資安事件新聞週報 2019/11/4 ~ 2019/11/8
1.重大弱點漏洞/後門/Exploit/Zero Day
BlueKeep漏洞發生第一波大規模攻擊，引發藍色死亡螢幕
https://www.ithome.com.tw/news/133987
First Cyber Attack 'Mass Exploiting' BlueKeep RDP Flaw Spotted in the Wild
https://thehackernews.com/2019/11/bluekeep-rdp-vulnerability.html
Snyk釋出最新JavaScript框架安全性報告，不少熱門框架模組存在XSS漏洞
https://www.ithome.com.tw/news/134029
JavaScriptCore - Type Confusion During Bailout when Reconstructing Arguments Objects
https://www.exploit-db.com/exploits/47590
ZTE 9000E 權限許可和訪問控制問題漏洞
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3425
多款D-Link產品遠程代碼執行漏洞
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16920
F5 BIG-IP AFM SQL注入漏洞
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6658
Google釋出11月安卓安全修補程式 Pixel手機率先更新
https://www.chinatimes.com/realtimenews/20191105001795-260412?chdtv
Google Patches Critical Flaws in Android's System Component
https://www.securityweek.com/google-patches-critical-flaws-androids-system-component
Android Security Bulletin—November 2019
https://source.android.com/security/bulletin/2019-11-01.html
Chrome 電腦版快更新！Google 發現 2個重大零日漏洞，緊急釋出修補
https://3c.ltn.com.tw/news/38502
Chrome 瀏覽器被發現兩個嚴重漏洞，其中一個已被利用
https://technews.tw/2019/11/05/chorme-use-after-free/
Microsoft Windows Hyper-V遠程代碼執行漏洞（CNVD-2019-38766）
https://portal.msrc.microsoft.com/en-us/security-guidance
Apache Solr 遠程代碼執行漏洞預警
https://www.secpulse.com/archives/117255.html
英大學生髮現亞馬遜漏洞用折扣碼狂購物捐流浪漢
https://www.backchina.com/news/2019/11/02/654041.html
On Halloween night, Google discloses Chrome zero-day exploited in the wild
https://www.zdnet.com/article/halloween-scare-google-discloses-chrome-zero-day-exploited-in-the-wild/#ftag=RSSbaffb68
CVE-2019-15588/Nexus Repository Manager Yum插件遠程命令執行
https://qiita.com/shimizukawasaki/items/41794616f1f2e602e4f5
CVE-2019-15588
https://nvd.nist.gov/vuln/detail/CVE-2019-15588
Upgrade Notice for Customers Using PAN-OS 9.0 and VM-Series on Azure
https://blog.paloaltonetworks.com/2019/10/cloud-pan-os-9-0-and-vm-series-on-azure/
Linux maintainer: Patching side-channel flaws is killing performance
https://nakedsecurity.sophos.com/2019/10/31/linux-maintainer-patching-side-channel-flaws-is-killing-performance/
VMware updates Workspace One with capabilities for new hires
https://www.zdnet.com/article/vmware-updates-workspace-one-with-capabilities-for-new-hires/#ftag=RSSbaffb68
Libarchive vulnerability can lead to code execution on Linux, FreeBSD, NetBSD
https://www.zdnet.com/article/libarchive-vulnerability-can-lead-to-code-execution-on-linux-freebsd-netbsd/#ftag=RSSbaffb68
QNAP NetBak Replicator 4.5.6.0607 - 'QVssService' Unquoted Service Path
https://www.exploit-db.com/exploits/47594
2.銀行/金融/保險/證券/支付系統/ 新聞及資安
臺灣銀行成立資通安全事件應變小組(CSIRT)
https://www.cdns.com.tw/articles/46429
利用惡意程式對銀行自動提款機進行「吐鈔攻擊」的事件頻傳
http://bit.ly/2pwo9oI
資產上兆銀行保險業 金管會要求設資安獨立單位
https://money.udn.com/money/story/5613/4140251
保費幾近去年全年金額 上半年資安險 衝至243件
http://bit.ly/2NzNZQz
新光產：資安應加入保險防護
https://www.chinatimes.com/newspapers/20191104000425-260208?chdtv
保險業資安研討 談轉型趨勢
https://money.udn.com/money/story/5636/4121989
未雨綢繆？俄羅斯擬聯手中印打造獨立清算系統
https://news.sina.com.cn/o/2019-11-04/doc-iicezzrr7063572.shtml
香港金融鬼故屢傳 余偉文：目標3小時內澄清網上謠言
http://bit.ly/2qiG6qP
第一銀行簡訊OTP服務終止公告
https://www.firstbank.com.tw/servlet/fbweb/zh_TW/1454093707296
不再被密碼綁架 中信銀：逾7成APP用戶以指紋、刷臉登入
https://ec.ltn.com.tw/article/breakingnews/2964052
香港豐隆銀行有限公司的偽冒電郵
https://www.hkma.gov.hk/chi/news-and-media/press-releases/2019/10/20191030-3/
俄國主導銀行總部搬到匈牙利 掀國安疑慮
https://www.cna.com.tw/news/aopl/201910290271.aspx
萬一行情火熱 券商遭駭勒索再現高峰
https://ctee.com.tw/news/stock/169270.html
證交所：券商建流量清洗機制因應
https://www.chinatimes.com/newspapers/20191105000229-260202?chdtv
臺“金管會”：6券商遭黑客攻擊 無投資人受影響
https://dailynews.sina.com/bg/tw/chinanews/2019-11-05/doc-ifzqmtky6767156.shtml
28券商遭網攻 證交所：充分掌握訊息及業者應變
https://udn.com/news/story/7251/4148914
券商遭駭 證期局祭八大資安防護措施
https://www.chinatimes.com/realtimenews/20191105004781-260410?chdtv
券商網路下單遭駭勒索贖金 證交所：建立流量清洗機制
https://fnc.ebc.net.tw/FncNews/business/104918
券商遭到DDoS攻擊 證交所三提醒
https://udn.com/news/story/7255/4146235
近日證券期貨業者遭受網路攻擊事件說明
https://www.twse.com.tw/zh/news/newsDetail/ff8080816dddfd6d016e3b00bbd10247
證券期貨業者遭受網路攻擊 證交所：已掌握攻擊訊息並密切注意後續發展
https://www.ettoday.net/news/20191105/1573086.htm
股市大盤指數突破11,000點，有駭客趁機發動DDoS攻擊，癱瘓多家券商網站十多分鐘
https://www.ithome.com.tw/news/134030
6家券商遭駭客攻擊 無投資人受影響
http://pchome.megatime.com.tw/news/cat3/20191105/15729572630349318003.html
28券商遭網攻 證交所：充分掌握訊息及業者應變
https://udn.com/news/story/7251/4148914
中國銀行發布新版跨境電商綜合金融服務方案
http://www.bank-of-china.com/big5/aboutboc/bi1/201911/t20191101_16956137.html
土耳其政府凍結 330 萬個銀行賬戶
https://www.chainnews.com/zh-hant/news/151980760012.htm
防網銀故障釀災 英國會議員籲加稅並監管雲端服務
https://udn.com/news/story/6811/4130756
這些銀行大到不能倒？顧立雄：讓銀行經營體質更健全是好事
http://bit.ly/33jlygv
Open API讓Open Data更安全
http://bit.ly/36AjEdw
過百警察突查「51信用卡」杭州總部 在港上市公司為何人去樓空
http://bit.ly/2Ccb9qX
中信銀櫃員系統大當機 搶修後已恢復服務
https://money.udn.com/money/story/5617/4147686
朱學恒臨櫃繳款碰到網路壅塞 中信銀：30分鐘內全面恢復正常
https://www.ettoday.net/news/20191106/1573525.htm
百年彰銀不只核心系統升級，更準備擁抱微服務架構與容器
https://www.ithome.com.tw/people/133991
三星手機螢幕指紋漏洞 花旗銀行未解除停用
https://www.chinatimes.com/realtimenews/20191106004899-260410?chdtv
數碼監控！殺入金融系統 無法刪紀錄防走資
https://hk.news.appledaily.com/china/realtime/article/20191107/60204493
手機門號跨行轉帳 明年上路
https://money.udn.com/money/story/5648/4151940
騰訊虛擬銀行取得香港牌照 現正籌備區塊鏈虛擬銀行
https://www.chinatimes.com/realtimenews/20191108001806-260409?chdtv
中央銀行成立數位貨幣研究小組 楊金龍：現金仍不會消失
http://www.worldpeoplenews.com/content/news/319676
虛擬銀行WeLab明年初開業
https://orientaldaily.on.cc/cnt/finance/20191108/00202_012.html
臺美首度聯手舉辦大規模網路攻防演練，臺銀行組藍隊聯隊對抗紅隊攻擊
https://www.ithome.com.tw/news/134003
Cyber Criminals Stealing Customer Data By Tricking Bank Employees
https://www.ehackingnews.com/2019/11/cyber-criminals-stealing-customer-data.html?utm_source=dlvr.it&utm_medium=twitter
The Central Bank will strengthen control over IT-security of credit institutions
https://www.ehackingnews.com/2019/10/the-central-bank-will-strengthen.html
Secret Service: Brazilian’s bank data scheme hits Seacoast ATMs
https://www.fosters.com/news/20191031/secret-service-brazilians-bank-data-scheme-hits-seacoast-atms
Giridih police arrests 8 cyber criminals
https://www.dailypioneer.com/2019/state-editions/giridih-police-arrests-8-cyber-criminals.html
3 Nigerians among 5 held for stealing cash from ATM using fake cards
https://timesofindia.indiatimes.com/city/bengaluru/3-nigerians-among-5-held-for-stealing-cash-from-atm-using-fake-cards/articleshow/71912147.cms
NCR Barred Mint, QuickBooks from Banking Platform During Account Takeover Storm
https://krebsonsecurity.com/2019/11/ncr-barred-mint-quickbooks-from-banking-platform-during-account-takeover-storm/
Tips to Accelerating PCI Data Security Standard Projects with Deep Security as a Service
https://blog.trendmicro.com/tips_accelerating-pci-data-security-standard-projects-with-deep-security-as-a-service/
Sustained DDoS Attack on South African Banks Accompanied by Ransom Notes
https://www.cpomagazine.com/cyber-security/sustained-ddos-attack-on-south-african-banks-accompanied-by-ransom-notes/
Sabric says SA banks are under sustained DDoS attack
https://www.moneyweb.co.za/news/south-africa/sabric-says-sa-banks-are-under-sustained-ddos-attack/
SOUTH AFRICAN BANKS RESILIENT IN THE FACE OF LATEST DDOS ATTACK
https://www.sabric.co.za/media-and-news/press-releases/south-african-banks-resilient-in-the-face-of-latest-ddos-attacks/
Magecart Groups Attack Simultaneous Sites in Card-Theft Frenzy
https://threatpost.com/magecart-groups-attack-simultaneous-sites-in-card-theft-frenzy/149872/
PerimeterX Research Team Uncovers New Trend in Magecart Attacks: Multiple Magecart Groups Attacking Simultaneously
https://www.perimeterx.com/blog/multiple-magecart-groups-attacking-simultaneously/#
Two Arrested In Dublin Over ATM Fraud Incidents
https://www.nova.ie/two-arrested-in-dublin-over-atm-fraud-incidents-171187/
RBI Seeks 'Regulatory Sandbox' Applicants
https://www.bankinfosecurity.asia/rbi-seeks-regulatory-sandbox-applicants-a-13362
Cyber Insurance: Benefits and Pitfalls
https://www.bankinfosecurity.asia/cyber-insurance-benefits-pitfalls-a-13356
Romanian man convicted in Cedar Rapids ATM skimming scheme
https://www.thegazette.com/subject/news/public-safety/romica-martuica-romania-convicted-in-atm-skimming-scheme-20191106
Atm spews out free cash out: gelukzakken can go up to 6 hours of taking advantage
https://www.wirenewsfax.com/atm-spews-out-free-cash-out-gelukzakken-can-go-up-to-6-hours-of-taking-advantage
The data of Alfa-Bank's clients is sold on the black market
https://www.ehackingnews.com/2019/11/the-data-of-alfa-banks-clients-is-sold.html
Chinese hackers involved in ATM heist in Nepal sent to jail
https://english.khabarhub.com/2019/07/53526/
3.電子支付/電子票證/行動支付/ pay/新聞及資安
哈薩克斯坦支付系統前9月交易額近600萬億
https://www.inform.kz/cn/9-600_a3580793
Pay Taipei上線一年半!惡評如潮！評價僅兩顆星
https://times.hinet.net/news/22629544
中國、印度、俄羅斯三國間的支付系統有望對接，人民幣支付或進一步提升
http://www.sohu.com/a/350493799_100110525
扎克伯格出席聽證會承認"中國支付系統領先美國"
http://news.stnn.cc/guoji/2019/1024/682476.shtml
中國支付大解禁！支付寶推「國際遊客版App」免綁中國門號
http://bit.ly/2NqOSfE
俄羅斯央行打擊支付服務提供商140家公司非法提供外匯交易服務
http://forex.eastmoney.com/a/201910211266996159.html
已與9家公司簽下MOU 台灣PAY攜手第三方支付
http://bit.ly/2WGwl1R
5分鐘完成一筆財政資金支付濰坊國庫集中支付電子化管理系統上線
http://www.wfnews.com.cn/index/2019-10/17/content_2173383.htm
多家信用卡合作推出一鍵支付系統
http://bit.ly/33c9OfG
Line pay 一卡通被盜領
https://www.ptt.cc/bbs/Lifeismoney/M.1572844569.A.8ED.html
LINE Pay一卡通繳卡費「爆出漏洞」！網友神製條碼器 每期爽賺500點高回饋
https://www.ettoday.net/news/20191027/1566267.htm
台灣行動支付更新傳災情 預計2天排除
https://www.chinatimes.com/realtimenews/20191021004108-260410?chdtv
停止「t wallet 行動支付」APP 服務公告
http://bit.ly/33myPVE
支付寶拓展用戶 遊客赴陸可使用免綁中國手機版
https://www.setn.com/News.aspx?NewsID=630986
傳20間歐銀行聯手推新支付系統抗衡Visa PayPal
http://paper.wenweipo.com/2019/11/07/GJ1911070005.htm
布達佩斯李斯特國際機場提供多種中國支付平台
http://www.sohu.com/a/352060812_162522
搶攻跨國交通支付市場 台灣大車隊導入韓亞電子錢包
https://ec.ltn.com.tw/article/breakingnews/2970302
建立QR Code共同標準為國際趨勢 央行總裁楊金龍：沒有要與民爭利
https://www.ettoday.net/news/20191107/1574381.htm
歐盟：Apple Pay限制商家電子支付方式 恐涉反競爭行為
https://news.cnyes.com/news/id/4407435
人行穆長春：數字貨幣CBDC可作為後備電子支付
https://news.rthk.hk/rthk/ch/component/k2/1490358-20191106.htm
街口、LINE Pay互相轉賬本會期恐難過關
http://www.epochtimes.com/gb/19/11/4/n11632209.htm
台灣金管會：電子支付用戶數達588萬年增近67％
http://www.dsb.cn/108910.html
周小川談第三方支付：金融基礎設施需要滿足監管要求
https://news.sina.com.tw/article/20191108/33247944.html
DDoS 攻撃を示唆して、仮想通貨を要求する脅迫メールについて
https://www.jpcert.or.jp/newsflash/2019103001.html
Alipay open to foreign visitors for first time
https://www.zdnet.com/article/alipay-open-to-foreign-visitors-for-first-time/#ftag=RSSbaffb68
Best Practices for PCI DSS v3.2.1 Network Security Compliance
https://web.tufin.com/hubfs/resources/best-practices-PCI-DSS-v3.2.1-network-security-compliance.pdf
4.虛擬貨幣/區塊鍊相關新聞及資安
創造一個「私人貨幣」並不是解決之道！這個男人比祖克柏更懂加密貨幣
http://news.knowing.asia/news/f209236f-3615-4f6c-a18a-23efb42ce18d
區塊鏈也有漏洞？成都一公司推出全球第一款安檢工具
https://static.cdsb.com/micropub/Articles/201911/55ecf5a151f6b1b0453e4d8c2659ced8.html
區塊鏈結合智慧電網提升能源使用效率
https://www.digitimes.com.tw/iot/article.asp?cat=158&cat1=20&cat2=10&id=0000571348_A0A2MYUL5N9XHM7METSPJ
中國擬推數位貨幣 專家點破背後動機
https://ec.ltn.com.tw/article/breakingnews/2965998
日本公司將發布試行地區加密貨幣
http://www.shangbaoindonesia.com/read/2019/10/20/economy-1571586018
區塊鏈瀏覽器 Brave 漸受歡迎 每月活躍用戶達 800 萬
https://news.cnyes.com/news/id/4398079?exp=b
「穩定幣」衝擊難擋 G7 建議各國探究發行「央行數位貨幣」
https://news.cnyes.com/news/id/4397847
習近平一聲令下，政治局集體學習「區塊鏈」
https://www.storm.mg/article/1890582
肖磊:政治局集體學習區塊鏈 中美角逐科技創新制高點
https://news.sina.com.tw/article/20191026/33092386.html
「雙鏈共舞」銀行加速布局區塊鏈 6家銀行備案14項服務
https://kknews.cc/finance/xgqe5zq.html
採區塊鏈發貨幣 中共想搶第一 恐致金融大亂
http://www.epochtimes.com/b5/19/10/31/n11624715.htm
義大利人愛用比特幣網購，交易量超車VISA、Mastercard
https://www.bnext.com.tw/article/55343/bitcoin-is-a-preferred-payment-option-in-italy-over-visa-mastercard-and-amex
BitMEX 洩露大量用戶電郵 當中有政府部門、教育機構
http://bit.ly/33jHRma
比特大陸在得克薩斯州開設了一個大型加密貨幣礦場
http://bit.ly/34vlURh
頭大!交易軟件Robinhood出現程序漏洞,惊現"無限槓桿
https://www.fx.cool/cn/newsdetail/8338
FB加密幣負責人：比特幣是數位黃金 但不適合當貨幣
https://news.cnyes.com/news/id/4406356
大陸人行：大陸數位貨幣將進入戰國時代
https://www.chinatimes.com/realtimenews/20191106002892-260410?chdtv
【區塊鏈】年輕人，準備好進入證券型代幣市場了嗎
http://bit.ly/2NmkOBE
Law debated allowing confiscation of Bitcoin by the police
https://www.zdnet.com/article/law-debated-allowing-confiscation-of-bitcoin-by-the-police/#ftag=RSSbaffb68
Crypto Heist: Thieves Penetrate Bitcoin ATM Warehouse to Steal 85 Devices
https://www.ccn.com/thieves-penetrate-bitcoin-atm-warehouse-wall/
5.資安事件新聞
A.病毒木馬 / 殭屍網路 / 勒索軟體 / Adware /APT /後門程式
Adwind木馬新變種曝光Google修復Chrome中3個高危漏洞
https://zhuanlan.zhihu.com/p/89524176
Gafgyt新變體威脅超3萬台路由器某國內大廠遭殃
https://www.cnbeta.com/articles/tech/906225.htm
北韓駭客組織HIDDEN COBRA利用之惡意程式HOPLIGHT變種
http://net.nthu.edu.tw/2009/mailing:announcement:20191104_02
變種勒索軟體不但加密檔案，還會變更Windows登入密碼
https://www.ithome.com.tw/news/134040
行動惡意軟體攻擊加劇！2020 網路資安預測 9大關鍵要點
https://3c.ltn.com.tw/news/38542
QNAP NAS遭QSnatch感染，QNAP已提出安全建議以清除惡意程式
https://www.twcert.org.tw/tw/cp-104-3043-0f363-1.html
後門程式利用盜版外掛散佈，感染力強成WordPress最大威脅
https://www.ithome.com.tw/news/134061
拍賣史上最毒筆電！拿「21世紀6大病毒」煉蠱..價格竟飆破XX萬? 網笑翻: HAO123、金山毒霸勒
http://bit.ly/34INlHz
首都大アドレス、最大１万８千件流出か…ＰＣウイルス感染
https://www.yomiuri.co.jp/national/20191102-OYT1T50271/
Emotet Trojan Brings a Malware Scare with Halloween Emails
https://www.bleepingcomputer.com/news/security/emotet-trojan-brings-a-malware-scare-with-halloween-emails/
At least 13 managed service providers were used to push ransomware this year
https://www.zdnet.com/article/at-least-13-managed-service-providers-were-used-to-push-ransomware-this-year/
6 New MSPs and/or Cloud-Based Service Providers Compromised by Ransomware, A Total of 13 for 2019, Reports Armor
https://www.armor.com/reports/new-msps-compromised-reports-armor/
QSnatch Malware Infects Thousands of NAS Devices, Steals Credentials
https://www.bleepingcomputer.com/news/security/qsnatch-malware-infects-thousands-of-nas-devices-steals-credentials/
Ransomware School: The Rise of GandCrab Disciples
https://www.bankinfosecurity.com/ransomware-school-rise-gandcrab-disciples-a-13335
Ransomware: Average Ransom Payout Increases to $41,000
https://www.bankinfosecurity.in/ransomware-average-ransom-payout-increases-to-41000-a-13333
Cybersicherheit in der Schweiz: Die Bedrohungslage ist akut
https://www.it-markt.ch/news/2019-11-04/cybersicherheit-in-der-schweiz-die-bedrohungslage-ist-akut
WhatsApp Pegasus Malware
http://bit.ly/32bD3y6
Antimalware Day 2019: Building a culture of cybersecurity awareness
https://www.welivesecurity.com/2019/11/03/antimalware-day-2019-building-culture-cybersecurity-awareness/
Emotet continues to bypass many email security products
https://www.virusbulletin.com/blog/2019/11/emotet-continues-bypass-many-email-security-products/
Mobile Anti-Malware Market Is Thriving Worldwide | Symantec, Sophos, Mcafee
https://istechnologytrend.com/mobile-anti-malware-market-is-thriving-worldwide-symantec-sophos-mcafee/
Ransomware hits Spanish companies sparking WannaCry panic
https://www.zdnet.com/article/ransomware-hits-spanish-companies-sparking-wannacry-panic/#ftag=RSSbaffb68
BlueKeep attacks are happening, but it's not a worm
https://www.zdnet.com/article/bluekeep-attacks-are-happening-but-its-not-a-worm/#ftag=RSSbaffb68
BlueKeep Attacks Arrive, Bearing Cryptomining Malware
https://www.bankinfosecurity.com/bluekeep-attacks-arrive-bearing-cryptomining-malware-a-13341
Ransomware Gangs' Not-So-Secret Attack Vector: RDP Exploits
https://www.bankinfosecurity.com/ransomware-gangs-not-so-secret-attack-vector-rdp-exploits-a-13342
Ransomware: Average Ransom Payout Increases to $41,000
https://www.bankinfosecurity.com/ransomware-average-ransom-payout-increases-to-41000-a-13333
Analiza techniczna trojana bankowego Cerberus
https://www.cert.pl/news/single/analiza-techniczna-trojana-bankowego-cerberus/
C2 With It All: From Ransomware To Carding
https://blog.talosintelligence.com/2019/11/c2-with-it-all.html
Targeted Ransomware Attacks Hit Several Spanish Companies
https://thehackernews.com/2019/11/everis-spain-ransomware-attack.html
Nemty Ransomware Expands Its Reach, Also Delivered by Trik Botnet
https://www.symantec.com/blogs/threat-intelligence/nemty-ransomware-trik-botnet
Threat Spotlight: Neshta File Infector Endures
https://threatvector.cylance.com/en_us/home/threat-spotlight-neshta-file-infector-endures.html
Ciberataques Ransomware - 04 de noviembre 2019
https://www.dsn.gob.es/en/actualidad/sala-prensa/ciberataques-ransomware-04-noviembre-2019
Canadian Nunavut government systems crippled by ransomware
https://www.zdnet.com/article/canadian-nunavut-government-systems-crippled-by-ransomware/#ftag=RSSbaffb68
Get ready for Trump fake ransomware: ‘trump.exe’ and ‘Trump Screen of Death’
https://www.cso.com.au/article/668307/get-ready-trump-fake-ransomware-trump-exe-trump-screen-death/
Experts: Don't reboot your computer after you've been infected with ransomware
https://www.zdnet.com/article/experts-dont-reboot-your-computer-after-youve-been-infected-with-ransomware/
Wizard Spider Upgrades Ryuk Ransomware to Reach Deep into LANs
https://threatpost.com/wizard-spider-upgrades-ryuk-ransomware/149853/
WIZARD SPIDER Adds New Features to Ryuk for Targeting Hosts on LAN
https://www.crowdstrike.com/blog/wizard-spider-adds-new-feature-to-ryuk-ransomware/
Kaspersky: Indonesia Mencatat Deteksi Mobile Malware Paling Banyak di Asia Tenggara
https://akurat.co/iptek/id-847381-read-kaspersky-indonesia-mencatat-deteksi-mobile-malware-paling-banyak-di-asia-tenggara
Carbanak threat details and protection using Trend Micro products
http://bit.ly/2JUm0tW
Banking Trojan targets users of Australian government services
https://australiancybersecuritymagazine.com.au/banking-trojan-targets-users-of-australian-government-services-2/
Emotet, Trickbot, Ryuk – ein explosiver Malware-Cocktail
https://www.heise.de/security/artikel/Emotet-Trickbot-Ryuk-ein-explosiver-Malware-Cocktail-4573848.html
Emotet resurgence packs in new binaries, Trickbot functions
https://www.zdnet.com/article/emotet-resurgence-packs-in-new-binaries-malicious-functions/#ftag=RSSbaffb68
The Malicious Macros Problem May Be Solved Soon
https://www.bankinfosecurity.asia/malicious-macros-problem-may-be-solved-soon-a-13361
Threat Actors Demonstrate Persistent Interest in ATM Malware
https://www.flashpoint-intel.com/blog/threat-actors-demonstrate-persistent-interest-in-atm-malware/
Emotet - What's Changed
https://www.netscout.com/blog/asert/emotet-whats-changed
Specially Crafted ZIP Files Used to Bypass Secure Email Gateways
https://www.bleepingcomputer.com/news/security/specially-crafted-zip-files-used-to-bypass-secure-email-gateways/
Double Loaded Zip File Delivers Nanocore
https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/double-loaded-zip-file-delivers-nanocore/
Emotet resurgence packs in new binaries, Trickbot functions
https://www.zdnet.com/article/emotet-resurgence-packs-in-new-binaries-malicious-functions/
TA542 Brings Back Emotet with Late September Spike
https://www.darkreading.com/threat-intelligence/ta542-brings-back-emotet-with-late-september-spike/d/d-id/1336302
German Dridex spam campaign is unfashionably large
https://www.virusbulletin.com/blog/2019/11/german-malspam-campaign-unfashionably-large/
B.行動安全 / iPhone / Android /穿戴裝置 /App
美國盟邦的政府官員都是WhatsApp惡意程式的攻擊目標
https://www.ithome.com.tw/news/133960
惡意的監控黑鏡：安全網破洞？WhatsApp駭客入侵風暴
https://global.udn.com/global_vision/story/8664/4138954
WhatsApp漏洞遭駭 20國高官手機被接管
https://www.cdns.com.tw/articles/46934
WhatsApp據報大洩用戶資料 牽連20國政要
http://bit.ly/36tKvrx
中國駭客入侵電信商監看簡訊 誰反中就被鎖定攔截
http://m.match.net.tw/pc/news/international/20191101/5075861
間諜軟體監控手機通訊 印度團體籲訂隱私法
https://money.udn.com/money/story/5599/4140690
超7成金融App存漏洞 監管加碼互金App告別野蠻生長
https://news.sina.com.tw/article/20191106/33216292.html
iOS 用戶也中招？蘋果 App Store 有 17 款 App 藏木馬
https://3c.ltn.com.tw/news/38519
蘋果中鏢！ 17款惡意App藏木馬病毒
https://www.chinatimes.com/realtimenews/20191105001152-260405?chdtv
信通院評測了13萬個金融類App 70%存高危漏洞
https://www.cnbeta.com/articles/tech/906279.htm
TikTok抖音資安存疑 傳美國政府發動調查
https://www.setn.com/News.aspx?NewsID=628537
Google提供Android資安小提醒，簡單幾步維護自身安全
https://www.techbang.com/posts/73938-google-offers-android-alerts-to-keep-yourself-safe-in-a-few-easy-steps
小心錢包莫名被坑一筆！下載破千萬的安卓鍵盤 App 遭爆當小偷
https://3c.ltn.com.tw/news/38510
Android 表情符號鍵盤暗藏惡意訂閱詐騙機制，四千萬用戶受害
https://www.twcert.org.tw/tw/cp-104-3034-25bdf-1.html
Richart再出招 用手機為手機投保
https://m.ctee.com.tw/livenews/aj/a02611002019102319231414?area=
Android NFC漏洞可被黑客拿來傳播植入惡意軟件
https://www.cnbeta.com/articles/tech/906697.htm
駭客利用Android的NFC漏洞，就能在手機上植入惡意程式
https://www.ithome.com.tw/news/133995
Android NFC 功能出現漏洞 Google 建議暫時停用
http://bit.ly/2WOVlUy
用中國手機很危險！《衛報》專訪澳洲資安專家：中共盜取用戶個資、影響觀點、左右選舉
https://musou.watchout.tw/read/fkM0XYMar1Y96qfBE3I7
騰訊將電影情節變成真？指紋留玻璃杯也可解鎖手機
http://bit.ly/2JZgkz1
谷歌Android 移動操作系統中的零日漏洞被攻擊者利用
https://my.oschina.net/u/3585265/blog/3126825
被自己的手機監控？3種個資最容易外洩
https://www.secretchina.com/news/b5/2019/11/08/912894.html
Google找三家安全廠商幫忙檢查Play Store惡意程式
https://www.ithome.com.tw/news/134075
Android bug lets hackers plant malware via NFC beaming
https://www.zdnet.com/article/android-bug-lets-hackers-plant-malware-via-nfc-beaming/#ftag=RSSbaffb68
Govt. Officials in 20 Nations Targeted Via WhatsApp: Report
https://www.bankinfosecurity.com/govt-officials-in-20-nations-targeted-via-whatsapp-report-a-13337
WhatsApp in Plain Sight: Where and How You Can Collect Forensic Artifacts
https://www.group-ib.com/blog/whatsapp_forensic_artifacts
C.事件 / 駭客 / DDOS / APT / 雲端/暗網/徵才 / 國際資安事件
雷射光就能駭入語音裝置！Amazon Echo、Google Home、iPhone 都中鏢
https://www.inside.com.tw/article/18008-iphone-and-homepod-vulnerable-to-line-of-sight-attacks-using-lasers
Akamai：Google Analytics遭網釣駭客用來改善攻擊成效，但同樣也可用來追蹤網釣活動
https://www.ithome.com.tw/news/134074
五福旅遊網站遭受駭客攻擊！網站暫時停止服務
https://m.ctee.com.tw/livenews/aj/a98623002019110713474526?area=
五福旅遊網站遭受駭客攻擊 已於晚間恢復正常
https://m.ctee.com.tw/livenews/aj/a98623002019110719224418?area=
中山大學逾10位兩岸研究學者 電郵疑遭駭3年
https://www.cna.com.tw/news/firstnews/201911070210.aspx
中山大學10餘學者 電郵遭監看3年
https://m.ltn.com.tw/news/life/paper/1330428
中山大學學者電郵遭駭 陸委會籲校方維護資安
https://living.taronews.tw/2019/11/07/521919/
利用系統漏洞創假帳號 逾10大學教授電郵遭監視3年
https://hk.on.cc/hk/bkn/cnt/cnnews/20191107/bkn-20191107183948273-1107_00952_001.html
兩岸關係學者電郵遭駭 中山大學交叉比對揪出可疑帳號
https://udn.com/news/story/7323/4151633
中山大學多名學者電郵遭駭 陸委會質疑兇手就是中國
http://bit.ly/32oBgpj
中山大學教授電郵遭監控 韓國政團召集人廖達琪也受害
https://www.chinatimes.com/realtimenews/20191107005060-260407?chdtv
防堵中共竊密！台學者籲政府補強大學資安
http://bit.ly/34EluIu
卡巴斯基發現 Chrome 0day 安全漏洞，由朝鮮黑客組織 Lazarus 發起
https://www.chainnews.com/zh-hant/news/223218820169.htm
不能再高了！台大生快查成績…教務處系統遭駭人人87分
https://www.setn.com/News.aspx?NewsID=630835
利用BlueKeep漏洞的攻擊被觀察到但它似乎沒那麼可怕
https://www.cnbeta.com/articles/tech/907427.htm
資安人員發現 BlueKeep 漏洞首宗大規模攻擊事件，用以安裝挖礦程式
https://www.twcert.org.tw/tw/cp-104-3042-fa811-1.html
如果網站還有 Flash 內容，未來 Google 搜尋將直接跳過
https://technews.tw/2019/11/04/the-slow-death-of-flash-continues-as-google-begins-to-remove-it-from-search/
Uber向駭客低頭，用加密貨幣支付10萬美元「封口費」...如今卻被罰了1.48億
http://news.knowing.asia/news/55c13d71-a089-4d00-825e-866fe865fd72
害怕客戶技術遭竊，GitLab 討論禁聘中國和俄羅斯員工
http://technews.tw/2019/11/05/gitlab-considers-ban-hire-in-china-and-russia/
繼電子支付網站後· 馬大內部系統無法登入
https://www.sinchew.com.my/content/content_2134531.html
捷克資安公司 Avast 驚傳遭駭
https://www.twcert.org.tw/tw/cp-104-3041-49071-1.html
資安事件推陳出新 咖啡機也會被駭客入侵
https://www.chinatimes.com/realtimenews/20191102003249-260410?chdtv
駭客入侵線上購物事件頻仍 網購4招自保
http://www.epochtimes.com/b5/19/10/29/n11619844.htm
受思科防火牆漏洞影響，美國電廠遭網路攻擊
https://nosec.org/home/detail/3122.html
俄國駭客消除冬奧禁藥紀錄 魚叉式網路釣魚運用最廣
https://www.ettoday.net/news/20191029/1567791.htm
中國大陸京廣多地超2萬台電腦被挖礦，攻擊者利用永恒之藍漏洞橫向擴散
https://www.bishijie.com/shendu_63228
中國警方破跨國電腦罪案拘10人 對逾2000網站植木馬程式
https://hk.on.cc/hk/bkn/cnt/cnnews/20191102/bkn-20191102050532413-1102_00952_001.html
中國邯鄲警方破獲一起特大破壞計算機信息系統案件
http://www.he.xinhuanet.com/xinwen/2019-11/02/c_1125183537.htm
電玩比毒藥還可怕！中國新規定：年輕電玩迷每天只能玩90分、最晚到晚上10點
http://bit.ly/33EOM9C
打擊電玩成癮的絕招？中國嚴令：晚上10點18歲以下「強制下線」
https://global.udn.com/global_vision/story/8662/4149641
報告：中共駭客瞄準6國竊密
http://bit.ly/2pJZFZ6
印度核電公司證實遭北韓網軍入侵核電廠
http://bit.ly/2JV9vP1
印度某核電廠內網被駭客入侵，目前已有一座反應堆被關閉
https://ek21.com/news/tech/155671/
FireEye：駭客集團大量解析電信網路的簡訊流量
https://www.ithome.com.tw/news/133962
傳中國駭客入侵電信商監看簡訊 鎖定反中內容
https://www.cna.com.tw/news/firstnews/201911010269.aspx
中國黑客組織瞄準六國政府機構 竊機密信息
http://www.epochtimes.com/b5/19/11/4/n11633050.htm
開源軟體 Notepad ++ 新版本命名「解放維吾爾族」，遭中國網軍 DDoS攻擊
https://www.inside.com.tw/article/17981-text-editor-notepad-free-uyghur-edition-china-spam
中共推情緒識別系統 專家：比人臉識別更可怕
http://www.epochtimes.com/b5/19/11/3/n11629742.htm
中共新網規 恐危害美國知識產權
http://www.epochtimes.com/b5/19/11/1/n11626698.htm
中共操作輿論戰 傷害民主自由
https://www.ydn.com.tw/News/358841
中共製造國產大客機的祕密
http://www.epochtimes.com/b5/19/10/19/n11598517.htm
中共國家資助的駭客組織截獲了全球短信
https://news.guo.media/zh/9032/
自由之家：中國網路自由度連續四年墊底
https://www.rti.org.tw/news/view/id/2040470
歐盟電子身份識別系統有漏洞，可讓駭客冒充公民身份
https://times.hinet.net/news/22630551
德國外交部長：華為參與5G建設 資安有疑慮
https://www.chinatimes.com/realtimenews/20191105001744-260408?chdtv
美大規模調查生物醫學竊密 涉案多為華裔
https://www.ntdtv.com/b5/2019/11/05/a102700924.html
美內政部停飛陸製無人機
https://udn.com/news/story/12639/4139859
美內政部 停用陸製無人機 曾被國土安全部質疑竊密 含中國零件也禁飛
https://tw.appledaily.com/international/20191102/AA2YEKCF4ZBJSISMUUMLHDFPQM/
美參議員要求國防部拆除中國監控設備
https://www.voacantonese.com/a/rubio-ask-pentagon-to-remove-chinese-cameras-20191106/5156299.html
參議員致函國防部 促拆除現存華製監控設備
https://hk.on.cc/hk/bkn/cnt/amenews/20191107/bkn-20191107130348317-1107_00972_001.html
美企非法進口販售中國製監控設備給美軍！FBI突擊搜索總部 7人被起訴
https://www.ettoday.net/news/20191108/1575020.htm
美國公司訛稱中國製監控設備本地生產 七人被起訴
http://bit.ly/33rqW13
美國總統個人律師及網路安全顧問朱利安尼遭爆網安意識草率 忘記手機密碼竟求助店家
http://bit.ly/2qfGy9h
美國聯邦調查局FBI示警 美反擊中共人海諜戰及網絡諜戰
https://www.ntdtv.com/b5/2019/11/01/a102698392.html
美智庫分析 中國散播假訊息難影響台灣大選
https://www.cna.com.tw/news/firstnews/201911080020.aspx
國安至上！FCC 嚴防華為設備安裝在美國軍事基地附近
https://news.cnyes.com/news/id/4405610
英移民執法部門前負責人:應建聯合防偷渡情報系統
https://3g.163.com/all/article/ET05CEU10001899N.html
分析百位資安專家思考模式！劍橋科學家的 AI 系統清楚抓出網攻所有細節
https://buzzorange.com/techorange/2019/11/05/cambridge-online-security-ai/
iTutorGroup 稱自己是中國公司網路熱議，平台業者恐成法律漏洞
https://technews.tw/2019/11/06/itutorgroup-claims-that-it-is-a-hot-topic-for-chinese-companies-and-that-platform-operators-are-afraid-of-legal-loopholes/
Chinese APT Group Targets Mobile Networks: FireEye Mandiant
https://www.bankinfosecurity.com/chinese-apt-group-targets-mobile-networks-fireeye-mandiant-a-13345
Cyber-attack hits Utah wind and solar energy provider
https://www.zdnet.com/article/cyber-attack-hits-utah-wind-and-solar-energy-provider/#ftag=RSSbaffb68
Facebook, Mozilla, and Cloudflare announce new TLS Delegated Credentials standard
https://www.zdnet.com/article/facebook-mozilla-and-cloudflare-announce-new-tls-delegated-credentials-standard/#ftag=RSSbaffb68
Your WordPress site is at risk: These precautions and plugins can keep it secure
https://www.zdnet.com/article/18-security-precautions-and-plugins-for-your-wordpress-site/#ftag=RSSbaffb68
An inside look at WP-VCD, today's largest WordPress hacking operation
https://www.zdnet.com/article/an-inside-look-at-wp-vcd-todays-largest-wordpress-hacking-operation/
BlueKeep Attacks Arrive, Bearing Cryptomining Malware
https://www.bankinfosecurity.com/bluekeep-attacks-arrive-bearing-cryptomining-malware-a-13341
BlueKeep exploitation activity seen in the wild
https://doublepulsar.com/bluekeep-exploitation-activity-seen-in-the-wild-bd6ee6e599a6
Microsoft warns users to stay alert for more BlueKeep attacks
https://www.zdnet.com/article/microsoft-warns-users-to-stay-alert-for-more-bluekeep-attacks/
Chinese police arrest operators of 200,000-strong DDoS botnet
https://www.zdnet.com/article/chinese-police-arrest-operators-of-200000-strong-ddos-botnet/#ftag=RSSbaffb68
'Soviet Tactics': Russia Tries Prisoner Swap for Hacker
https://www.bankinfosecurity.asia/blogs/soviet-tactics-russia-tries-prisoner-swap-for-hacker-p-2814
Was North Korea Behind Attack at Indian Nuclear Power Plant
https://www.bankinfosecurity.asia/was-north-korea-behind-attack-at-indian-nuclear-power-plant-a-13363
資訊部-資安儲備人員
https://www.104.com.tw/job/6s7eh
D.資料外洩/個資法/GDPR/網路詐騙/網路釣魚/盜刷/假新聞
雄獅個資遭竊團訟敗訴 消基會要上訴
https://www.cna.com.tw/news/ahel/201911010345.aspx
詐騙駭客開採Firefox臭蟲，讓使用者誤以為系統被駭了
https://ithome.com.tw/news/134055
QR Code支付詐騙頻傳 金管會明訂兩大規範
http://bit.ly/36ximQp
漏洞規則、威脅恐嚇，Airbnb 平臺騙局大揭祕
https://www.chainnews.com/zh-hant/articles/919467256352.htm
你的密碼是生日或123456嗎？BBC教你怎麼設計一組不易被破解的好記密碼
https://www.storm.mg/article/1903327
轉乘便利！捷運民權西路站 警逮7詐騙車手
http://bit.ly/2JMXKKp
錢櫃疑個資大外洩 近70消費者接詐騙電話
https://www.chinatimes.com/realtimenews/20191106001740-260402?chdtv
開心唱歌也有事？錢櫃遭駭洩個資 衰男被騙走60萬辛苦錢
https://www.setn.com/News.aspx?NewsID=630899
錢櫃KTV個資外洩！ 詐騙電話「1周35件」遭列高風險平台
https://www.ettoday.net/news/20191106/1573579.htm
疑個資外洩 錢櫃會員逾70人遇詐騙
http://www.ksnews.com.tw/index.php/news/contents_page/0001316795
錢櫃個資外洩 85人K歌被詐
http://bit.ly/2JZhCd4
小心被「盜臉」！個資威脅大魔王：臉部辨識
https://www.cw.com.tw/article/article.action?id=5097552
Booking.com 的網站有漏洞，今天被盜刷了
https://www.backpackers.com.tw/forum/showthread.php?t=10376490
FB再曝隱私漏洞：100位軟體開發者違規訪問用戶數據
https://news.sina.com.tw/article/20191106/33216934.html
Facebook被發現疑用人面辨識 要自拍核實帳號？官方澄清開發動機
http://bit.ly/2pJmaO6
陸「殺豬盤」網戀詐騙！誆單身男女投資騙錢
https://news.tvbs.com.tw/world/1229955
千騙萬騙不離ATM 老梗詐騙莫輕忽
https://times.hinet.net/news/22639852
又來了！Facebook 坦承 Groups API 漏洞讓百名開發人員可存取使用者資料
https://finance.technews.tw/2019/11/07/facebook-groups-api-flaw-exposed-data-to-100-developers/
渣打fb交代「獨立調查」 澄清冇泄客戶資料
http://bit.ly/2K2qNtv
日本經濟新聞遭企業郵件詐騙攻擊，損失超過 32 億日元
https://www.twcert.org.tw/tw/cp-104-3047-7165a-1.html
Canada Credit Union Data Breach Bigger Than First Thought: Desjardins
https://www.securityweek.com/canada-credit-union-data-breach-bigger-first-thought-desjardins
McAfee: Malicious Voicemails Target Office365 Users
https://www.bankinfosecurity.com/mcafee-malicious-voicemails-target-office365-users-a-13327
Scammers are now faking voicemail notifications to steal Office 365 login credentials
https://thenextweb.com/security/2019/10/31/scammers-are-now-faking-voicemail-notifications-to-steal-office-365-login-credentials/
Trio of Web Registrars Disclose 22 Million Accounts Breached
https://www.bankinfosecurity.in/trio-web-registrars-disclose-22-million-accounts-breached-a-13332
Italy's UniCredit: Breach Went Undetected for Four Years
https://www.bankinfosecurity.com/italys-unicredit-breach-went-undetected-for-four-years-a-13347
NCSC Stopped One Million Criminal Frauds
https://www.cybersecurityintelligence.com/blog/ncsc-stopped-one-million-criminal-frauds-4594.html
SSL/TLS Decryption Can Help with GDPR Compliance
https://blog.paloaltonetworks.com/2019/10/network-ssl-decryption-and-gdpr/
Russia’s sovereign internet law comes into force
https://nakedsecurity.sophos.com/2019/11/04/russias-sovereign-internet-law-comes-into-force/
Half of Americans do not believe deepfake news could target them online
https://www.zdnet.com/article/half-of-americans-do-not-believe-deepfake-news-could-target-them-online/#ftag=RSSbaffb68
Business Email Compromise: Battling Advanced Attackers
https://www.bankinfosecurity.com/business-email-compromise-battling-advanced-attackers-a-13353
Phishing Campaign Uses Salary Increase Ploy: Report
https://www.bankinfosecurity.com/phishing-campaign-uses-salary-increase-ploy-report-a-13352
New Credential Phish Targets Employees with Salary Increase Scam
https://cofense.com/new-credential-phish-targets-employees-salary-increase-scam/
Latest BEC Victims: Nikkei, City of Ocala
https://www.bankinfosecurity.com/latest-bec-victims-nikkei-city-ocala-a-13351
Matter concerning transfer of funds at Nikkei Inc.'s US subsidiary
http://www.nikkei.co.jp/nikkeiinfo/en/news/press/597.html
State of Stolen Credentials in the Dark Web from Fortune 500 Companies
https://www.immuniweb.com/blog/stolen-credentials-dark-web-fortune-500.html
Leading Web Domain Name Registrars Disclose Data Breach
https://thehackernews.com/2019/10/domain-name-registrars-hacked.html
5 Places Where Hackers Are Stealthily Stealing Your Data In 2019
https://thehackernews.com/2019/10/hacking-data-breach-protection.html
This is how Google Analytics is abused by phishing scammers
https://www.zdnet.com/article/this-is-how-google-analytics-is-abused-by-phishing-scammers/#ftag=RSSbaffb68
Trend Micro reveals rogue employee sold data of up to 120,000 customers
https://www.zdnet.com/article/trend-micro-reveals-insider-threat-exposing-customer-data/#ftag=RSSbaffb68
Facebook reveals another privacy breach, this time involving developers
https://www.zdnet.com/article/facebook-reveals-another-data-breach-this-time-involving-developers/#ftag=RSSbaffb68
This is the impact of a data breach on enterprise share prices
https://www.zdnet.com/article/this-is-how-a-data-breach-at-your-company-can-hit-share-prices/#ftag=RSSbaffb68
PHISHING DETECTION VIA ANALYTIC NETWORKS
https://blogs.akamai.com/sitr/2019/11/phishing-detection-via-analytic-networks.html
Defenders can discover phishing sites through web analytics IDs
https://www.itworld.com/article/3451987/defenders-can-discover-phishing-sites-through-web-analytics-ids.html
E.研究報告
WebLogic 反序列化漏洞(CVE-2019-2890)分析
https://paper.seebug.org/1069/
防範針對性攻擊( Targeted Attack)入侵的三項建議
https://blog.trendmicro.com.tw/?p=62253
CVE-2019-15846：Exim遠程獲取root權限漏洞分析
https://kknews.cc/code/zy5583q.html
Apache Solr 最新RCE漏洞分析
http://www.sohu.com/a/350953818_354899
Dlink路由器RCE漏洞復現
https://www.jishuwen.com/d/pgDD/zh-tw
分析多款D-Link路由器中未經授權的RCE漏洞
https://www.freebuf.com/vuls/216142.html
uniFuzzer：一款基於Unicorn和LibFuzzer的閉源模糊測試工具
http://www.sohu.com/a/351201968_354899
Android應用邏輯漏洞半自動化挖掘思路
https://zhuanlan.zhihu.com/p/89762770
Web安全-SSRF漏洞利用從淺到深
https://www.cnblogs.com/-qing-/p/11785067.html
Microsoft SharePoint BDC 服務反序列化代碼執行漏洞的分析（CVE-2019-1257）
https://www.4hou.com/vulnerable/21259.html
Penta：一款開源的多合一自動化滲透測試命令行工具
http://www.sohu.com/a/351354060_354899
使用Ghidra對WhatsApp VOIP Stack 溢出漏洞的補丁對比分析
https://www.4hou.com/vulnerable/21141.html
網路攻擊橫向移動說明
https://blog.trendmicro.com.tw/?p=61737
夠Python，一行指令輸出大心
https://cheng-min-i-taiwan.blogspot.com/2019/11/python.html
一行Python代碼畫心型
https://www.twblogs.net/a/5c6ecd89bd9eee7f92eab8e9
查殼好幫手 – Exeinfo PE
https://www.uuu.com.tw/Public/content/article/19/20191028.htm
黑客利用最新的Firefox漏洞誘導用戶尋求“技術支持”
https://www.freebuf.com/news/219216.html
網軍利用谷歌Chrome瀏覽器漏洞，針對朝鮮目標發起水坑攻擊
https://zhuanlan.zhihu.com/p/90018487
谷歌安全研究員發現Libarchive 漏洞影響Linux、FreeBSD和BSD
http://hackernews.cc/archives/28133
增強組織雲端安全，防止資料暴露的六個方法
https://blog.trendmicro.com.tw/?p=62490
CVE-2019-7609 Kibana 遠程代碼執行漏洞攻擊方法和漏洞原理分析
https://www.chainnews.com/zh-hant/articles/866342610095.htm
Chakra漏洞調試筆記5-CVE-2019-0861復現
https://www.anquanke.com/post/id/190533
Pwn2Own競賽第一天就發放195000美元漏洞獎勵
https://nosec.org/home/detail/3143.html
PSIRT Services Framework
https://www.jpcert.or.jp/research/psirtSF.html
Lemon_Duck - IoCs & Attack Scripts
https://github.com/guardicore/labs_campaigns/tree/d8f2cc9d86964bdbfdc035a285e854e7ceca00b3/Lemon_Duck
Top 10 API Management Tools
https://hakin9.org/top-10-api-management-tools/
Let's Learn: In-Depth Reversing of Qakbot "qbot" Banker Part 1
https://www.vkremez.com/2018/07/lets-learn-in-depth-reversing-of-qakbot.html
wuseman/EMAGNET
https://github.com/wuseman/EMAGNET
gchq/CyberChef
https://github.com/gchq/CyberChef
nyxgeek/ntlmscan
https://github.com/nyxgeek/ntlmscan
Analysis of Two Newly Patched Kubernetes Vulnerabilities
https://blog.paloaltonetworks.com/2019/10/cloud-kubernetes-vulnerabilities/
Introducing Cloud Managed Prisma Access
https://blog.paloaltonetworks.com/2019/10/cloud-managed-prisma-access/
Kaspersky identifies mysterious APT mentioned in 2017 Shadow Brokers leak
https://www.zdnet.com/article/kaspersky-identifies-mysterious-apt-mentioned-in-2017-shadow-brokers-leak/#ftag=RSSbaffb68
DarkUniverse – the mysterious APT framework #27
https://securelist.com/darkuniverse-the-mysterious-apt-framework-27/94897/
Kamerka OSINT tool shows your country's internet-connected critical infrastructure
https://www.zdnet.com/article/kamerka-osint-tool-shows-your-countrys-internet-connected-critical-infrastructure/#ftag=RSSbaffb68
ꓘamerka 2.0 aka FIST (Flickr, Instagram, Shodan, Twitter)
https://github.com/woj-ciech/kamerka
Inside the Sophos 2020 Threat Report
https://www.bankinfosecurity.com/interviews/inside-sophos-2020-threat-report-i-4499
BlueKeep exploitation activity seen in the wild
https://doublepulsar.com/bluekeep-exploitation-activity-seen-in-the-wild-bd6ee6e599a6
DNS-over-HTTPS will eventually roll out in all major browsers, despite ISP opposition
https://www.zdnet.com/article/dns-over-https-will-eventually-roll-out-in-all-major-browsers-despite-isp-opposition/#ftag=RSSbaffb68
Playbook Fridays: Component IOC All Data Pull
https://threatconnect.com/blog/playbook-fridays-component-ioc-all-data-pull
F.商業
揮別電商雙11大當機夢魘，momo今年做了哪些準備拚業績、流量都翻倍
http://bit.ly/2PKQvWW
不跟 Chrome 硬拼，微軟發表新版 Edge、Bing 重新定為企業內部專用軟體
https://www.inside.com.tw/article/18000-new-Microsoft-Edge-and-Bing
Team T5深入專研資安 原創研究連美國資安公司都買單
https://www.ithome.com.tw/news/92825
中小企業網路安全設備 研發新世代防火牆
https://www.digitimes.com.tw/tech/dt/n/shwnws.asp?cnlid=&id=0000571967_4BR8U5G47QODYO6U3D07A
Open WebMail 非 Openfind 產品 ，郵件資安防護不容忽視
https://www.openfind.com.tw/taiwan/news_detail.php?news_id=10204
Mozilla to stop supporting sideloaded extensions in Firefox
https://www.zdnet.com/article/mozilla-to-stop-supporting-sideloaded-extensions-in-firefox/#ftag=RSSbaffb68
Check Point發布2020年網路安全趨勢預測
https://www.chinatimes.com/realtimenews/20191105002182-260410?chdtv
Red Hat Enterprise Linux 8.1 adds live Linux kernel patching
https://www.zdnet.com/article/red-hat-enterprise-linux-8-1-adds-live-linux-kernel-patching/#ftag=RSSbaffb68
Zoho hits 50 million business users, launches WorkDrive
https://www.zdnet.com/article/zoho-hits-50-million-business-users-launches-workdrive/#ftag=RSSbaffb68
G.政府
北市資安預算年年升 資安事件年年增
https://www.chinatimes.com/realtimenews/20191101003681-260405?chdtv
北市資安預算增 資安事件跟著增
https://udn.com/news/story/11322/4139782
資安漏洞！議員揭北市府高達27機關資安人力不足
https://news.ltn.com.tw/news/politics/breakingnews/2964850
台美首網路攻防演練 政院資安處：台每月被攻擊3千萬次
https://money.udn.com/money/story/5648/4143093
台美首次舉辦聯合網攻演練！資安處：台灣每月遭攻擊 3000 萬次，比歐洲多上千倍
https://buzzorange.com/techorange/2019/11/05/cyber-security-war/
美台首度網路攻防演練下週登場 實戰測試資
https://living.taronews.tw/2019/10/31/514120/
美台聯手！11/4網路攻防演練逾10國的資安專家參與
https://newtalk.tw/news/view/2019-11-01/320040
台美逾十國網攻實兵演練 美方助台強化資安
https://m.ltn.com.tw/news/politics/breakingnews/2964997
台美網路攻防演練 10餘國參與
https://news.ltn.com.tw/news/politics/paper/1329813
美台創新合作 AIT：強化網路安全確保智財權
https://www.cna.com.tw/news/firstnews/201911020040.aspx
台美合作基礎 AIT：網路安全
http://www.epochtimes.com/b5/19/11/6/n11637417.htm
資安攻防玩真的！政院邀國內外攻擊好手「實兵演練」
https://udn.com/news/story/6656/4147330
美台網路攻防演練 10國測試資安
https://news.pchome.com.tw/politics/idn/20191031/index-57252380388729224001.html
臺美首度聯手舉辦大規模網路攻防演練，臺銀行組藍隊聯隊對抗紅隊攻擊
https://www.ithome.com.tw/news/134003
針對朝鮮？美國和台灣地區首次演練網絡攻防
http://www.hkcna.hk/content/2019/1105/792517.shtml
政院：台美合作辦理資安攻防演練 開創國際資安合作新猷
https://www.ey.gov.tw/Page/9277F759E41CCD91/97b38e63-544c-46d5-a5d5-87350487c4b9
大突破！台美網路軍演將登場 王定宇：兩國首度官方合作
https://www.setn.com/News.aspx?NewsID=628721
美台聯手！11/4網路攻防演練逾10國的資安專家參與
https://zi.media/@newtalktw/post/W2MK2D
網路攻防演練模擬北韓駭客攻擊 AIT：保護民主選舉是主要目標
https://news.ltn.com.tw/news/politics/breakingnews/2966560
美台國際網路攻防演習 4日登場
http://www.worldpeoplenews.com/content/news/319574
台美首度資安實兵演練 進行3天跨國網路攻防
https://www.cna.com.tw/news/firstnews/201911060078.aspx
資安攻防玩真的！政院邀國內外攻擊好手「實兵演練」
https://money.udn.com/money/story/7307/4147330
政府每月遭3000萬次網攻 99%成功攔截
https://m.ltn.com.tw/news/politics/paper/1329814
AIT數位對話論壇 交流台灣資安議題（1） (圖)
http://bit.ly/32t2jQm
AIT數位對話論壇 交流台灣資安議題（2） (圖)
http://bit.ly/2rhEuhu
台美首度資安實兵演練 進行3天跨國網路攻防
https://living.taronews.tw/2019/11/06/520295/
總統：建立安全系統 防選舉被網攻或假訊息攻破
https://www.rti.org.tw/news/view/id/2040400
中國對台網攻嚴重 政院：我們面臨難纏對手
https://news.ltn.com.tw/news/politics/breakingnews/2965007
國軍耗資百餘億建置天眼型警監系統 人臉辨識遭攔下
https://udn.com/news/story/10930/4141612
美軍買大陸DJI空拍機 國軍落實資通紀律支持美製Gopro
https://udn.com/news/story/10930/4141588
台美首度舉行網路攻防演練 AIT：保護選舉是主要挑戰
https://udn.com/news/story/6656/4142979
我與AIT首度演練金融網攻
http://bit.ly/32jRboS
台灣政府網站每月遭攻擊3千萬次 各國來台演練網路攻防大戰一週
https://wp.taronews.tw/2019/11/04/517967/
網攻頻率高居國際前段班 台美合辦國際聯合網路演練
http://bit.ly/2WGXKk4
抵禦境外網攻 美台首度聯合演習
http://bit.ly/33haArV
通訊設備引資安疑慮 立委促把關
https://udn.com/news/story/6656/4144400
TWNIC、TWCERT╱CC年會主題 善用資安聯防 降低資安風險
http://bit.ly/2JQAbjJ
打造資安環境 行政處為受稽單位培訓防護種子
https://www.kmdn.gov.tw/1117/1271/1272/312210/
對台26條 軍聞社IG也遭網軍滲透
http://bit.ly/36InHVg
NCC選前召集全體新聞台「政令宣導」：別搶快、別灌票
https://www.chinatimes.com/realtimenews/20191104003874-260410?chdtv
向已開發國家看齊！科技部盼5年增200億預算充實基礎研究
http://bit.ly/2r68AEy
沈榮津出席資安人培成果發表暨頒獎典禮
http://bit.ly/2Nfjali
金管會修正保險業辦理電子商務應注意事項
http://bit.ly/2ran8D9
金管會公告修正本會排除電子簽章法適用之項目，並自即日生效
http://bit.ly/36CZnnK
台鐵花2千萬辦人臉監控 侵隱私喊卡
http://bit.ly/36xAeL7
楊金龍：央行數位貨幣可能成零售支付最後一哩路
https://www.cna.com.tw/news/afe/201911070161.aspx
中央銀行貨幣與零售支付系統 ―兼論財金公司扮演之角色
https://www.cbc.gov.tw/public/Attachment/911711545071.pdf
資安合作 唐鳳：台美捍衛共同理念
https://udn.com/news/story/6656/4151415
假訊息目的 唐鳳：污染言論環境
http://www.epochtimes.com/b5/19/11/7/n11639900.htm
臺灣AI雲智慧資安升級 提升網路使用環境安全
https://money.udn.com/money/story/10860/4152379
H.ICS/SCADA 工控系統
ZDI將舉辦鎖定工控系統的Pwn2Own駭客競賽
http://pneumatic.ai/?p=226208
保障工業物聯網 (IIoT) 安全：防範醫療界 IIoT 風險
https://blog.trendmicro.com.tw/?p=62218
施耐德電機 成ISA全球網路安全聯盟創始成員
https://udn.com/news/story/7240/4146305
I.教育訓練
TOP 5 Latest Cyber Security Books (2017-2019) | Best & Latest Must-Reads For Any Aspiring or Seasoned Hacker
https://pentestmag.com/top-5-latest-cyber-security-books-2017-2019-best-latest-must-reads-for-any-aspiring-or-seasoned-hacker/
J.物聯網/IOT/人工智慧/車聯網/光聯網/深度學習/機器學習/無人機/人臉辨識
IoT 技術中心斥資上億 德國萊因用物聯三箭打造連網用戶安全體驗
https://www.bnext.com.tw/article/55328/iot_informationsecurity_t%C3%9Cv-rheinland
台電首辦電力資通展開幕 物聯網讓供電更智慧
http://n.yam.com/Article/20191102460070
6.近期資安活動及研討會
BSides Charleston 11/9
https://infosec-conferences.com/events-in-2019/bsides-charleston/
ISDA 白帽駭客入門〈3〉 11/9
https://www.accupass.com/event/1910240847068228620890
Kotlin/Everywhere GDG Taoyuan - 運用 Ktor 建置一個以 Kotlin 打造的後端服務 11/9
https://www.meetup.com/GDGTaoyuan/events/264776152/
資安健診 11/12
https://edu.nchc.org.tw/course/one_course_introduction.asp?lms_auto_course_id=3871&from_course_list_url=course_index
OpenInfra Day Taiwan 11/12
http://openinfra.digitimes.com.tw/
108年政府組態基準(GCB)實作研習 11/12 ~ 11/22
https://register.nccst.nat.gov.tw/Active/registerDetail.do?activeId=1285&activeType=course
CLEAR Cyber Leaders Conference 11/12 ~ 11/13
https://infosec-conferences.com/events-in-2019/clear-cyber-leaders-conference/
108年資安法律案例分享說明會 11/13
https://register.nccst.nat.gov.tw/Active/registerDetail.do?activeId=1286&activeType=conf
HITCON DEFENSE CONTEST 企業資安攻防大賽 & SUMMIT 企業安全會議 2019 11/13
https://hitcon.kktix.cc/events/hitcon-defense-2019?locale=ja
Windows檔案系統及檔案還原 (6hr) 11/14
http://www.tabf.org.tw/Training/CourseDetail.aspx?PID=384541
Digital Internet Summit 11/14
https://infosec-conferences.com/events-in-2019/digital-internet-summit/
INTERFACE – Nebraska 11/14
https://infosec-conferences.com/events-in-2019/interface-nebraska/
2019 資訊安全論壇 11/14
http://events.businesstoday.com.tw/2019/ACSI/#signup-sec
Mozilla 開發者小聚-台灣站 11/15
https://www.accupass.com/event/1910230900235341736900
SecureWV – Hack3rCon 11/15 ~ 11/17
https://infosec-conferences.com/events-in-2019/securewv-hack3rcon/
2019 Hack ‘n’Roll 駭客嘉年華 11/16 ~ 11/17
http://hacknroll.splashthat.com/IThomeBanners
交通大學亥客書院-P006:高階網頁滲透測試 11/16
https://hackercollege.nctu.edu.tw/?p=1092
FS-ISAC Fall Summit 11/17 ~ 11/20
https://infosec-conferences.com/events-in-2019/fs-isac-fall-summit/
Microsoft IoT in Action 11/20
https://www.iotinactionevents.com/event/taipei
LINE將於11月舉辦LINE DEVELOPER DAY 2019 11/20 ~ 11/21
https://www.digitimes.com.tw/tech/dt/n/shwnws.asp?cnlid=14&id=0000570636_HL57CPQM2H1ZHE71YVI2W
Infosecurity ISACA North America Expo and Conference 11/20 ~ 11/21
https://infosec-conferences.com/events-in-2019/isaca-north-america-expo-conference/
檔案特徵值比對與關鍵字搜尋 (2hr) Open Source數位鑑識工具實務操作 (5hr) 11/21
http://www.tabf.org.tw/Training/CourseDetail.aspx?PID=384542
2019 BSI 國際資安標準管理年會 11/22
https://www.accupass.com/event/1910070533451342891420
Trend Micro CTF 2019 // Raimund Genes Cup FINAL / NOVEMBER 23–24, 2019
https://www.trendmicro.com/en_us/campaigns/capture-the-flag.html
資安檢核核心技術及進階技術研討會11月26日至11月28日
http://bit.ly/2TN2UtD
人資人員必修的職安法規定 11/26
https://www.accupass.com/event/1909121441141977826554
模擬案例鑑識分析實務 (6hr) 11/28
http://www.tabf.org.tw/Training/CourseDetail.aspx?PID=384543
Global Cybersecurity Coference 11/28~11/29
https://2019.group-ib.com/
Cybersecurity Framework 擴大資安視野 Seminar CYBERSEC 101 研討會 11/29
https://signupcybersec101.ithome.com.tw/
交通大學亥客書院-B015:惡意程式檢測 11/30
https://hackercollege.nctu.edu.tw/?p=1098
亞洲‧矽谷學院108年免費認證考試 11/30
https://college.asvda.org.tw/
The Dungeons of Hackers Conference 2019 - 駭客的地下城 11/30
https://tdohackerparty.kktix.cc/events/tdoh-conf-2019
Digital Summit Dallas 12/4
https://infosec-conferences.com/events-in-2019/digital-summit-dallas/
Kansas City Cyber Security Conference 12/5
https://infosec-conferences.com/events-in-2019/kc-cyber-security-conference/
CyberMaryland Conference 12/5 ~ 12/6
https://infosec-conferences.com/events-in-2019/cybermaryland-conference/
FutureCon Nashville Cyber Security Conference 12/11
https://infosec-conferences.com/events-in-2019/futurecon-nashville/
Utility Cyber Security Forum December 12/11
https://infosec-conferences.com/events-in-2019/utility-cyber-security-forum-dec/
交通大學亥客書院-A018:企業網域控管－Active Directory攻擊與防禦 12/14
https://hackercollege.nctu.edu.tw/?p=1094
Japan Security Analyst Conference
https://jsac.jpcert.or.jp/
PWN2OWN MIAMI – BRINGING ICS INTO THE PWN2OWN WORLD 2020/1/21~23
https://www.zerodayinitiative.com/blog/2019/10/28/pwn2own-miami-bringing-ics-into-the-pwn2own-world
沒有留言:
張貼留言