相關新聞 | HKCERT

SharePoint vulnerability with 9.8 severity rating under exploit across globe

Ongoing attacks are allowing hackers to steal credentials giving privileged access.

Ars Technica 2025年07月22日 187 觀看次數

Google finds custom backdoor being installed on SonicWall network devices

Overstep backdoor nukes key log entries, making detection hard.

Ars Technica 2025年07月17日 193 觀看次數

Police disrupt “Diskstation” ransomware gang attacking NAS devices

An international law enforcement action dismantled a Romanian ransomware gang known as 'Diskstation,' which encrypted the systems of several companies in the Lombardy region, paralyzing their businesses. [...]

Bleepingcomputer 2025年07月16日 476 觀看次數

Interlock ransomware adopts FileFix method to deliver malware

Hackers have adopted the new technique called 'FileFix' in Interlock ransomware attacks to drop a remote access trojan (RAT) on targeted systems. [...]

Bleepingcomputer 2025年07月15日 260 觀看次數

Google Gemini flaw hijacks email summaries for phishing

Google Gemini for Workspace can be exploited to generate email summaries that appear legitimate but include malicious instructions or warnings that direct users to phishing sites without using attachments or direct links. [...]

Bleepingcomputer 2025年07月13日 444 觀看次數

You have a fake North Korean IT worker problem - here's how to stop it

By now, the North Korean fake IT worker problem is so ubiquitous that if you think you don't have any phony resumes or imposters in your interview queue, you're asleep at the wheel. […]

The Register 2025年07月13日 241 觀看次數

Hackers are exploiting critical RCE flaw in Wing FTP Server

Hackers have started to exploit a critical remote code execution vulnerability in Wing FTP Server just one day after technical details on the flaw became public. [...]

Bleepingcomputer 2025年07月12日 300 觀看次數

eSIM Bug in Millions of Phones Enables Spying, Takeover

eSIMs around the world may be fundamentally vulnerable to physical and network attacks because of a 6-year-old Oracle vulnerability in technology that underlies billions of cards.

Dark Reading 2025年07月11日 239 觀看次數

An NVIDIA Container Bug & Chance to Harden Kubernetes

A container escape flaw involving the NVIDIA Container Toolkit could have enabled a threat actor to access AI datasets across tenants.

Dark Reading 2025年07月10日 222 觀看次數

Google reveals details on Android’s Advanced Protection for Chrome

Google is sharing more information on how Chrome operates when Android mobile users enable Advanced Protection, highlighting strong security improvements. [...]

Bleepingcomputer 2025年07月10日 189 觀看次數