messages
https://www.kaspersky.com/blog/ginp-mobile-banking-trojan/32478/
Coronavirus spam emails are spreading Emotet Malware
https://techau.com.au/coronavirus-spam-emails-are-spreading-emotet-malware/
Malware attack further proof that small health systems are vulnerable
https://searchhealthit.techtarget.com/news/252478672/Malware-attack-further-proof-that-small-health-systems-are-vulnerable
January 2020’s Most Wanted Malware: Coronavirus-themed Spam Spreads Emotet Malware
http://bit.ly/2SQynL8
Sophisticated Emotet malware loader thriving on unsophisticated passwords
https://techxplore.com/news/2020-02-sophisticated-emotet-malware-loader-unsophisticated.html
Beware of hackers planting Valentine’s Day malware
https://www.komando.com/security-privacy/hackers-plant-valentines-day-malware/706654/
LokiBot Impersonates Popular Game Launcher and Drops Compiled C# Code File
https://newsroom.trendmicro.com/blog/security-intelligence/lokibot-impersonates-popular-game-launcher-and-drops-compiled-c-code-fi-1
New paper: LokiBot: dissecting the C&C panel deployments
https://www.virusbulletin.com/blog/2020/02/new-paper-lokibot-dissecting-cc-panel-deployments/
Sextortion Scams Delivered by Emotet Net 10 Times More Than Necurs Sextortion — Here’s Why
https://securityintelligence.com/posts/sextortion-scams-delivered-by-emotet-net-10-times-more-than-necurs-sextortion-heres-why/
Tampa Bay Times hit with Ryuk ransomware attack
https://blog.malwarebytes.com/ransomware/2020/01/tampa-bay-times-hit-with-ryuk-ransomware-attack/
Hamas Android Malware On IDF Soldiers-This is How it Happened
https://research.checkpoint.com/2020/hamas-android-malware-on-idf-soldiers-this-is-how-it-happened/
AZORult spreads as a fake ProtonVPN installer
https://securelist.com/azorult-spreads-as-a-fake-protonvpn-installer/96261/
Banking Trojans and Ransomware — A Treacherous Matrimony Bound to Get Worse
https://securityintelligence.com/posts/banking-trojans-and-ransomware-a-treacherous-matrimony-bound-to-get-worse/
Council returns to using pen and paper after cyberattack
https://nakedsecurity.sophos.com/2020/02/18/council-returns-to-using-pen-and-paper-after-cyberattack/
Malware and HTTPS – a growing love affair
https://nakedsecurity.sophos.com/2020/02/18/malware-and-https-a-growing-love-affair/
Emotet SMiShing Uses Fake Bank Domains in Targeted Attacks, Payloads Hint at TrickBot Connection
https://ibm.co/2P8ktDa
Ransomware attack forces 2-day shutdown of natural gas pipeline
https://nakedsecurity.sophos.com/2020/02/20/ransomware-attack-forces-2-day-shutdown-of-natural-gas-pipeline/
Ransomware Attack Hit US Natural Gas Facility
https://www.bankinfosecurity.com/ransomware-attack-hit-us-natural-gas-facility-a-13740
Cybersecurity Research During the Coronavirus Outbreak and After
https://securelist.com/cybersecurity-research-during-the-coronavirus-outbreak-and-after/96275/
ObliqueRAT: New RAT hits victims' endpoints via malicious documents
https://blog.talosintelligence.com/2020/02/obliquerat-hits-victims-via-maldocs.html
B.行動安全 / iPhone / Android /穿戴裝置 /App
Google Project Zero：三星保護手機的作法反而讓Android不安全
https://ithome.com.tw/news/135827
美國推智慧型手機投票 批評者憂駭客暗中動手腳
https://www.cna.com.tw/news/aopl/202002160115.aspx
亞馬遜Ring啟動強制雙重驗證 防止駭客入侵
https://www.ettoday.net/news/20200219/1648968.htm
Google 點名三星：不必要的改動恐讓 Android 手機不安全
https://3c.ltn.com.tw/news/39564
順豐香港版App疑有保安漏洞 最近使用寄件人資料通晒天
https://www.passiontimes.hk/article/02-19-2020/60178
Google去年阻止79萬款違規程式登上Play Store
https://www.ithome.com.tw/news/135821
Fraudsters using malicious apps to target Kochi’s smartphone users
https://www.nyoooz.com/news/kochi/1433891/fraudsters-using-malicious-apps-to-target-kochis-smartphone-users/
More than 7,700 attacks by threats disguised as dating apps in Africa
https://www.intelligentcio.com/africa/2020/02/12/more-than-7700-attacks-by-threats-disguised-as-dating-apps-in-africa/
Security News This Week: The 'Robo Revenge' App Makes It Easy to Sue Robocallers
https://www.wired.com/story/robo-revenge-apple-malware-security-news/
Signal Is Finally Bringing Its Secure Messaging to the Masses
https://www.wired.com/story/signal-encrypted-messaging-features-mainstream/
Ring to enable 2FA for all user accounts after recent hacks
https://www.zdnet.com/article/ring-to-enable-2fa-for-all-user-accounts-after-recent-hacks/#ftag=RSSbaffb68
Singapore gets three bids for 5G licences
https://www.zdnet.com/article/singapore-gets-three-bids-for-5g-licences/#ftag=RSSbaffb68
C.事件 / 駭客 / DDOS / APT / 雲端/ 暗網/ 徵才 / 國際資安事件
WordPress外掛ThemeGrill Demo Importer可讓駭客清除資料庫，波及20萬網站
https://www.ithome.com.tw/news/135891
戰鬥民族瘋改造身體 竟植入台灣晶片
https://news.ltn.com.tw/news/world/breakingnews/3072243
網站流量暴增要小心？可能是駭客發動廣告勒索攻擊
https://cnews.com.tw/137200219a04/
報告：去年每1分鐘發生16次DDoS攻擊
https://www.ithome.com.tw/news/135912
武漢肺炎效應，IBM退出RSA大會，亞洲黑帽駭客大會延期
https://www.ithome.com.tw/news/135856
世衛也出聲了：小心有關武漢肺炎的網釣郵件
https://www.ithome.com.tw/news/135890
警示! 全球利用安全漏洞的網路攻擊激增
http://bit.ly/2V16Fy5
帳號遭駭客入侵「隱私全曝」 IU罕見動怒：越線是犯罪
https://www.setn.com/news.aspx?NewsID=691014
脫北官員太永浩手機疑遭北韓駭客入侵盜資訊
https://money.udn.com/money/story/5599/4350201
官方推特帳號被盜？以色列國防部貼出撩人正妹照
https://news.ltn.com.tw/news/world/breakingnews/3070024
奧運及奧委會社交網站遭黑客入侵 Twitter：已封鎖受影響帳戶
http://bit.ly/3bJTYgT
英警方呼籲家長一但發現小孩在用Kali Linux、Tor、Discord，應主動通報
https://www.ithome.com.tw/news/135886
網路安全成戰爭武器 休斯頓能源業需高度關注
https://scdaily.com/post/1486
美國兩起駭客攻擊指向同一家網路服務提供商
https://on.wsj.com/2HAdrmI
中國大陸網路資訊內容生態治理規定
http://www.cac.gov.cn/2019-12/20/c_1578375159509309.htm
共軍駭客窮凶惡極 國際社會杜微慎防
https://www.ydn.com.tw/News/373350
【中共的秘密在她電腦裡】讀到全身發抖！她向國際爆料「新疆 2 份關鍵文件」，卻收到死亡威脅、遭駭客攻擊
https://buzzorange.com/2020/02/20/the-whistleblower-of-xinjiang-cases/
美、德情報機關掌控瑞士加密通信公司 多年來竟竊聽多達120國情報機密
https://news.sina.com.tw/article/20200214/34233970.html
盟國若採用華為設備 川普揚言斷情報分享
https://times.hinet.net/topic/22789041
喬治亞上萬網站遇駭 英美盟邦矛頭指向俄國
https://www.cna.com.tw/news/aopl/202002210032.aspx
越南專家構建首個信息安全生態系統
http://n.yam.com/Article/20200220995715
伊朗國家黑客濫用VPN漏洞，入侵全球企業內網植入後門
https://www.secrss.com/articles/17172
Iranian hackers have been hacking VPN servers to plant backdoors in companies around the world
https://www.zdnet.com/article/iranian-hackers-have-been-hacking-vpn-servers-to-plant-backdoors-in-companies-around-the-world/#ftag=RSSbaffb68
Unpatched VPN Servers Hit by Apparent Iranian APT Groups
https://www.bankinfosecurity.com/unpatched-vpn-servers-hit-by-apparent-iranian-apt-groups-a-13733
Israeli soldiers tricked into installing malware by Hamas agents posing as women
https://www.zdnet.com/article/israeli-military-tricked-into-installing-malware-by-hamas-agents-posing-as-women/#ftag=RSSbaffb68
U.S. Charges Huawei with Stealing Trade Secrets from 6 Companies
https://thehackernews.com/2020/02/united-states-china-huawei.html
UK police deny responsibility for poster urging parents to report kids for using Kali Linux
https://www.zdnet.com/article/uk-police-distance-themselves-from-poster-warning-parents-to-report-kids-for-using-kali-linux/#ftag=RSSbaffb68
Singapore to spend $719M beefing up government's cyber, data security systems
https://www.zdnet.com/article/singapore-to-spend-719m-beefing-up-governments-cyber-data-security-systems/#ftag=RSSbaffb68
16 DDoS attacks take place every 60 seconds, rates reach 622 Gbps
https://www.zdnet.com/article/16-ddos-attacks-take-place-every-60-seconds-rates-reach-622-gbps/#ftag=RSSbaffb68
Five years after the Equation Group HDD hacks, firmware security still sucks
https://www.zdnet.com/article/five-years-after-the-equation-group-hdd-hacks-firmware-security-still-sucks/#ftag=RSSbaffb68
Hundreds of Millions of PC Components Still Have Hackable Firmware
https://www.wired.com/story/firmware-hacks-vulnerable-pc-components-peripherals/
Cybersecurity Plan for 2020 US Election Unveiled
https://www.bankinfosecurity.com/cybersecurity-plan-for-2020-us-election-unveiled-a-13732
US Govt Warns Critical Industries After Ransomware Hits Gas Pipeline Facility
https://thehackernews.com/2020/02/critical-infrastructure-ransomware-attack.html
Millions Of Windows And Linux Systems Are Vulnerable To This ‘Hidden’ Cyber Attack
https://www.forbes.com/sites/daveywinder/2020/02/18/millions-of-windows-and-linux-systems-are-vulnerable-to-this-hidden-cyber-attack/
Spoofing Banks is a Balancing Act
https://www.domaintools.com/resources/blog/spoofing-banks-is-a-balancing-act#
ＮＥＣ 約６万人の社員が一斉にテレワーク実施
https://www3.nhk.or.jp/news/html/20200220/k10012293751000.html
Microsoft has a subdomain hijacking problem
https://www.zdnet.com/article/microsoft-has-a-subdomain-hijacking-problem/#ftag=RSSbaffb68
The US Blames Russia's GRU for Sweeping Cyberattacks in Georgia
https://www.wired.com/story/us-blames-russia-gru-sweeping-cyberattacks-georgia/
資安工程師/資深安全專家 (w0012)
http://bit.ly/38F4ODj
產險-資訊安全分析師(內湖)
https://www.104.com.tw/job/6vdbh?jobsource=googlejobs
資安工程師-F75E
https://mail.google.com/mail/u/0/?tab=wm&ogbl#inbox
高級系統維護師(資安專人)
https://m.1111.com.tw/job/91414896/
資安工程師 (i-Security Engineer)
https://www.104.com.tw/job/3q770
D.資料外洩/個資法/GDPR/網路詐騙/網路釣魚/盜刷/假新聞
美台合作科技對抗「假新聞」！AIT：中國靠不實資訊削弱台灣自由民主
https://www.storm.mg/article/2308520
防疫散布假消息最重關4年半？陳其邁：明日會統一規定
https://news.ltn.com.tw/news/life/breakingnews/3072884
留言送口罩？小心有「駭」！
https://news.cnyes.com/news/id/4442938
詐騙手法不斷翻新！FBI公布報告 去年網路犯罪損失金額最多是這類
https://cnews.com.tw/137200215a03/
嘜來鬧！「LINE 2階段認證」是假的 小心帳號被盜
https://tw.appledaily.com/gadget/20200219/P2JQY3SVJBSVNCW6ICY2IBWFXE/
LINE 根本沒有「2 階段密碼認證」！小心釣魚訊息盜帳號
https://3c.ltn.com.tw/news/39579
1070萬酒店住宿資訊泄露：慘遭駭客散布
https://ek21.com/news/tech/179639/
拍下身分證！口罩販賣機免費領 憂個資問題？業者秀代碼「沒有存個資啦」
https://tw.news.appledaily.com/life/20200221/JIMWMIXCRAHUQXJS4TTOC2VBBE/
誰騙誰！男子稱為釣出詐騙集團 杜撰武漢偷渡返國貼文遭逮
https://reurl.cc/nVkGDl
世衛也出聲了：小心有關武漢肺炎的網釣郵件
https://www.ithome.com.tw/news/135890
【 武漢肺炎網路釣魚】 WHO呼籲:只有@who.int 才是來自世衛的信件,@who. com 、@who. org 都是山寨
https://blog.trendmicro.com.tw/?p=63475
Beware of criminals pretending to be WHO
https://www.who.int/about/communications/cyber-security
女po文自爆花15萬武漢偷渡返台 高市警揪出假帳號、追查IP
http://bit.ly/2HvchJ6
波多黎各政府遭釣魚攻擊，損失達 400 萬美元
https://www.twcert.org.tw/tw/cp-104-3363-8df05-1.html
PayPal remains the most‑spoofed brand in phishing scams
https://www.welivesecurity.com/2020/02/14/paypal-remains-most-spoofed-brand-phishing-scams/
How romance scammers break your heart – and your bank account
https://www.welivesecurity.com/2020/02/14/how-romance-scammers-break-your-heart-bank-account/
FBI: Cybercrime losses tripled over the last 5 years
https://www.welivesecurity.com/2020/02/13/fbi-cybercrime-losses-tripled-last-5-years/
Watchdog Agency: Improper Use of Medicare Data Rampant
https://www.bankinfosecurity.com/watchdog-agency-improper-use-medicare-data-rampant-a-13727
On data protection, the UK says it will go it alone. It probably won't.
https://www.zdnet.com/article/on-data-protection-the-uk-says-it-will-go-it-alone-it-probably-wont/
Cyber tips for safe online dating: How to avoid privacy gaffs, exploits, and scams
https://blog.malwarebytes.com/privacy-2/2020/02/cyber-tips-safe-online-dating/
Singapore instructs Facebook to block page access under online falsehoods law
https://www.zdnet.com/article/singapore-instructs-facebook-to-block-page-access-under-online-falsehoods-law/#ftag=RSSbaffb68
Exclusive: Details of 10.6 million MGM hotel guests posted on a hacking forum
https://www.zdnet.com/article/exclusive-details-of-10-6-million-of-mgm-hotel-guests-posted-on-a-hacking-forum/
Scam Alert: You've Been Selected for 'Like of the Year 2020' Cash Prizes
https://thehackernews.com/2020/02/like-of-the-year-scam.html
Премия «Лайк года 2020» награждает фишингом: новая волна масштабной схемы мошенничества
https://www.group-ib.ru/media/like-2020/
DOD DISA discloses data breach
https://www.zdnet.com/article/dod-disa-discloses-data-breach/#ftag=RSSbaffb68
Phishing Campaigns Tied to Coronavirus Persist
https://www.bankinfosecurity.com/phishing-campaigns-tied-to-coronavirus-persist-a-13741
Canadian Government Breaches Exposed Citizens' Data: Report
https://www.bankinfosecurity.com/canadian-government-breaches-exposed-citizens-data-report-a-13739
E.研究報告
【NIST CSF導入關鍵】7步驟打造整體安全防護網，從盤點現況與成熟度評估著手
https://www.ithome.com.tw/news/133172
ChkSender郵件存證與真偽驗證
https://reurl.cc/31GzrX
Pikachu 漏洞靶場系列之 XSS
https://www.chainnews.com/zh-hant/articles/186617425715.htm
使用Burpsuite快速掃描授權漏洞
https://zhuanlan.zhihu.com/p/106927394
Apache Shiro 反序列化漏洞利用工具使用
https://www.colabug.com/2020/0215/7000605/
CVE-2019-17564:Apache dubbo HTTP協議反序列化漏洞分析
https://www.colabug.com/2020/0215/6999555/
高危進攻！黑客可利用sudo獲得root權限
https://juejin.im/entry/5e47903e51882549331ce423
[紅日安全] Web安全第3天– CSRF實戰攻防
https://www.freebuf.com/column/227295.html
[紅日安全]Web安全Day4 – SSRF實戰攻防
https://www.freebuf.com/column/227309.html
[紅日安全]Web安全Day5 – 任意文件上傳實戰攻防
https://www.freebuf.com/column/227315.html
[紅日安全]Web安全Day6 – 業務邏輯漏洞實戰攻防
https://www.freebuf.com/column/227316.html
微軟SQL Server Reporting Services遠程代碼執行漏洞安全風險通告
http://vulsee.com/archives/vulsee_2020/0216_10577.html
文件上傳漏洞學習筆記——upload-labs
https://www.jianshu.com/p/50e2e0fa4f8b
xssi漏洞案例分析+漏洞挖掘
https://xz.aliyun.com/t/7204
CVE-2020-7471 漏洞詳細分析原理以及POC （原創）
https://xz.aliyun.com/t/7218
漏洞分析丨CVE-2020-7471
https://www.colabug.com/2020/0217/7006388/
漏洞復現篇——.htaccess文件解析漏洞
https://blog.csdn.net/weixin_45728976/article/details/104363400
漏洞分析學習之cve-2010-3333
https://xz.aliyun.com/t/7230
德國研究人員發現4GLTE協議新漏洞
https://www.freebuf.com/column/227816.html
Web安全學習之SRC邏輯漏洞挖掘思路和技巧詳解
http://www.sohu.com/a/374284486_472906
危險的外圍設備：利用外設固件漏洞攻擊Windows/Linux電腦
https://www.secrss.com/articles/17240
邏輯漏洞挖掘經驗
https://www.cnblogs.com/thespace/p/12336237.html
「ファイルレス型」攻撃、企業揺さぶる 三菱電機も被害
https://www.nikkei.com/article/DGXMZO55672360U0A210C2EA2000/
不正アクセスによる個人情報と企業機密の流出可能性について（第 3 報）
http://www.mitsubishielectric.co.jp/news/2020/0212-b.pdf
Iranian hackers have been hacking VPN servers to plant backdoors in companies around the world
https://www.zdnet.com/article/iranian-hackers-have-been-hacking-vpn-servers-to-plant-backdoors-in-companies-around-the-world/
Fox Kitten Campaign Widespread Iranian Espionage-Offensive Campaign
https://www.clearskysec.com/wp-content/uploads/2020/02/ClearSky-Fox-Kitten-Campaign-v1.pdf
TugaRecon - Subdomain Enumeration Tool
https://pentestmag.com/tugarecon-subdomain-enumeration-tool/
RED HAWK- All In One Suite For Information Gathering And Vulnerability Scanning
https://hackersonlineclub.com/red-hawk-all-in-one-suite-for-information-gathering-and-vulnerability-scanning/
ViperSoftX - New JavaScript Threat
https://www.fortinet.com/blog/threat-research/vipersoftx-new-javascript-threat.html
What Is a DDoS Attack
https://securityintelligence.com/articles/what-is-a-ddos-attack/
Cookie-nabbing app could have served users side helping of XSS
https://nakedsecurity.sophos.com/2020/02/14/cookie-nabbing-app-could-have-served-users-side-helping-of-xss/
WordPress GDPR Cookie Consent plugin fixed vulnerability.
https://blog.nintechnet.com/wordpress-gdpr-cookie-consent-plugin-fixed-vulnerability/
Updates on WordPress security, Wordfence and what we're cooking in the lab today
https://www.wordfence.com/blog/2020/02/improper-access-controls-in-gdpr-cookie-consent-plugin/
WOOF locker: Unmasking the browser locker behind a stealthy tech support scam operation
https://blog.malwarebytes.com/threat-analysis/2020/01/woof-locker-stealthy-browser-locker-tech-support-scam/
JavaScript Injection Impact
https://hackersonlineclub.com/JavaScript-injection-impact/
Data Backup Strategy: Step By Step Guide for Business
https://hackonology.com/blogs/data-backup-strategy-step-by-step-guide-for-business/
Drone pentesting framework console
https://github.com/dhondta/dronesploit
Small and highly portable detection tests based on MITRE's ATT&CK.
https://github.com/timfrazier1/atomic-red-team
NETSCOUT THREAT INTELLIGENCE REPORT
https://www.netscout.com/threatreport?ls=PR-MKTG&lsd=pr-021820-5
PERILOUS PERIPHERALS: THE HIDDEN DANGERS INSIDE WINDOWS & LINUX COMPUTERS
https://eclypsium.com/2020/2/18/unsigned-peripheral-firmware/
Http-Asynchronous-Reverse-Shell
https://github.com/onSec-fr/Http-Asynchronous-Reverse-Shell
Automated Red Team Infrastructure deployement using Docker
https://github.com/khast3x/Redcloud
BlackPhish
https://github.com/iinc0gnit0/BlackPhish
2019 Cyberthreat Defense Report
https://www.imperva.com/resources/resource-library/lp/2019-cyberthreat-defense-report/
BlueKeep – Exploit Windows (RDP Vulnerability) Remotely
https://linuxsecurityblog.com/2019/10/10/bluekeep-exploit-windows-rdp-vulnerability-remotely/
Pypykatz - Mimikatz implementation in pure Python
https://hakin9.org/pypykatz-mimikatz-implementation-in-pure-python/
日本国内の組織を狙ったマルウエアLODEINFO
https://blogs.jpcert.or.jp/ja/2020/02/LODEINFO.html
From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 + Extras
https://github.com/Varbaek/xsser
Network traffic analysis for IR: Analyzing IoT attacks
https://securityboulevard.com/2020/02/network-traffic-analysis-for-ir-analyzing-iot-attacks/
Chinese hackers have breached online betting and gambling sites
https://www.zdnet.com/article/chinese-hackers-have-breached-online-betting-and-gambling-sites/
Uncovering DRBControl Inside the Cyberespionage Campaign Targeting Gambling Operations
https://documents.trendmicro.com/assets/white_papers/wp-uncovering-DRBcontrol.pdf
CLAMBLING - A New Backdoor Base On Dropbox (EN)
http://www.talent-jump.com/article/2020/02/17/CLAMBLING-A-New-Backdoor-Base-On-Dropbox-en/
Wi-Ploit Exploit Tool
https://hackingpassion.com/wi-ploit-wi-fi-exploit-tool/
Cybersecurity Research During the Coronavirus Outbreak and After
https://securelist.com/cybersecurity-research-during-the-coronavirus-outbreak-and-after/96275/
F.商業
Palo Alto結合容器與無伺服器防護，跨入雲端原生安全應用
https://www.ithome.com.tw/review/135656
中華資安導入Nutanix 企業雲作業系統強化企業資訊安全
https://news.sina.com.tw/article/20200218/34263264.html
5G資安風險大 美方傳擴大封堵華為 衝擊台積電
http://bit.ly/2P5hrQ7
全球遠端工作需求升 台灣微軟佈署兩大高效遠距辦公方案
http://www.ctimes.com.tw/DispNews/tw/Microsoft/%E5%BE%AE%E8%BB%9F/2002181530SL.shtml
勤業眾信：遠距工作增加資安風險，四大關鍵教你如何安心 Work From Home
https://buzzorange.com/techorange/2020/02/17/deloitte-sop/
讓指紋辨識更安全！法國公司推多手指全螢幕FoD技術 盼今年成功量產
https://cnews.com.tw/134200218a03/
全球遠端工作需求升，台灣微軟解決方案為企業把關生產力
https://www.techbang.com/posts/76284-global-demand-for-remote-work-rises-taiwans-microsoft-solutions-for-enterprises-to-control-productivity
Dell 20 億美元出售 RSA
https://reurl.cc/W4jmdZ
強化資安防護 Google Chrome 不用點擊顯示密碼即可複製貼上
https://www.inside.com.tw/article/18960-google-chrome-copy-password
前檢察官轉行當律師 國內首設測謊及數位採證
https://udn.com/news/story/7323/4358425
用APP投票選總統？微軟開源投票程式上線測試 未來可用於大選活動
https://news.sina.com.tw/article/20200220/34289312.html
Microsoft set to bring its antivirus app to iOS and Android sometime this year
https://9to5mac.com/2020/02/20/microsoft-antivirus-software-ios/
G.政府
國防部後備指揮部109年聘雇進用國軍資安鑑測題庫
https://afrc.mnd.gov.tw/AFRCWeb/NewsContent.aspx?sn=12683
108年第4季更新之資通安全專業證照清單
https://nicst.ey.gov.tw/Page/D94EC6EDE9B10E15/7ba35454-3644-4199-828d-cff2f2d077fc
隱私疑慮未解恐成「資安阿基里斯腱」 數位身分證換發倒數，台灣準備好了嗎
https://www.wealth.com.tw/home/articles/24403
【倒數 8 個月換新證件，台灣真準備好了嗎】政府一年被網攻 3.6 億次！學者憂數位身分證成「資安破口」
https://buzzorange.com/2020/02/20/the-concern-about-new-eid/
行政院技術服務中心108 年資安服務廠商評鑑結果
http://bit.ly/2Pc6jkG
71％公務員個資外洩 監察院促請銓敘部檢討
https://news.ltn.com.tw/news/politics/breakingnews/3075158
每3名公務員有2人個資外洩 監院促銓敘部檢討
https://udn.com/news/story/7314/4360450
H.工控系統/SCADA/ICS
Profinet工業通信協議漏洞影響西門子，Moxa等工業設備
https://nosec.org/home/detail/4110.html
JVNVU#95424547 三菱電機製 MELSEC C言語コントローラユニットおよび MELIPC シリーズ MI5000 における複数の脆弱性
https://jvn.jp/vu/JVNVU95424547/
趨勢科技架設仿真模擬工業環境測試駭客攻擊
https://zeekmagazine.com/archives/115956
NEC Aterm WG2600HS 操作系統命令注入漏洞
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-5534
JVN#25766797 Aterm WF1200CR 、WG1200CR および WG2600HS における複数の OS コマンドインジェクションの脆弱性
https://jvn.jp/jp/JVN25766797/
JVN#49410695 Aterm WG2600HS における複数の脆弱性
https://jvn.jp/jp/JVN49410695/
JVNVU#95424547 三菱電機製 MELSEC C言語コントローラユニットおよび MELIPC シリーズ MI5000 における複数の脆弱性
https://jvn.jp/vu/JVNVU95424547/
What the Explosive Growth in ICS-Infrastructure Targeting Means for Security Leaders
https://securityintelligence.com/posts/what-the-explosive-growth-in-ics-infrastructure-targeting-means-for-security-leaders/
I.教育訓練
#筆記分享-金管會防制洗錢與打擊資恐專業人員測驗
https://reurl.cc/W4jNED
零基礎了解CSRF漏洞
https://zhuanlan.zhihu.com/p/107719476
INE - OSCP Security Technology Course
https://reurl.cc/4gEEgv
Cisco Internal Routing Protocols
https://packetlife.net/media/library/40/IOS_Interior_Routing_Protocols.pdf
J.物聯網/IOT/人工智慧/車聯網/光聯網/深度學習/機器學習/無人機/人臉辨識
物聯網資安聯合檢測中心成立，引進 UL IoT 安全評等
https://technews.tw/2020/02/14/hutoushan-innovation-hub-iot-cyber-security-center/
物聯網資安聯合檢測中心成立 引領台灣物聯網裝置接軌國際標準
https://life.taiwan368.com.tw/e_news.php?id=24784
台灣首座IoT資安檢測中心落成！從醫院、農場實測漏洞風險與潛在危害
https://www.bnext.com.tw/article/56597/tcc-iot-ul
為IoT注入資安思維：尚承科技從「晶片內部」做起，提供韌體加密與保護服務
https://meet.bnext.com.tw/articles/view/46093
特斯拉軟件被曝存漏洞，電子膠帶誘使其在限速區超速
https://www.36kr.com/p/5293553
歐盟發布 AI 白皮書！訓練數據、過程皆有規範，將如何衝擊科技產業
https://buzzorange.com/techorange/2020/02/20/european-commission-ai-white-paper/
6.近期資安活動及研討會
Certificate of Cloud Security Knowledge (CCSK) Plus 2/23 ~ 2/24
https://csacongress.org/event/csa-summit-at-rsa-conference-2020/
連網設備的資安風險與信任管理策略 2/25
https://www.caa.org.tw/coursedetail-3272.html
第19屆亞太資安論壇 2/25 ~ 2/26
https://www.informationsecurity.com.tw/Seminar/2020_Seminar/all/
Taipei 暗号通貨 (Cryptocurrency) Meetup 2/26
https://www.meetup.com/Taipei-%E6%9A%97%E5%8F%B7%E9%80%9A%E8%B2%A8-Cryptocurrency-Meetup/events/nrxgwqybcdbjc/
Android Code Club(Taipei) 2/26
https://www.meetup.com/Taiwan-Android-Developer-Study-Group/events/bkzcmrybcdbjc/
區塊鏈電子郵件防詐及網路資安鑑識研討會 2/27
https://www.tca.org.tw/market_info1.php?n=2390
Thinking Thursday 第七場 2/27
https://www.meetup.com/Thinking-Thursday/events/266911452/
邊緣運算介紹與應用 & Let's AIY ( 人工智慧小聚 - Hsinchu#20200304 ) 3/4
https://www.meetup.com/AIA-Hsinchu/events/267713123/
Android Code Club(Taipei) 3/4
https://www.meetup.com/Taiwan-Android-Developer-Study-Group/events/bkzcmrybcfbgb/
「智慧機械與資安解決方案」技術交流媒合會 3/5
https://forms.gle/ZRksvpLu1hDHUm538
Monad 細說從頭！ FunTh#81 3/5
https://www.meetup.com/Functional-Thursday/events/267683150/
Android Code Club(Taipei) 3/11
https://www.meetup.com/Taiwan-Android-Developer-Study-Group/events/bkzcmrybcfbpb/
Scala Taiwan #37 3/18
https://www.meetup.com/Scala-Taiwan-Meetup/events/267899692/
韓國國際安全博覽會 3/18
https://www.twcert.org.tw/tw/cp-105-3230-a3bd4-1.html
數據分析與機器學習案例實務(一)以PM2.5為例 3/23
https://edu.nchc.org.tw/course/one_course_introduction.asp?lms_auto_course_id=3888&from_course_list_url=course_index
Taipei 暗号通貨 (Cryptocurrency) Meetup 3/25
https://www.meetup.com/Taipei-%E6%9A%97%E5%8F%B7%E9%80%9A%E8%B2%A8-Cryptocurrency-Meetup/events/nrxgwqybcfbhc/
交通大學駭客書院 - 緩衝區溢位攻擊與預防 3/28
https://hackercollege.nctu.edu.tw/?p=1141
black ASIA 2020 Singapore 3/31 ~ 4/3
https://www.blackhat.com/asia-20/briefings/schedule/
Kaspersky® Security Analyst Summit 4/6 ~ 4/9
https://thesascon.com/
邊緣計算系統之大數據與深度學習應用 4/10
https://edu.nchc.org.tw/course/one_course_introduction.asp?lms_auto_course_id=3883&from_course_list_url=course_index
第二屆ICANN APAC-TWNIC Engagement Forum 與第34屆TWNIC IP政策資源管理會議 4/16
https://forum.twnic.tw/2020/registration.htm
交通大學駭客書院 -入侵行為發覺與應變指南 4/18
https://hackercollege.nctu.edu.tw/?p=1144
VXCON 2020 - APAC 4/18 ~ 4/19
https://www.vxcon.hk/
2020 Industrial Control Systems (ICS) Cyber Security Conference | Singapore 4/21 ~ 4/23
https://www.icscybersecurityconference.com/singapore/
Taipei 暗号通貨 (Cryptocurrency) Meetup 4/22
https://www.meetup.com/Taipei-%E6%9A%97%E5%8F%B7%E9%80%9A%E8%B2%A8-Cryptocurrency-Meetup/events/nrxgwqybcgbdc/
亞太資訊安全論壇暨展覽會 4/22
https://www.twcert.org.tw/tw/cp-105-3149-70ad7-1.html
交通大學駭客書院 - 基礎網頁安全與滲透測試 4/25
https://hackercollege.nctu.edu.tw/?p=1147
2020 LINE Taiwan Developers Recruitment Day 4/25
https://engineering.linecorp.com/zh-hant/blog/2020-line-taiwan-technical-recruitment-day/
交通大學駭客書院 - 基礎網站安全建構實務 5/16
https://hackercollege.nctu.edu.tw/?p=1151
交通大學駭客書院 - 電子郵件之偽造攻擊與防護措施 5/23
https://hackercollege.nctu.edu.tw/?p=1156
Taipei 暗号通貨 (Cryptocurrency) Meetup 5/27
https://www.meetup.com/Taipei-%E6%9A%97%E5%8F%B7%E9%80%9A%E8%B2%A8-Cryptocurrency-Meetup/events/nrxgwqybchbkc/
交通大學駭客書院 - 進階網頁滲透測試 5/30
https://hackercollege.nctu.edu.tw/?p=1159
邊緣計算系統之大數據與深度學習應用 6/5
https://edu.nchc.org.tw/course/one_course_introduction.asp?lms_auto_course_id=3884&from_course_list_url=course_index
交通大學駭客書院 - 高階網頁滲透測試 6/13 6/20
https://hackercollege.nctu.edu.tw/?p=1161
交通大學駭客書院 - 企業網域控管-Active Directory攻擊與防禦 6/27
https://hackercollege.nctu.edu.tw/?p=1164
CYBERSEC 2020 臺灣資安大會 8/12
https://cyber.ithome.com.tw/
沒有留言:
張貼留言