2月13日每日安全热点 – Yandex出现数据泄露

Inspired by 360CERT

安全研究 Security Research

IDOR漏洞技巧

https://www.aon.com/cyber-solutions/aon_cyber_labs/finding-more-idors-tips-and-tricks/

利用Auditd挖掘CVE-2021-3156

https://www.archcloudlabs.com/projects/auditd-cve-2021-3156/

安全资讯 Security Information

Telegram发布安全更新增强隐私保护

https://www.bleepingcomputer.com/news/security/telegram-privacy-feature-failed-to-delete-self-destructing-video-files/

NPM供应链攻击后续报道

https://www.bleepingcomputer.com/news/security/copycats-imitate-novel-supply-chain-attack-that-hit-tech-giants/

安全报告 Security Report

Google报告称美Gmail用户为钓鱼攻击最大受害者

https://www.bleepingcomputer.com/news/security/google-gmail-users-from-us-most-targeted-by-phishing-attacks/

安全事件 Security Incident

IRS提醒税务相关钓鱼激增

https://www.bleepingcomputer.com/news/security/scammers-target-us-tax-pros-in-ongoing-irs-phishing-attacks/

Yandex出现数据泄露

https://www.bleepingcomputer.com/news/security/yandex-suffers-data-breach-after-sysadmin-sold-access-to-user-emails/