資安事件新聞週報 2022/6/13 ~ 2022/6/17

 資安事件新聞週報 2022/6/13  ~  2022/6/17

1.重大弱點漏洞/後門/Exploit/Zero Day
Sophos防火牆3月底的漏洞修補，傳出中國駭客在此之前就已經著手濫用
https://www.volexity.com/blog/2022/06/15/driftingcloud-zero-day-sophos-firewall-exploitation-and-an-insidious-breach/

中國駭客攻擊Sophos防火牆漏洞
https://www.ithome.com.tw/news/151493

Chinese Hackers Exploited Sophos Firewall Zero-Day Flaw to Target South Asian Entity
https://thehackernews.com/2022/06/chinese-hackers-exploited-sophos.html

F5重大資安漏洞已陸續出現嚴重攻擊，請盡快修補及管控
https://www.cc.ntu.edu.tw/chinese/cert/cert20220616.asp

資安事件新聞週報 2022/6/6 ~ 2022/6/10

 資安事件新聞週報 2022/6/6  ~  2022/6/10

1.重大弱點漏洞/後門/Exploit/Zero Day
已修補的SAP商用軟體漏洞遭到濫用
https://onapsis.com/blog/three-actively-exploited-sap-vulnerabilities-identified-onapsis-research-labs

Even the Most Advanced Threats Rely on Unpatched Systems
https://thehackernews.com/2022/06/even-most-advanced-threats-rely-on.html

Windows又有新零時差漏洞DogWalk
https://times.hinet.net/news/23959255

研究人員揭露另一個MSDT零時差漏洞DogWalk
https://twitter.com/j00sean/status/1533889445027536899

繼 Follina 之後，又出現另一個微軟 MSDT 零時差漏洞「DogWalk」
https://technews.tw/2022/06/10/dogwalk-another-microsoft-ignored-msdt-vulnerability-like-follina-gets-unofficial-patch/

有人利用微軟Office的MSHTML、MSDT重大漏洞，在烏克蘭散布Cobalt Strike
https://cert.gov.ua/article/40559

MSDT零時差漏洞再度遭到利用，TA570用於散布惡意軟體QBot
https://www.bleepingcomputer.com/news/security/qbot-malware-now-uses-windows-msdt-zero-day-in-phishing-attacks/

Researchers Warn of Unpatched "DogWalk" Microsoft Windows Vulnerability
https://thehackernews.com/2022/06/researchers-warn-of-unpatched-dogwalk.html

Unpatched Critical Flaws Disclosed in U-Boot Bootloader for Embedded Devices
https://thehackernews.com/2022/06/unpatched-critical-flaws-disclosed-in-u.html

資安事件新聞週報 2022/5/30 ~ 2022/6/3

 資安事件新聞週報 2022/5/30  ~  2022/6/3

1.重大弱點漏洞/後門/Exploit/Zero Day
逾360萬臺MySQL伺服器曝露於網際網路，恐成為攻擊目標
https://www.shadowserver.org/news/over-3-6m-exposed-mysql-servers-on-ipv4-and-ipv6/

Microsoft 已發布安全更新，以解決服務診斷工具（MSDT）中的弱點
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-30190

Windows搜尋通訊協定存在零時差漏洞
https://www.bleepingcomputer.com/news/security/new-windows-search-zero-day-added-to-microsoft-protocol-nightmare/

Office零時差漏洞讓駭客執行惡意指令，關閉巨集也不見得擋得了
https://www.ithome.com.tw/news/151211

研究人員揭露Office零時差漏洞，駭客可藉由RTF檔案觸發
https://www.bleepingcomputer.com/news/security/new-microsoft-office-zero-day-used-in-attacks-to-execute-powershell/

中共國TA413 APT駭客組織正在利用微軟Follina漏洞進行瘋狂攻擊
https://gnews.org/zh-hant/2655908/

資安事件新聞週報 2022/5/23 ~ 2022/5/27

 資安事件新聞週報 2022/5/23  ~  2022/5/27

1.重大弱點漏洞/後門/Exploit/Zero Day
Critical 'Pantsdown' BMC Vulnerability Affects QCT Servers Used in Data Centers
https://thehackernews.com/2022/05/critical-pantsdown-bmc-vulnerability.html

雲達修補存在3年的伺服器BMC韌體漏洞Pantsdown
https://eclypsium.com/2022/05/26/quanta-servers-still-vulnerable-to-pantsdown/

Google：Cytrox開採5個零時差漏洞以植入Predator間諜程式
https://www.ithome.com.tw/news/151066

思科修補的IOS XR路由器作業系統軟體零時差漏洞，已出現攻擊行動
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-redis-ABJyE5xK

Zyxel修補防火牆、無線基地臺、AP控制器漏洞
https://www.zyxel.com/tw/zh/support/multiple-vulnerabilities-of-firewalls-AP-controllers-and-APs.shtml

VMware Vulnerabilities Exploited in the Wild (CVE-2022-22954 and Others)
https://unit42.paloaltonetworks.com/cve-2022-22954-vmware-vulnerabilities/

資安事件新聞週報 2022/5/16 ~ 2022/5/20

 資安事件新聞週報 2022/5/16  ~  2022/5/20

1.重大弱點漏洞/後門/Exploit/Zero Day
Oracle Security Alert for CVE-2022-21500
https://www.oracle.com/security-alerts/alert-cve-2022-21500.html

SonicWall修補SSL VPN設備的高風險漏洞
https://www.sonicwall.com/support/knowledge-base/security-notice-sma-1000-series-unauthenticated-access-control-bypass/220510172939820/

Microsoft 推出 2022 年 5 月 Patch Tuesday 資安更新修補包
https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=9861

微軟發佈5月份安全性公告
https://msrc.microsoft.com/update-guide/deployments

三個月前修補的SharePoint漏洞被研究人員繞過，微軟再度進行修補
https://starlabs.sg/blog/2022/05/new-wine-in-old-bottle-microsoft-sharepoint-post-auth-deserialization-rce-cve-2022-29108/

Windows Local Security Authority(LSA) 存在高風險漏洞(CVE-2022-26925)
https://www.klcg.gov.tw/tw/education/3522-255125.html

Adobe 已發布安全更新，以解決多個 Adobe 產品中的弱點
https://www.cisa.gov/uscert/ncas/current-activity/2022/05/12/adobe-releases-security-updates-multiple-products

High-Severity Bug Reported in Google's OAuth Client Library for Java
https://thehackernews.com/2022/05/high-severity-bug-reported-in-googles.html

VMware Releases Patches for New Vulnerabilities Affecting Multiple Products
https://thehackernews.com/2022/05/vmware-releases-patches-for-new.html

VMware修補旗下產品的身分驗證繞過漏洞，美國要求公部門限期完成修補
https://www.bleepingcomputer.com/news/security/vmware-patches-critical-auth-bypass-flaw-in-multiple-products/

資安事件新聞週報 2022/5/9 ~ 2022/5/13

 資安事件新聞週報 2022/5/9  ~  2022/5/13

1.重大弱點漏洞/後門/Exploit/Zero Day
Cisco 近日發布 NFV 基礎軟體的安全性更新
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-NFVIS-MUL-7DySRX9

駭客透過F5的BIG-IP重大漏洞進行破壞性攻擊，意圖清除該系統上的所有檔案
https://www.bleepingcomputer.com/news/security/critical-f5-big-ip-vulnerability-targeted-by-destructive-attacks/

F5 Networks之BIG-IP產品存在高風險安全漏洞(CVE-2022-1388)
https://www.klcg.gov.tw/tw/education/3522-254843.html

F5 修補重大的BIG-IP遠端執行漏洞，概念性驗證攻擊程式即將現身
https://www.ithome.com.tw/news/150831

F5 BIG-IP 16.0.x - Remote Code Execution (RCE)
https://www.exploit-db.com/exploits/50932

兩家資安業者發現BIG-IP系統重大漏洞極為容易利用，呼籲用戶儘速修補
https://www.bleepingcomputer.com/news/security/exploits-created-for-critical-f5-big-ip-flaw-install-patch-immediately/

HP修補逾200款HP電腦與筆電的韌體漏洞，若不修補，恐被攻擊者取得作業系統核心權限執行程式碼
https://www.bleepingcomputer.com/news/security/hp-fixes-bug-letting-attackers-overwrite-firmware-in-over-200-models/

HP修補波及逾200款裝置的BIOS漏洞
https://www.ithome.com.tw/news/150889

資安事件新聞週報 2022/5/2 ~ 2022/5/6

 資安事件新聞週報 2022/5/2  ~  2022/5/6

1.重大弱點漏洞/後門/Exploit/Zero Day
F5 BIG-IP 多版本存在安全性弱點
https://support.f5.com/csp/article/K23605346

Cisco 近日發布更新以解決多個產品的安全性弱點
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-security-bypass-JhOd29Gg

Linux 系統拉警報！全新 Nimbuspwn 漏洞讓駭客成功獲取系統最高權限
https://technews.tw/2022/05/03/new-nimbuspwn-linux-vulnerability-gives-hackers-root-privileges/

Google修補Chrome逾30個漏洞，當中7個存在重大風險
https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html

Google Releases Android Update to Patch Actively Exploited Vulnerability
https://thehackernews.com/2022/05/google-releases-android-update-to-patch.html

資安事件新聞週報 2022/4/25 ~ 2022/4/29

 資安事件新聞週報 2022/4/25  ~  2022/4/29

1.重大弱點漏洞/後門/Exploit/Zero Day
Cisco 近日發布更新以解決多個產品的安全性弱點
https://tools.cisco.com/security/center/publicationListing.x

惡意軟體檢測平臺VirusTotal出現RCE漏洞
https://www.cysrc.com/blog/virus-total-blog/

仍有大量用戶使用存在Log4Shell漏洞的Log4j
https://www.rezilion.com/log4shell-4-months-later/

又有駭客鎖定4月初VMware公布身分驗證系統的漏洞，發動惡意軟體攻擊
https://blog.morphisec.com/vmware-identity-manager-attack-backdoor

資安事件新聞週報 2022/4/18 ~ 2022/4/22

 資安事件新聞週報 2022/4/18  ~  2022/4/22

1.重大弱點漏洞/後門/Exploit/Zero Day
Oracle Critical Patch Update for April 2022
https://www.oracle.com/corporate/security-practices/assurance/vulnerability/security-fixing.html

Juniper 近日發布更新以解決多個產品的安全性弱點
https://supportportal.juniper.net/s/global-search/%40uri?language=en_US#sort=date%20descending&f:ctype=[Security%20Advisories]
https://supportportal.juniper.net/s/article/2022-04-Security-Bulletin-Contrail-Networking-Multiple-Vulnerabilities-have-been-resolved-in-Contrail-Networking-release-2011-L4?language=en_US

思科修補可繞過身分認證的無線網路控制器韌體漏洞
https://www.ithome.com.tw/news/150464

思科資安解決方案的管理遠端存取機制存在漏洞，恐被攻擊者竊取管理員帳密
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-uva-static-key-6RQTRs4c

Cisco Releases Security Patches for TelePresence, RoomOS and Umbrella VA
https://thehackernews.com/2022/04/cisco-releases-security-patches-for.html

資安事件新聞週報 2022/4/11 ~ 2022/4/15

 資安事件新聞週報 2022/4/11  ~  2022/4/15

1.重大弱點漏洞/後門/Exploit/Zero Day
Apple 緊急發布2個零日漏洞補丁
https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=9796

Critical Auth Bypass Bug Reported in Cisco Wireless LAN Controller Software
https://thehackernews.com/2022/04/critical-auth-bypass-bug-reported-in.html

Microsoft Issues Patches for 2 Windows Zero-Days and 126 Other Vulnerabilities
https://thehackernews.com/2022/04/microsoft-issues-patches-for-2-windows.html

Critical LFI Vulnerability Reported in Hashnode Blogging Platform
https://thehackernews.com/2022/04/critical-lfi-vulnerability-reported-in.html

網頁伺服器Nginx傳出與LDAP有關的零時差漏洞
https://securityonline.info/nginx-zero-day-rce-vulnerability-alert/

NGINX Shares Mitigations for Zero-Day Bug Affecting LDAP Implementation
https://thehackernews.com/2022/04/nginx-shares-mitigations-for-zero-day.html

資安事件新聞週報 2022/4/4 ~ 2022/4/8

 資安事件新聞週報 2022/4/4  ~  2022/4/8

1.重大弱點漏洞/後門/Exploit/Zero Day
Beastmode DDoS Botnet Exploiting New TOTOLINK Bugs to Enslave More Routers
https://thehackernews.com/2022/04/beastmode-ddos-botnet-exploiting-new.html

CISA Warns of Active Exploitation of Critical Spring4Shell Vulnerability
https://thehackernews.com/2022/04/cisa-warns-of-active-exploitation-of.html

Spring Core出現零時差遠端程式攻擊弱點
https://tanzu.vmware.com/security/cve-2022-22950
https://tanzu.vmware.com/security/cve-2022-22963
https://thehackernews.com/2022/03/unpatched-java-spring-framework-0-day.html?fbclid=IwAR2Fg7nYqASDEY1QJXVDn1OqzqqQvVeI_wxCTGlQ6m9mtH2XiDGGy4Vsdew&m=1

Java開發框架再傳Spring4Shell漏洞 是否會引發更大的資安風暴
https://reurl.cc/jkxQ62

資安事件新聞週報 2022/3/28 ~ 2022/4/1

 資安事件新聞週報 2022/3/28  ~  2022/4/1

1.重大弱點漏洞/後門/Exploit/Zero Day
Unpatched Java Spring Framework 0-Day RCE Bug Threatens Enterprise Web Apps Security
https://thehackernews.com/2022/03/unpatched-java-spring-framework-0-day.html

Spring Core出現零時差遠端程式攻擊漏洞
https://www.ithome.com.tw/news/150201

Spring修補SpringShell漏洞
https://spring.io/blog/2022/03/31/spring-framework-rce-early-announcement

Spring4shell 來襲！繼 Log4Shell 後又一 Java 生態系嚴重漏洞出現
https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=9792

QNAP Warns of OpenSSL Infinite Loop Vulnerability Affecting NAS Devices
https://thehackernews.com/2022/03/qnap-warns-of-openssl-infinite-loop.html

資安事件新聞週報 2022/3/21 ~ 2022/3/25

 資安事件新聞週報 2022/3/21  ~  2022/3/25

1.重大弱點漏洞/後門/Exploit/Zero Day
OpenSSL修補高嚴重性的憑證解析漏洞
https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=9770

Over 200 Malicious NPM Packages Caught Targeting Azure Developers
https://thehackernews.com/2022/03/over-200-malicious-npm-packages-caught.html

New Dell BIOS Bugs Affect Millions of Inspiron, Vostro, XPS, Alienware Systems
https://thehackernews.com/2022/03/new-dell-bios-bugs-affect-millions-of.html

Dell BIOS 包含不正確的輸入驗證弱點。 本地經過身份驗證的惡意用戶可能會通過使用 SMI 在 SMM 期間執行任意程式碼。
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2022-24420
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2022-24419
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2022-24416
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2022-24415
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2022-24421

Apache HTTP Server 的 mod_sed 中的越界寫入弱點允許攻擊者使用可能攻擊者提供的資料覆蓋堆記憶體。
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2022-23943
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2022-22720

Sophos UTM 高風險安全性漏洞
https://www.klcg.gov.tw/tw/education/3522-253026.html

NPM套件node-ipc作者加入額外的相依套件抗議俄羅斯發動戰爭，有資安業者認為是資安漏洞並指派CVE編號
https://snyk.io/blog/peacenotwar-malicious-npm-node-ipc-package-vulnerability/

資安事件新聞週報 2022/3/14 ~ 2022/3/18

 資安事件新聞週報 2022/3/14  ~  2022/3/18

1.重大弱點漏洞/後門/Exploit/Zero Day
Linux近日發布更新以解決Dirty Pipe的安全性弱點
https://www.cisa.gov/uscert/ncas/current-activity/2022/03/10/dirty-pipe-privilege-escalation-vulnerability-linux

Symantec Management Agent 容易受到權限提升弱點的影響。 可以通過註冊表操作將低權限的本地帳戶提升到 SYSTEM 級別。
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2022-25623

FBI公布俄羅斯駭客開採PrintNightmare漏洞並繞過MFA的手法
https://www.ithome.com.tw/news/149947

Popular NPM Package Updated to Wipe Russia, Belarus Systems to Protest Ukraine Invasion
https://thehackernews.com/2022/03/popular-npm-package-updated-to-wipe.html

Unpatched RCE Bug in dompdf Project Affects HTML to PDF Converters
https://thehackernews.com/2022/03/unpatched-rce-bug-in-dompdf-project.html

威聯通公告部分NAS設備存在Linux寫入權限漏洞Dirty Pipe
https://www.qnap.com/zh-tw/security-advisory/qsa-22-05

'Dirty Pipe' Linux Flaw Affects a Wide Range of QNAP NAS Devices
https://thehackernews.com/2022/03/dirty-pipe-linux-flaw-affects-wide.html

New Linux Bug in Netfilter Firewall Module Lets Attackers Gain Root Access
https://thehackernews.com/2022/03/new-linux-bug-in-netfilter-firewall.html

OpenSSL修補高嚴重性的憑證解析漏洞，建議用戶立即進行更新
https://www.twcert.org.tw/tw/cp-104-5894-83b76-1.html

加密通訊程式庫OpenSSL存在憑證解析漏洞，一旦遭到攻擊者利用，恐導致服務中斷
https://www.bleepingcomputer.com/news/security/openssl-cert-parsing-bug-causes-infinite-denial-of-service-loop/

VOIP 產品的開源多媒體程式庫 PJSIP，內含 5 個嚴重資安漏洞
https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=9763

AMD 處理器也未逃過 Spectre V2 漏洞威脅，當前處理方式將使性能下降 54%
https://www.cool3c.com/article/174252

Google更新reCAPTCHA Enterprise加入帳戶防護工具
https://times.hinet.net/news/23802423

2.銀行/金融/保險/證券/支付系統/金融監理 新聞及資安
中國駭客早已虎視眈眈！奧義智慧挖掘金融機構攻擊事件內幕，呼籲即刻清查供應鏈避免情勢惡化
https://www.netadmin.com.tw/netadmin/zh-tw/snapshot/44C177B5BCF34264822AAFED2A011C11

合庫金資安長由周俊隆擔任
https://m.esunsec.com.tw/news/instant-detail.aspx?id=%7BC110E56C-070C-400E-865A-AC04D409B192%7D

美國證交所打算要求重大資安事故要在4天內通報
https://www.ithome.com.tw/news/149847

郵政數位存款帳戶3/21上線 與實體只能2擇1
https://money.udn.com/money/story/5618/6174854?from=edn_subcatelist_cate

郵政數位存款帳戶及行動郵局APP 體驗郵政美好新生活
https://reurl.cc/mGOqjG

俄羅斯改用人民幣支付債券票息，沙烏地考慮部分石油改採人民幣計價，挑戰美元主導地位
https://www.thenewslens.com/article/164273

將來銀行讓用戶自選帳號！串連全聯、中華電打造生態圈，還有哪些搶客法寶
https://money.udn.com/money/story/5612/6158782

陸傳要求騰訊 將微信支付納入金融控股公司
https://www.chinatimes.com/realtimenews/20220318003518-260410?chdtv

3.電子支付/行動支付/pay/資安
中國再次拉緊監管力道，微信支付面臨破紀錄數億罰款，騰訊、阿里巴巴傳出裁員風暴
https://www.thenewslens.com/article/164074

多方位支付佈局 綠界掛牌
https://reurl.cc/X48erM

「手機報稅2.0」5月上路 增加電子支付及行動支付功能
https://www.chinatimes.com/realtimenews/20220315005384-260410?chdtv

4.加密貨幣/數位貨幣/挖礦/區塊鍊/智能合約 資安
以太坊元宇宙駭客松BuildQuest閉幕，共有10個項目獲獎
https://news.cnyes.com/news/id/4834718

Adobe內容憑證再擴展，加入Polygon NFT驗證與展示功能
https://news.cnyes.com/news/id/4835882

超級巨鯨？前黑帽駭客自稱：我個人持有超 70 億美元的比特幣
https://www.agoscan.com/post/53.html

你買的NFT是假貨？台灣「這團隊」靠一協議讓盜圖無所遁形
https://www.gvm.com.tw/article/87957

派盾：攻擊Deus Finance駭客已將約1,100枚ETH和20萬枚DAI轉入Tornado Cash
https://news.cnyes.com/news/id/4833257

NFT的世界「沒有跌停板」　腦哥提醒：一不小心粉身碎骨
https://finance.ettoday.net/news/2208757

派盾：Parity 2017年被盜資金髮生異動，990枚ETH被轉移到Tornado Cash
https://news.cnyes.com/news/id/4832429

派盾：元宇宙項目Paraluni遭駭客利用漏洞交易，損失約170萬美元
https://news.cnyes.com/news/id/4831218

2017 年 Parity 15萬枚以太坊贓款｜派盾：駭客已轉移 990枚 ETH 至 Tornado Cash
https://www.blocktempo.com/2017-parity-wallet-hacker-begins-moving-eth/

台灣首場元宇宙資安論壇 高虹安出席：推企業資安投資抵稅
https://www.ettoday.net/news/20220313/2207390.htm

區塊鏈遊戲孵化器Seedify與DeFi駭客攻擊緩解工具Lossless達成合作
https://news.cnyes.com/news/id/4831168

駭客利用重入漏洞攻擊Paraluni，獲利逾170萬美元，約1/3已流入Tornado
https://news.cnyes.com/news/id/4831255

TreasureDAO：NFT市場將在24小時內重新開放
https://news.cnyes.com/news/id/4830462

第一時間捐贈烏克蘭10萬美金的神秘駭客組織，他們究竟是誰？為什麼要發幣
https://reurl.cc/dX3Vo2

幣安再佈局巴西市場，趙長鵬會見聖保羅州長、考慮收購當地銀行、支付商並設立總部
https://news.cnyes.com/news/id/4834667

加納央行：希望確保數位貨幣eCedi能夠在行動支付平台上協同運行
https://news.cnyes.com/news/id/4833639

5.資安事件新聞

A.病毒木馬 / 殭屍網路 / 勒索軟體 / Adware /APT /後門程式/IOC
金融惡意軟體 SharkBot 在 Google Play Store 中假扮為防毒工具，誘騙 Android 用戶安裝
https://www.twcert.org.tw/tw/cp-104-5892-6dc76-1.html

惡意軟體Emotet鎖定美國報稅季，以國稅局的名義散布
https://cofense.com/blog/emotet-spoofs-irs-in-tax-season/

木馬程式Gh0stCringe鎖定兩大關聯式資料庫下手
https://asec.ahnlab.com/en/32572/

勒索軟體LokiLocker攻擊東歐和亞洲，鎖定英文使用者而來
https://blogs.blackberry.com/en/2022/03/lokilocker-ransomware

經營殭屍網路TrickBot的駭客利用逾500個網域發動網釣攻擊，意圖竊取Naver用戶帳密
https://www.prevailion.com/what-wicked-webs-we-unweave/

GoDaddy代管的WordPress網站疑遭惡意軟體攻擊，1天內近300個網站受害
https://www.wordfence.com/blog/2022/03/increase-in-malware-sightings-on-godaddy-managed-hosting/

微軟企業版防毒軟體驚傳誤報，這次是將Office更新當作勒索軟體
https://www.bleepingcomputer.com/news/security/microsoft-defender-tags-office-updates-as-ransomware-activity/

俄軍開戰植木馬程式想癱瘓烏！葉元之：微軟早進場破局
https://www.setn.com/News.aspx?NewsID=1087175

新的殭屍網路利用Log4Shell漏洞入侵受害電腦，並透過DNS隧道埋藏攻擊流量
https://www.bleepingcomputer.com/news/security/new-linux-botnet-exploits-log4j-uses-dns-tunneling-for-comms/

新的勒索軟體Nokoyawa疑似與Hive有關，鎖定南美洲而來
https://www.trendmicro.com/en_us/research/22/c/nokoyawa-ransomware-possibly-related-to-hive-.html

新的殭屍網路利用Log4Shell漏洞入侵受害電腦，並透過DNS隧道埋藏攻擊流量
https://www.bleepingcomputer.com/news/security/new-linux-botnet-exploits-log4j-uses-dns-tunneling-for-comms/

新的勒索軟體Nokoyawa疑似與Hive有關，鎖定南美洲而來
https://www.trendmicro.com/en_us/research/22/c/nokoyawa-ransomware-possibly-related-to-hive-.html

公視新聞資料庫驚傳42萬筆資料遺失，去年遭勒索軟體攻擊事故曝光
https://www.mirrormedia.mg/story/20220314inv001/

汽車電氣零件供應商Denso遭勒索軟體攻擊，洩露Toyota約1.4 TB資料
https://www3.nhk.or.jp/nhkworld/en/news/20220313_23/

鎖定烏克蘭的資料破壞軟體CaddyWiper，將會摧毀受害電腦磁碟分割區
https://www.welivesecurity.com/2022/03/15/caddywiper-new-wiper-malware-discovered-ukraine/

駭客假借提供安全更新，鎖定烏克蘭散布Cobalt Strike
https://www.facebook.com/UACERT/posts/321475313345067

日本汽車零件大廠電裝遭Pandora勒索軟體攻擊
https://www.ithome.com.tw/news/149904

俄羅斯公布涉及針對境內單位進行 DDoS 攻擊的 17,576 個 IP 名單
https://www.twcert.org.tw/tw/cp-104-5879-7a4fe-1.html

美國FBI發布RagnarLocker勒索軟體威脅指標，請各領域會員加強偵測與防護
https://www.klcg.gov.tw/tw/education/3522-252730.html

勒索軟體LockBit聲稱攻擊輪胎業者普利司通
https://www.bleepingcomputer.com/news/security/bridgestone-americas-confirms-ransomware-attack-lockbit-leaks-data/

電玩廠商Ubisoft遭網路攻擊，全公司重設密碼，疑成勒索軟體Lapsus$受害者
https://www.theverge.com/2022/3/11/22972768/ubisoft-cyber-security-incident-hack

安卓木馬Escobar偽裝成防毒軟體散布，疑似具備能繞過雙因素驗證的能力
https://blog.cyble.com/2022/03/10/aberebot-returns-as-escobar/

DDoS 僵屍網路、加密貨幣挖擴惡意軟體，仍大量使用 Log4Shell 漏洞
https://blog.twnic.tw/2022/03/15/22377/

陸公布美國安局木馬病毒分析報告　植入即「潛伏」等待喚醒竊數據
https://www.ettoday.net/news/20220314/2207941.htm

微軟測試Windows 11家用版安全管理軟體Defender
https://www.ithome.com.tw/news/149876

如何在Mac上解決 Safari 延伸功能無法開啟警告可能的病毒問題
https://blog.trendmicro.com.tw/?p=70839

Cisco Talos警告駭客正在利用俄烏衝突散布惡意程式
https://www.ithome.com.tw/news/149855

Russian State-Sponsored Cyber Actors Gain Network Access by Exploiting
Default Multifactor Authentication Protocols and “PrintNightmare” Vulnerability | CISA
https://www.cisa.gov/uscert/sites/default/files/publications/AA22-074A.stix.xml

Kimsuky Group's APT Attacks
https://download.ahnlab.com/global/brochure/Analysis%20Report%20of%20Kimsuky%20Group.pdf

Have Your Cake and Eat it Too? An Overview of UNC2891
https://www.mandiant.com/resources/unc2891-overview

How the Malleable C2 Profile Makes Cobalt Strike Difficult to Detect
https://unit42.paloaltonetworks.com/cobalt-strike-malleable-c2-profile/

Pandora Ransomware - The Box has been open for a while
https://dissectingmalwa.re/blog/pandora/

Suspected Conti Ransomware Activity in the Auto Manufacturing Secto
https://www.dragos.com/blog/industry-news/suspected-conti-ransomware-activity-in-the-auto-manufacturing-sector/

Cyclops Blink Sets Sights on Asus Routers
https://www.trendmicro.com/en_us/research/22/c/cyclops-blink-sets-sights-on-asus-routers--.html
https://www.trendmicro.com/content/dam/trendmicro/global/en/research/22/c/cyclops-blink-sets-sights-on-asus-routers/Appendix_Cyclops%20Blink%20Sets%20Sights%20on%20ASUS%20Routers.pdf

LAPSUS$ Hacking Group
https://otx.alienvault.com/pulse/62324535fc8686a6577c135a

Qakbot infection with Cobalt Strike and VNC activity
https://isc.sans.edu/diary/rss/28448

Threat Actor UAC-0056 Targeting Ukraine with Fake Translation Software
https://www.sentinelone.com/blog/threat-actor-uac-0056-targeting-ukraine-with-fake-translation-software/

Linux Backdoor B1txor20 Using DNS Tunnel Technology Is Spreading Via Log4j Vulnerability
https://blog.netlab.360.com/b1txor20-use-of-dns-tunneling_cn/

Webinar on cyberattacks in Ukraine
https://securelist.com/webinar-on-cyberattacks-in-ukraine-summary-and-qa/106075/

Brazilian trojan impacting Portuguese users and using the same capabilities seen in other Latin American threats
https://otx.alienvault.com/pulse/622f4f68476d6fb93502ddb8

New Wiper Malware Attacking Russia: Deep-dive into RURansom Malware
https://blog.cyble.com/2022/03/11/new-wiper-malware-attacking-russia-deep-dive-into-ruransom-malware/

Analysis of Attack Activities of Suspected APT Organization UNC1151 Against Ukraine and Other Countries
https://ti.qianxin.com/blog/articles/Analysis-of-attack-activities-of-suspected-aptorganization-unc1151-against-ukraine-and-other-countries/

DirtyMoe Botnet Gains New Exploits in Wormable Module to Spread Rapidly
https://thehackernews.com/2022/03/dirtymoe-botnet-gains-new-exploits-in.html

TrickBot Malware Abusing MikroTik Routers as Proxies for Command-and-Control
https://thehackernews.com/2022/03/trickbot-malware-abusing-hacked-iot.html

New "B1txor20" Linux Botnet Uses DNS Tunnel and Exploits Log4J Flaw
https://thehackernews.com/2022/03/new-b1txor20-linux-botnet-uses-dns.html

Nearly 34 Ransomware Variants Observed in Hundreds of Cyberattacks in Q4 2021
https://thehackernews.com/2022/03/nearly-34-ransomware-variants-observed.html

CaddyWiper: Yet Another Data Wiping Malware Targeting Ukrainian Networks
https://thehackernews.com/2022/03/caddywiper-yet-another-data-wiping.html

Russian Ransomware Gang Retool Custom Hacking Tools of Other APT Groups
https://thehackernews.com/2022/03/russian-ransomware-gang-retool-custom.html

Researchers Find New Evidence Linking Kwampirs Malware to Shamoon APT Hackers
https://thehackernews.com/2022/03/researchers-find-new-evidence-linking.html

Experts Find Some Affiliates of BlackMatter Now Spreading BlackCat Ransomware
https://thehackernews.com/2022/03/experts-find-some-affiliates-of.html

Google Uncovers 'Initial Access Broker' Working with Conti Ransomware Gang
https://thehackernews.com/2022/03/google-uncovers-initial-access-broker.html

DirtyMoe Botnet Gains New Exploits in Wormable Module to Spread Rapidly
https://thehackernews.com/2022/03/dirtymoe-botnet-gains-new-exploits-in.html

B.行動安全 / iPhone / Android /穿戴裝置 /App / 5G / 即時通訊
果粉小心千萬別裝這軟體！駭客躲過蘋果審查傳送惡意應用程式
https://3c.ltn.com.tw/news/48181

果粉小心千萬別裝這軟體！駭客躲過蘋果審查傳送惡意應用程式
https://web.bc3ts.net/post/5248967

這下蘋果也難防，駭客利用 TestFlight 傳送惡意 iOS 應用程式
https://technews.tw/2022/03/17/testflight-ios/

如何知道iPhone被監控？教你透過6招反手機監控技巧
https://mrmad.com.tw/how-to-know-if-iphone-is-being-monitored

資安即國安！電信推「網路計畫」　AI惹議：出錯誰負責
https://news.tvbs.com.tw/world/1738064

俄烏開戰後，眾多網路犯罪分子透過 Telegram 進行各式不法資安活動
https://www.twcert.org.tw/tw/cp-104-5855-22508-1.html

C.事件 / 駭客 / DDOS / APT / 雲端/ 暗網/ 徵才 / 國際資安事件 / 資安人力
上市櫃公司依規須設資安主管 產險資安險 浮現新商機
https://wantrich.chinatimes.com/news/20220317900327-420101

全台2,630家派遣業者 6月1日起要訂個資安維計畫
https://ctee.com.tw/livenews/jj/ctee/b03004002022031122084884

隨著台灣資安產業轉向雲端應用，防禦惡意攻擊應多管齊下
https://news.sina.com.tw/article/20220317/41423268.html

什麼是CIA Triad？從常見的五大資安威脅，檢視企業資訊安全防護力
https://www.thenewslens.com/article/164125

炮火下的烏克蘭外包軟體工程師，聽著防空警報還是得寫程式碼
https://www.techbang.com/posts/94614-ukrainian-software-industry-under-gunfire-listening-to-anti

解密國際駭客三等級 資安專家提五招應對
https://news.cnyes.com/news/id/4834257

豐田汽車零件大廠遭駭 疑遭勒索贖金
https://udn.com/news/story/6811/6162007

Google揭露駭客前鋒Exotic Lily
https://www.ithome.com.tw/news/149979

臺灣PCB大廠健鼎遭網路攻擊，部分資訊系統受影響
https://www.ithome.com.tw/news/149950

健鼎遭駭客攻擊 第一時間啟動防禦對營運無重大影響
https://money.udn.com/money/story/11162/6168895?from=edn_subcatelist_cate

國內又有PCB廠遇網路攻擊事件，健鼎公告部份資訊系統受影響
https://www.ithome.com.tw/news/149950

東映動畫遭網路攻擊，動畫播出被迫延後
https://corp.toei-anim.co.jp/ja/press/press3317734943536499055.html

俄羅斯國防供應商Rostec證實遭DDoS攻擊，指控是烏克蘭IT軍隊所為
https://www.bleepingcomputer.com/news/security/russian-defense-firm-rostec-shuts-down-website-after-ddos-attack/

俄羅斯企業網站3月遭DDoS攻擊的次數大幅增加，10天攻擊次數已超過2月總和
https://rt-solar.ru/events/news/2583/

波蘭工程師打造一平臺讓使用者可傳送訊息至俄羅斯手機
https://www.ithome.com.tw/news/149880

以色列政府網站疑似遭受駭客組織DDoS攻擊
https://www.twcert.org.tw/tw/cp-104-5889-47518-1.html

疑似伊朗駭客組織攻擊！以色列政府網站被迫關閉
https://times.hinet.net/news/23808083

共諜目標 劉美賢赴北京奧運！美派員嚴密保護
https://www.ntdtv.com.tw/b5/20220318/video/322365.html

美國立法要求關鍵企業遭網絡攻擊時向政府報告
https://reurl.cc/Vjx36n

拜登簽新令保衛國安！　禁美國情報員退休後「成為外國傭兵」
https://www.ettoday.net/news/20220317/2210285.htm

關係緊繃 美遭俄網攻風險升
https://wantrich.chinatimes.com/news/20220314900211-420201

波蘭火車系統6成停擺 疑遭駭客蓄意攻擊
https://reurl.cc/jkEq7q

俄烏戰爭資訊戰！　駭客組織聯手網攻俄羅斯
https://www.ftvnews.com.tw/news/detail/2022317I09M1

烏克蘭擴大數位資訊戰，號召 200 多間科技公司一同抗俄
https://technews.tw/2022/03/18/ukraine-russia-tech-companies/

烏克蘭電信業者合作維護境內通訊並阻止駭客
https://www.ithome.com.tw/news/149956

科技戰！烏克蘭正導入臉部識別 Clearview AI 擬辨認間諜、敵軍死者
https://www.inside.com.tw/article/27004-ukraine-has-started-using-clearview-ais-facial-recognition-during-war

中共啟動非對稱作戰　瞄準台灣重要基礎設施
https://www.upmedia.mg/news_info.php?Type=2&SerialNo=140160

駭客入侵俄國網路攝影機、國有油管業者
https://www.ithome.com.tw/news/149982

抓到賣國賊！烏克蘭逮「60內奸＋20特工」　駭客潛入架Wi-Fi…1000通電話助俄勸降
https://m.news.sina.com.tw/article/20220316/41405842.html

烏克蘭國家安全局自稱，逮捕一名俄國駭客，暗中協助俄軍提供Wi-fi網路連線。
https://www.laitimes.com/article/3gnj9_3xckh.html

烏克蘭遭入侵時衛星網路被破壞 西方進行調查
https://wantrich.chinatimes.com/news/20220312900477-420201

恐有駭客攻擊風險，德政府警告別用卡巴斯基防毒軟體
https://technews.tw/2022/03/16/germany-issues-hacking-warning-for-users-of-kaspersky/

俄羅斯駭客利用組織對於使用者帳號的管理不當，繞過雙因素身分驗證機制並控制使用者帳號
https://www.cisa.gov/uscert/ncas/alerts/aa22-074a

解密俄羅斯網軍 專家5提醒台企檢視資安曝險
https://www.cna.com.tw/news/afe/202203160287.aspx

俄駭客宣布攻破匿名者官網 匿名者邊笑邊釋出36萬份政府機密文件
https://reurl.cc/7e8yq9

利用電話協助俄軍通訊！烏克蘭安全局逮捕網路駭客
https://newtalk.tw/news/view/2022-03-16/724764

政府網站被駭客打爆 俄羅斯：遭受史無前例的駭客攻擊
https://www.chinatimes.com/realtimenews/20220318001465-260408?chdtv

微軟、Netflix、Adobe抵制俄羅斯不給用，俄國真的放大招解鎖最大盜版網站Rutracker
https://www.techbang.com/posts/94686-russian-hackers-loosen-the-copyright-era-faces-the-biggest

國家互聯網應急中心稱中國互聯網遭境外網絡攻擊　主要攻擊地址來自美國
https://www.pcmarket.com.hk/cncert-said-china-network-being-attacked-from-america-since-february/

New Infinite Loop Bug in OpenSSL Could Let Attackers Crash Remote Servers
https://thehackernews.com/2022/03/new-infinite-loop-bug-in-openssl-could.html

FBI, CISA Warn of Russian Hackers Exploiting MFA and PrintNightmare Bug
https://thehackernews.com/2022/03/fbi-cisa-warn-of-russian-hackers.html

German Government Warns Against Using Russia's Kaspersky Antivirus Software
https://thehackernews.com/2022/03/german-government-warns-against-using.html

Massive DDoS Attack Knocked Israeli Government Websites Offline
https://thehackernews.com/2022/03/massive-ddos-attack-knocked-israeli.html

Gaming Company Ubisoft Confirms It was Hacked, Resets Staff Passwords
https://thehackernews.com/2022/03/gaming-company-ubisoft-confirms-it-was.html

New Variant of Russian Cyclops Blink Botnet Targeting ASUS Routers
https://thehackernews.com/2022/03/new-variant-of-russian-cyclops-blink.html

資安業務
https://www.104.com.tw/job/7k1bs?jobsource=cj2008

滲透測試工程師
https://www.104.com.tw/job/7jlrs?jobsource=jolist_d_date

MIS工程師
https://www.104.com.tw/job/7jlrr?jobsource=jolist_d_date

工控資安技術工程師
https://www.104.com.tw/job/7jlrq?jobsource=jolist_d_date

資安獵捕監控工程師
https://www.104.com.tw/job/7jlrp?jobsource=jolist_d_date

情資研析工程師
https://www.104.com.tw/job/7jlro?jobsource=jolist_d_date

監控工程師
https://www.104.com.tw/job/7jlrl?jobsource=jolist_d_date

資安產品與服務顧問
https://www.104.com.tw/job/7jlrj?jobsource=jolist_d_date

行動App威脅獵捕分析師
https://www.104.com.tw/job/7jlri?jobsource=jolist_d_date

前端網頁工程師
https://www.104.com.tw/job/7jlrh?jobsource=jolist_d_dateAI/

人工智慧應用工程師
https://www.104.com.tw/job/7jsd5?jobsource=jolist_d_date

維運工程師
https://www.104.com.tw/job/7jlrk?jobsource=jolist_d_date

短期駐點資訊安全人員
https://www.104.com.tw/job/7kdk6

5S元富證券-資安管理師
https://www.skfh.com.tw/hr/job_detail.aspx?id=4681

5L新光人壽-資訊安全管理師(有相關經驗、證照者從優核敘)
https://www.skfh.com.tw/hr/job_detail.aspx?id=4665

5H新光金控_資安治理專案襄理/經理
https://www.skfh.com.tw/hr/job_detail.aspx?id=4650

5H新光金控_資安營運專案襄理/經理
https://www.skfh.com.tw/hr/job_detail.aspx?id=4651

IT資訊安全工程師_竹科
https://www.1111.com.tw/job/98695499/

資安工程師
https://www.yes123.com.tw/wk_index/job.asp?p_id=25530_68919301&job_id=20220314032003_54181380

資訊安全工程師
https://www.104.com.tw/job/7jvuw

資安管理師【總公司】
https://www.1111.com.tw/job/98691229/

D.資料外洩/個資法/GDPR/網路詐騙/網路釣魚/盜刷/假新聞/網路霸凌/帳號安全
遠傳Friday購物傳出客戶個資外洩，近期連3周被165列為高風險賣場
https://165.npa.gov.tw/#/articles/risk

微軟示警駭客竊取帳號事件頻傳，企業強化身份識別安全刻不容緩
https://www.techbang.com/posts/94869-microsoft-advises-businesses-to-strengthen-identity-security

【烏俄戰爭】深偽影片首在烏俄資訊戰現身 冒充澤倫斯基要求烏軍投降
https://tfc-taiwan.org.tw/articles/7099

2018年Meta資料外洩事件判罰1,700萬歐元
https://www.dataprotection.ie/en/news-media/press-releases/data-protection-commission-announces-decision-meta-facebook-inquiry

駭客組織匿名者聲稱對俄羅斯石油龍頭的德國分公司出手，竊得20 TB資料
https://anonleaks.net/en/2022/anonymous-germany/20-terabytes-anonymous-germany-hijacks-data-from-rosneft-germany/

英國渡輪業者Wightlink遭網路攻擊，疑似部分客戶與員工個資外洩
https://portswigger.net/daily-swig/uk-ferry-operator-wightlink-flags-potential-data-breach-after-highly-sophisticated-cyber-attack

詐騙集團先竊取公益團體捐款資料，再向捐款人行騙，3月上旬得手逾5百萬元
https://www.cna.com.tw/news/asoc/202203130112.aspx

假冒「公益團體」詐騙多　接獲不明電話指示操作ATM要小心
https://www.mirrormedia.mg/story/20220313soc013/

假冒公益團體詐騙 警受理24件財損
http://www.ksnews.com.tw/index.php/news/contents_page/0001581910

有愛心也要有警覺心！捐款操作錯誤詐騙本月已24件逾500萬
https://news.ltn.com.tw/news/society/breakingnews/3858129

派遣公司不小心洩漏個資須通報　違者依個資法開罰最高50萬
https://finance.ettoday.net/news/2206168

反擊制裁！俄羅斯擬盜版合法化　資安公司：91%俄國人喜歡用盜版
https://www.ctwant.com/article/172423

李奧納多捐款1000萬美元給烏克蘭的假新聞，如何傳遍全球
https://www.cw.com.tw/article/5120387

人頭戶網路買虛寶 耍詐主嫌到案
https://reurl.cc/6Emy4k

E.研究報告/工具
The Golden Hour of Incident Response
https://thehackernews.com/2022/03/the-golden-hour-of-incident-response.html

Why Enterprise Threat Mitigation Requires Automated, Single-Purpose Tools
https://thehackernews.com/2022/03/why-enterprise-threat-mitigation.html

供應鏈風險、零日漏洞利用和勒索軟體仍將是 2022 年金融機構迫在眉睫的資安威脅
https://www.informationsecurity.com.tw/article/article_detail_2021.aspx?aid=9756

PSA Certified 2022 安全性報告：裝置安全性將直接影響企業盈虧
https://www.informationsecurity.com.tw/article/article_detail_2021.aspx?aid=9754

透過 API 進行的資安攻擊，2021 年大增 681%
https://www.informationsecurity.com.tw/article/article_detail_2021.aspx?aid=9757

從勒索軟體談關鍵資訊基礎設施防護
https://www.pngh.mohw.gov.tw/public/news/1f3f1f96a35aa69ab0c70d2e689521c0.pdf

Google推出社群安全分析專案，可用於定義常見雲端威脅偵測規則
https://www.ithome.com.tw/news/149854

F.商業
Aruba 預測五大網路技術趨勢，提零信任網路架構
https://www.informationsecurity.com.tw/article/article_detail_2021.aspx?aid=9751

Check Point Software 強化三大產品線功能
https://www.informationsecurity.com.tw/article/article_detail_2021.aspx?aid=9753

聯達資訊成為中華資安國際「SecuTex」台灣代理商
https://www.informationsecurity.com.tw/article/article_detail_2021.aspx?aid=9752

資安成為競爭力新指標，迎棧科技結合Tigera幫助企業掌握效率與安全的平衡之道
https://reurl.cc/bkrRbl

SentinelOne併購Attivo Networks，強化身分驗證防護能力
https://www.sentinelone.com/press/sentinelone-to-acquire-attivo-networks-bringing-identity-to-xdr/

英國暫緩NortonLifeLock與Avast併購案，要求業者提出說明
https://www.gov.uk/government/news/cma-finds-nortonlifelock-purchase-of-avast-could-reduce-competition

文化轉型需長期投資佈局　中小企業或可借鏡衛星辦公室 混合辦公非一蹴可幾　循序漸進完備資安協作
https://www.netadmin.com.tw/netadmin/zh-tw/trend/CFBB29DF852C4502A29755E7874DBF51

精誠資訊啟動5A、雲服務、資安擴大徵才計畫
https://www.digitimes.com.tw/tech/dt/n/shwnws.asp?id=0000631291_ZCM1N8TMLHBUWS04MD8LZ

偉康推OETH雲端身份認證SaaS服務 遠距辦公更安全
https://ec.ltn.com.tw/article/breakingnews/3863549

偉康攻遠距辦公 推雲端身分認證SaaS服務
https://udn.com/news/story/7240/6174811

Check Point Software全面強化三大產品線功能
https://turnnewsapp.com/livenews/tech/A07657002022031711175685

NetApp與思科深化夥伴關係 將融合式基礎架構延伸至混合雲
http://www.ctimes.com.tw/DispNews-tw.asp?O=HK63H83WQA6SAA00N7

Google以6項趨勢說明Google Cloud如何確保網路架構安全
https://mashdigi.com/google-highlights-google-cloud-security-and-flexibility/

資安有價有市　Mandiant指與Google有共同願景
https://reurl.cc/KpWxen

Check Point強化三大產品線功能 落實資安在地化願景
https://reurl.cc/3jnNX0

MongoDB與亞馬遜雲科技擴大全球合作
https://news.sina.com.tw/article/20220316/41400482.html

F5 Distributed Cloud Services強化數位世界保護
https://www.digitimes.com.tw/tech/dt/n/shwnws.asp?cnlid=14&cat=60&id=0000630777_NO48M9VP6O10458LJ3SDI

推動永續創新流程轉型 達梭系統於 3DEXPERIENCE 平台推出生命週期評估解決方案
https://www.netadmin.com.tw/netadmin/zh-tw/snapshot/6C7008E128934742AC9FDF5F0D3FE4BD

Openfind 提供 Emotet 加密病毒信完整攔阻方式，助客戶抵禦強烈攻勢
http://n.yam.com/Article/20220315211537

華碩轉型三部曲：從智慧製造經驗，孵出轉型小金雞
https://buzzorange.com/techorange/2022/03/14/asus-digital-cloud-service/

提供多層次網站應用程式與API防護，F5新一代資安雲成軍
https://www.ithome.com.tw/review/149592

G.政府
馬斯克的星鏈衛星助烏克蘭不斷網！吳政忠：台灣也會有落地機制
https://www.bnext.com.tw/article/68157/starlink-ukraine-relate-tw

抗衡中共北斗 台科技部：戰時將與國際衛星合作
https://www.epochtimes.com/b5/22/3/17/n13653430.htm

防資訊滲透 政院：關鍵是強化數位公民意識
https://reurl.cc/pWNyea

公視資安與影視職安成災難 朝野立委籲請文化與勞動兩部 速訂防範亡羊補牢
https://today.line.me/tw/v2/article/gzEDq6z

公視新聞片庫遭誤刪 監委質疑資安漏洞申請調查
https://money.udn.com/money/story/7307/6174416

工研院2022 VLSI國際研討會下月登場　聚焦AI、量子運算及智慧物聯網資安
https://www.appledaily.com.tw/property/20220318/CO7YY7YRKBH37IYRUR53AWSP7Q/

台南公共費用行動支付成長119％ 黃偉哲要求加強資安
https://news.ltn.com.tw/news/life/breakingnews/3860843

張文村談數位信任 透過科技來維護組織聲譽
https://reurl.cc/WkmEOy

東吳攜手以色列新加坡 培育一級資安人才
https://web-ch.scu.edu.tw/epaper/news/6916/18680

台防長：烏克蘭經驗被納入台海不對稱作戰規劃
https://www.epochtimes.com/b5/22/3/11/n13637960.htm

H.工控系統/ICS/SCADA/IOT/物聯網/車聯網/電動車/人工智慧/AI/ML/人臉辨識/醫療 相關資安
dlink dir-859_firmware 通過函數 genacgi_main 發現 D-Link DIR-859 v1.05 包含基於堆疊的緩衝區溢出。 此弱點允許攻擊者通過精心設計的有效負載引發阻斷服務 (DoS)
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2022-25106

小米路由器AX3600存在命令注入弱點。 該弱點是由於缺乏對傳入數據檢測的檢查造成的。 攻擊者可以利用此弱點執行程式碼。
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2020-14111
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2020-14115

siemens 在第三方組件中，分配分區大小的過程無法檢查記憶體邊界。因此，如果攻擊者請求大量，由於整數環繞，可能會導致分配較小的大小。
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2021-42019
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2022-24408

tenda ax1806_firmware 發現騰達AX1806 v1.0.0.1函數formSetProvince中存在堆疊溢出。 此弱點允許攻擊者通過 ProvinceCode 參數導致阻斷服務 (DoS)。
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2022-25558
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2022-25566
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2022-25557
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2022-25548
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2022-25554
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2022-25553
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2022-25552
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2022-25551
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2022-25546
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2022-25547
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2022-25550
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2022-25555
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2022-25549
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2022-46393
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2022-46394

TP-LINK 產品(版本 WR-886N 20190826 2.3.8) 的函數 (/cloud_config/router_post/check_reg_verify_code) 存在緩衝區溢出弱點。該弱點允許已被刪除的惡意用戶藉由 post 請求導致執行任意程式碼。
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2021-44622
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2021-44623
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2021-44625
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2021-44626
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2021-44629
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2021-44627
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2021-44628
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2021-44630
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2021-44631
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2021-44632

工控資安：IT/OT疆界模糊，勒索攻擊鑽漏洞
https://www.informationsecurity.com.tw/article/article_detail_2021.aspx?aid=9759

MOXA：工業4.0趨勢發展重點 符合多網融合、遠端作業、安全監控等特性
https://udn.com/news/story/7086/6170307

三大工控網路市場成長動能催生IT/OT互融互通網路架構，滿足工業維運安全強固不中斷
https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=9767

俄羅斯的關鍵基礎設施的SCADA系統，屢遭網路攻擊而癱瘓
https://blog.cyble.com/2022/03/09/russia-ukraine-crisis-places-critical-infrastructure-at-high-risk/

歐姆龍PLC程式開發軟體存在高風險漏洞
https://www.securityweek.com/high-severity-vulnerabilities-patched-omron-plc-programming-software

挖掘AI時代的台灣優勢
https://news.cnyes.com/news/id/4830653

國泰智能電動車 伺機進場
https://money.udn.com/money/story/5618/6160291

I.教育訓練
中華軟協-iPAS「初級」資訊安全工程師能力研習衝刺班：全面招生中
https://www.cs.nycu.edu.tw/announcements/detail/8778

2022「證券期貨資訊安全實務養成課程」即日起開始報名
https://www.sfi.org.tw/news/news-7/3589

網路時代人人要學的資安基礎必修課 (How Cybersecurity Really Works)
https://www.tenlong.com.tw/products/9786263240384?list_name=p-r-zh_tw

不只是工程師才要懂的 App 資訊安全：取得資安檢測合格證書血淚史（iT邦幫忙鐵人賽系列書）
https://news.pchome.com.tw/living/books/20220202/index-64375841669874292009.html

【資安管理國際證照懶人包】學習心得、考試要點一次整理！2022 轉職夢幻工作看這篇
https://buzzorange.com/techorange/2021/12/30/isaca/

CISSP考試心得 – Benson
https://reurl.cc/GbWvxd

CPSA(CREST Practitioner Security Analyst) 資安分析師考試心得
https://tech-blog.cymetrics.io/posts/huli/crest-cpsa-prepare/

EC-Council CEH v11 考試心得、改版資訊以及準備方向 2021、2022
https://reurl.cc/1oyEM8

CEH v11 考試心得與準備方式
https://blog.sean.taipei/2022/01/ceh

110年新進人員「校園資訊安全講座」教材
https://cc.nccu.edu.tw/p/406-1001-740,r18.php

【訓練教材D】資訊安全技術教育訓練教材
https://iscb.nchu.edu.tw/2019/07/d.html

109資通安全管理法數位教育訓練
https://reurl.cc/ARlmqp

110-1初級資訊安全工程師-資訊安全管理概論
https://yamol.tw/exam.php?id=104050

中大信息工程學系 栽培資訊科技領導人才
https://reurl.cc/ARZKDK

伊雲谷、中山大學產學合作 累積雲端資安人才能量
https://ctee.com.tw/industrynews/technology/587459.html

SANS Cyber Aces Online Tutorials
https://tutorials.cyberaces.org/tutorials.html

Free Online Cybersecurity Courses (MOOCs)
https://www.cyberdegrees.org/resources/free-online-courses/

Develop Your Cybersecurity Skills
https://www.cybrary.it/catalog/cybersecurity/

Mobile App Security
https://www.cybrary.it/course/mobile-app-security/

Introduction to Cybersecurity
https://reurl.cc/bnaj6d

How to Tackle SaaS Security Misconfigurations
https://thehackernews.com/2021/11/how-to-tackle-saas-security.html

How to Build a Security Awareness Training Program that Yields Measurable Results
https://thehackernews.com/2021/11/how-to-build-security-awareness.html

Common Attacks
https://choson.lifenet.com.tw/?p=1174

6.近期資安活動及研討會
OSCP 高階滲透測試精進班 2022-02-12~2022-03-20
https://college.itri.org.tw/course/all-events/35FC13F1-05A3-44CF-85B1-2D01B6F92632.html

資安新知科技研習課程-「資安鑑識課程-系列Ⅰ初級課程：LINE 社交平台資安機制：雲端 LINE Chatting 機器人系統」2022/3/25
https://docs.google.com/forms/d/1pjgu56Qqxuo9-eQTndqLzK2oZuzAWnv3v78VvuipDwA/viewform?edit_requested=true

雲端資安防禦實作研討會 2022/3/29
https://www.ecloudvalley.com/zh-hant/event/ms_security/

中部場-公部門如何揪出潛伏資安威脅研討會（限政府機關報名）2022/4/13
https://www.cisanet.org.tw/Course/Detail/2783

AIAA講座【台北場】：資安思維 X 政府應用AI案例 X 數位轉型 2022/4/16
https://www.accupass.com/event/2203031213512786993470

網站應用程式安全  2022/04/19
https://moltke.nccu.edu.tw/Registration/registration.do?action=conferenceInfo&conferenceID=X19881

2022 美台金融資安論壇 數位轉型下的資安再造 2022/04/21 ~ 2022/04/22
https://event.netmag.tw/202204ait/

南部場-公部門如何揪出潛伏資安威脅研討會（限政府機關報名） 2022/4/21
https://www.cisanet.org.tw/Course/Detail/2784

駭客奪旗攻防演練：金融資安人才養成專班(第1期) 2022/04/28~2022/06/09
https://www.tabf.org.tw/CourseDetail.aspx?PID=487750

國家高速網路與計算中心教育訓練 「大數據程式開發平台(VM版本)」建置與開發實務課程 2022/5/27
https://edu.nchc.org.tw/course/one_course_introduction.asp?lms_auto_course_id=3983&from_course_list_url=homepage

風險導向資安稽核 2022/7/20
https://www.cisanet.org.tw/Course/Detail/2756

資安事件新聞週報 2022/3/7 ~ 2022/3/11

 資安事件新聞週報 2022/3/7  ~  2022/3/11

1.重大弱點漏洞/後門/Exploit/Zero Day
Cisco 近日發布更新以解決多個產品的安全性弱點
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-dos-JLh9TxBp

Critical Patches Issued for Cisco Expressway Series, TelePresence VCS Products
https://thehackernews.com/2022/03/critical-patches-issued-for-cisco.html

Critical Bugs Could Let Attackers Remotely Hack, Damage APC Smart-UPS Devices
https://thehackernews.com/2022/03/critical-bugs-could-let-attackers.html

TP-Link無線路由器RCE漏洞的攻擊程式已遭公開，建議用戶立即進行更新
https://www.twcert.org.tw/tw/cp-104-5815-b7721-1.html

資安事件新聞週報 2022/2/28 ~ 2022/3/4

 資安事件新聞週報 2022/2/28  ~  2022/3/4

1.重大弱點漏洞/後門/Exploit/Zero Day
Cisco 近日發布更新以解決多個產品的安全性弱點
https://tools.cisco.com/security/center/publicationListing.x

Critical Patches Issued for Cisco Expressway Series, TelePresence VCS Products
https://thehackernews.com/2022/03/critical-patches-issued-for-cisco.html

Release of QRadar 7.5.0 Update Package 1 SFS (7.5.0-QRADAR-QRSIEM-2021.6.1.20220215133427)
https://reurl.cc/oeAQXV

Apache HTTP Server as used by IBM QRadar SIEM is vulnerable to
buffer overflow and denial of service (CVE-2021-44790, CVE-2021-34798, CVE-2021-39275)
https://reurl.cc/MbVNDm

Critical Bugs Reported in Popular Open Source PJSIP SIP and Media Stack
https://thehackernews.com/2022/03/critical-bugs-reported-in-popular-open.html

資安事件新聞週報 2022/2/21 ~ 2022/2/25

 資安事件新聞週報 2022/2/21  ~  2022/2/25

1.重大弱點漏洞/後門/Exploit/Zero Day
Cisco 近日發布更新以解決多個產品的安全性弱點
https://tools.cisco.com/security/center/publicationListing.x

New Flaws Discovered in Cisco's Network Operating System for Switches
https://thehackernews.com/2022/02/new-flaws-discovered-in-ciscos-network.html

CISA Alerts on Actively Exploited Flaws in Zabbix Network Monitoring Platform
https://thehackernews.com/2022/02/cisa-alerts-on-actively-exploited-flaws.html

伺服器監控工具Zabbix驚傳嚴重漏洞，恐導致繞過身分驗證在伺服器上執行任意程式碼
https://blog.sonarsource.com/zabbix-case-study-of-unsafe-session-storage

資安事件新聞週報 2022/2/14 ~ 2022/2/18

 資安事件新聞週報 2022/2/14  ~  2022/2/18

1.重大弱點漏洞/後門/Exploit/Zero Day
Log4j2 In The Wild | Iranian-Aligned Threat Actor TunnelVision Actively Exploiting VMware Horizon
https://reurl.cc/mGpaEW

又是鎖定Log4Shell漏洞，對VMware遠距工作平臺的攻擊行動，這次動手的是伊朗駭客TunnelVision
https://reurl.cc/mGpaEW

針對可被攻擊者用於規避掃描的弱點，微軟疑似悄悄修補了Windows防毒軟體
https://reurl.cc/g0r9LR

微軟修補了讓駭客繞過Defender掃瞄的漏洞
https://www.ithome.com.tw/news/149373

Microsoft 推出 2022 年 2 月 Patch Tuesday 資安修補包
https://blog.twnic.tw/2022/02/15/21865/

微軟Windows作業系統存在多個安全漏洞
https://ic.cgu.edu.tw/p/16-1016-86908.php?Lang=zh-tw

非關聯式資料庫Apache Cassandra出現RCE漏洞
https://reurl.cc/zMQ0x0

資安事件新聞週報 2022/2/7 ~ 2022/2/11

 資安事件新聞週報 2022/2/7  ~  2022/2/11

1.重大弱點漏洞/後門/Exploit/Zero Day
Samba 漏洞 CVE-2021-44142 分析與修補
https://blog.trendmicro.com.tw/?p=71235

企業應立即修補Samba 開放原始碼軟體漏洞
https://www.informationsecurity.com.tw/article/article_detail_2021.aspx?aid=9698

Samba 產品存在多個安全性弱點
https://www.samba.org/samba/security/CVE-2022-0336.html

Samba Out-of-Bounds Heap R/W 遠端執行代碼弱點（RCE）
https://www.zerodayinitiative.com/blog/2022/2/1/cve-2021-44142-details-on-a-samba-code-execution-bug-demonstrated-at-pwn2own-austin

資安事件新聞週報 2022/1/31 ~ 2022/2/4

 資安事件新聞週報 2022/1/31  ~  2022/2/4

1.重大弱點漏洞/後門/Exploit/Zero Day
Samba Out-of-Bounds Heap R/W 遠端執行代碼弱點（RCE） CVE-2021-44142
https://www.samba.org/samba/security/CVE-2021-44142.html

Samba 修補高風險漏洞，不讓攻擊者藉此以root權限遠端執行程式碼
https://www.ithome.com.tw/news/149175

CVE-2021-44142: DETAILS ON A SAMBA CODE EXECUTION BUG DEMONSTRATED AT PWN2OWN AUSTIN
https://reurl.cc/ZrVKdl

The Samba Vulnerability: What is CVE-2021-44142 and How to Fix It
https://reurl.cc/dXyNb8

UEFI韌體程式碼爆23項漏洞，影響微軟、Dell、HPE等業者
https://www.ithome.com.tw/news/149203

Apache Log4j存在安全漏洞(CVE-2021-44228)，允許攻擊者遠端執行任意程式碼
https://ic.cgu.edu.tw/p/16-1016-90950.php?Lang=zh-tw

Log4j漏洞引爆開源軟體安全議題，OpenSSF基金會扛起重擔，推動修補大量軟體漏洞的計畫
https://www.ithome.com.tw/news/149179

Log4j exploit hits again: vulnerable Unifi Network application (Ubiquiti)
https://blog.morphisec.com/log4j-exploit-targets-vulnerable-unifi-network-applications

CISA Warns of Critical Vulnerabilities Discovered in Airspan Networks Mimosa
https://thehackernews.com/2022/02/cisa-warns-of-critical-vulnerabilities.html

資安事件新聞週報 2022/1/24 ~ 2022/1/28

 資安事件新聞週報 2022/1/24  ~  2022/1/28

1.重大弱點漏洞/後門/Exploit/Zero Day
Patching the CentOS 8 Encryption Bug is Urgent – What Are Your Plans
https://thehackernews.com/2022/01/patching-centos-8-encryption-bug-is.html

Apple Releases iOS and macOS Updates to Patch Actively Exploited 0-Day Vulnerability
https://thehackernews.com/2022/01/apple-releases-ios-and-ipados-updates.html

12-Year-Old Polkit Flaw Lets Unprivileged Linux Users Gain Root Access
https://thehackernews.com/2022/01/12-year-old-polkit-flaw-lets.html

Linux PolicyKit 嚴重安全漏洞：Pwnkit被揭露
https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=9696

Linux 12年漏洞可讓駭客以根權限執行程式碼，影響所有發行版
https://www.ithome.com.tw/news/149096

Oracle WebLogic Server 14.1.1.0.0 - Local File Inclusion
https://www.exploit-db.com/exploits/50688

資安事件新聞週報 2022/1/17 ~ 2022/1/21

 資安事件新聞週報 2022/1/17  ~  2022/1/21

1.重大弱點漏洞/後門/Exploit/Zero Day
微軟推出 2022 年一月份 Patch Tuesday 軟體更新修補包
https://www.informationsecurity.com.tw/article/article_detail.aspx?tv=11&aid=9675

Microsoft 已發布安全更新，以解決多版本 Windows HTTP 遠端程式碼執行弱點
https://github.com/antx-code/CVE-2022-21907

Microsoft Exchange Server 遠端指令的弱點
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2022-21846

Microsoft 已發布安全更新，以解決多版本 Windows HTTP 遠端程式碼執行弱點
https://www.klcg.gov.tw/tw/education/3522-250411.html

Windows IKE Extension 存在拒絕服務的弱點
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2022-21848

資安事件新聞週報 2022/1/10 ~ 2022/1/14

 資安事件新聞週報 2022/1/10  ~  2022/1/14

1.重大弱點漏洞/後門/Exploit/Zero Day
HP發布多款HP雷射印表機、多功能事務機及掃描器存在安全弱點
https://support.hp.com/us-en/document/ish_5000124-5000148-16

Citrix Workspace app存在安全性弱點
https://support.citrix.com/article/CTX338435

BeyondTrust Secure Remote Access Base Software 6.0.1 可讓攻擊者使用 XSS/CSRF 攻擊使管理員創建一個新的管理員帳戶
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2021-31589

sun_moon_jingyao Shockwall系統的服務器請求接收器功能存在不正確的身份驗證漏洞
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2021-45917

transloadit uppy易受伺服器端請求偽造（SSRF）的攻擊
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2022-0086

資安事件新聞週報 2022/1/3 ~ 2022/1/7

 資安事件新聞週報 2022/1/3  ~  2022/1/7

1.重大弱點漏洞/後門/Exploit/Zero Day
Log4j 事件會延燒數個月,甚至數年?這漏洞為何如此危險
https://blog.trendmicro.com.tw/?p=70925

美國政府要求企業必須保障客戶資料不受 Log4j 漏洞攻擊影響
https://www.twcert.org.tw/tw/cp-104-5447-b5264-1.html

中國駭客組織疑利用 Log4j 漏洞攻擊
https://technews.tw/2022/01/04/china-based-group-used-log4j-flaw-in-attack/

New Apache Log4j Update Released to Patch Newly Discovered Vulnerability
https://thehackernews.com/2021/12/new-apache-log4j-update-released-to.html

Log4Shell-like Critical RCE Flaw Discovered in H2 Database Console
https://thehackernews.com/2022/01/log4shell-like-critical-rce-flaw.html

Microsoft Warns of Continued Attacks Exploiting Apache Log4j Vulnerabilities
https://thehackernews.com/2022/01/microsoft-warns-of-continued-attacks.html

Microsoft Issues Fix for Exchange Y2K22 Bug That Crippled Email Delivery Service
https://thehackernews.com/2022/01/microsoft-issues-fix-for-exchange-y2k22.html

已有駭客著手開採微軟本月未修補完全的Windows Installer漏洞
https://reurl.cc/bkzA3l

Security bulletin: Security Bulletin: There are multiple vulnerabilities
in the Apache Log4j used in IBM® QRadar Risk Manager that may allow for remote code execution (RCE)
https://reurl.cc/dXVlND