Authentic Jobs及Sonic Jobs泄露25万求职者信息 ；Mission Health被植入Magecart

宣布时间 2019-10-20

【数据泄露】


Authentic Jobs及Sonic Jobs意外泄露25万求职者信息

https://www.infosecurity-magazine.com/news/personal-data-of-200k-jobseekers/


【清静播报】


数百个网站因Laravel设置过失导致易受挟制攻击

https://threatpost.com/trump-campaign-website-allowed-email-hijack/149278/


Pitney Bowes确认其系统中止是由勒索软件Ryuk导致

https://securityaffairs.co/wordpress/92641/cyber-crime/pitney-bowes-ryuk-ransomware.html



Mission Health网站从2016年起就被植入Magecart

https://www.zdnet.com/article/mission-health-store-hijack-went-undetected-for-years/


【误差补丁】


Kubernetes修复可导致身份验证绕过及DoS的两个误差
https://threatpost.com/kubernetes-bugs-authentication-bypass-dos/149265/