勒索团伙REvil利用Kaseya VSA进行供应链攻击；研究人员披露西门子SIMATIC HMI产物中的宁静漏洞

宣布时间 2021-07-04

【威胁情报】


勒索团伙REvil利用Kaseya VSA进行供应链攻击活动

https://blog.talosintelligence.com/2021/07/revil-ransomware-actors-attack-kaseya.html


【漏洞补丁】


Microsoft披露PowerShell 7中的远程代码执行漏洞

https://www.bleepingcomputer.com/news/security/microsoft-warns-of-critical-powershell-7-code-execution-vulnerability/


研究人员披露西门子SIMATIC HMI产物中的宁静漏洞

https://therecord.media/telnet-service-left-enabled-and-without-a-password-on-simatic-hmi-comfort-panels/


0patch平台宣布PrintNightmare 0day的非官方补丁

https://www.bleepingcomputer.com/news/security/actively-exploited-printnightmare-zero-day-gets-unofficial-patch/


【分析陈诉】


Which宣布有关针对智能家居的攻击活动的分析陈诉

https://www.which.co.uk/news/2021/07/how-the-smart-home-could-be-at-risk-from-hackers/