清静研究职员披露已被使用的Windows提权0day；黑客在暗网出售110万个Lazada Redmart用户帐户

宣布时间 2020-11-01

【清静误差】


清静研究职员披露已被使用的Windows提权0day

https://www.zdnet.com/article/google-discloses-windows-zero-day-exploited-in-the-wild/


NVIDIA修复其DGX服务器AMI BMC固件中的9个误差

https://www.securityweek.com/nvidia-patches-ami-bmc-vulnerabilities-impacting-several-major-vendors


【威胁情报】


黑客在暗网出售110万个Lazada Redmart用户帐户

https://www.bleepingcomputer.com/news/security/over-1m-lazada-redmart-accounts-sold-online-after-data-breach/


银行木马Wroba通过文本撒播 ，主要针对美国用户

https://threatpost.com/wroba-mobile-banking-trojan-spreads-us/160785/


CISA和FBI宣布伊朗APT组织窃取选民数据的咨询

https://us-cert.cisa.gov/ncas/current-activity/2020/10/30/cisa-and-fbi-release-joint-advisory-iranian-apt-actor-targeting