在刚刚过去的2016年，勒索敲诈类型的恶意攻击越来越频繁和复杂，因为网络犯罪份子从中看到了赚钱的机会。位于英国的技术服务集团今天发布了一张信息图，洞察了勒索软件的肆虐情况。根据数据显示，2016年勒索类型的攻击增长了3500%，在2015年12月至2016年4月勒索软件的数量增加了600%。 全球41%的企业遭受勒索软件的攻击，不过在英国地区这个数据更高，为54%。勒索软件占企业攻击的四分之一，而更令人担忧的是37%的受害者都选择支付了赎款。 电子邮件依然是最常见的分发方法，占比为59%，其次是网站、社交媒体和受感…
不明IP成功黑入台湾数十个驻外馆处领务信箱，可能使1.5万人次的个人资料被窃取。台湾外事部门为此道歉。 台湾人出境登录系统须填写中英文姓名、身份证号码、“护照”号码和手机及紧急联络人等信息。据台湾《联合报》9日报道，台外事部门日前进行安全查核时，发现外馆领务电子信箱设定的密码被破解，不明人士直接登入服务器，进入数十个外馆领务电子信箱近3个月，1万多人次的个人资料可能遭窃取。“行政院”资安处处长简宏伟称，目前尚无法断定是有计划或特定目的的黑客攻击事件，还是单一个案。官员坦承，外馆单位的密码设定安全等级不够高，导致密码…
E安全2月12日讯 美国信息安全咨询公司IANS Research开发出一套模型，旨在帮助首席信息安全官维持其职业发展前景：具体而言，即“跨越时间与空间实现关键性资产保护。” 这套名为CISO Impact的模型基于两项基础性能力：技术卓越性与组织参与性。前者涉及从访问控制到事件响应的八个领域; 而后者则包括从业务信息安全到控制业务部门可承担风险的七项因素。 这套模型结合有来自1200多位高水平CISO与信息安全团队的洞察结论，IANS对相关信息加以整理并汇总出这份《高水平CISO获得成功的五个秘密》报告。 IA…
漏洞类别：OEL 漏洞等级： 漏洞信息 Oracle Enterprise Linux has released security update for spice-server to fix the vulnerabilities. Affected Products: Oracle Linux 6 漏洞危害 Successful exploitation of the vulnerabilities will allow buffer overflows and denial of service attack…
漏洞类别：OEL 漏洞等级： 漏洞信息 Oracle Enterprise Linux has released security update for spice to fix the vulnerabilities. Affected Products: Oracle Linux 7 漏洞危害 Successful exploitation of the vulnerabilities will allow buffer overflows and denial of service attacks. 解决方案…
漏洞类别：Local 漏洞等级： 漏洞信息 HPE ArcSight Data Platform (formerly ArcSight Logger) is a SIEM platform that unifies data collection and log management of machine data for security. An authorization bypass vulnerability exists that allows an authenticated, remote attac…
漏洞类别：Debian 漏洞等级： 漏洞信息 Debian has released security update for svgsalamander to fix the vulnerabilities. 漏洞危害 Successful exploitation will allow server side request forgery. 解决方案 Refer to Debian security advisory DSA 3781-1 to address this issue and obtain fur…
漏洞类别：AIX 漏洞等级： 漏洞信息 IBM AIX is prone to the following vulnerabilities: OpenSSH is vulnerable to a denial of service, caused by an error in the kex_input_kexinit() function. By sending specially crafted data during the key exchange process, a remote attacker co…
漏洞类别：Amazon Linux 漏洞等级： 漏洞信息 It was discovered that the Hotspot component of OpenJDK did not properly check arguments of the System.arraycopy() function in certain cases. An untrusted Java application or applet could use this flaw to corrupt virtual machine's …
漏洞类别：Amazon Linux 漏洞等级： 漏洞信息 It was discovered that Subversion's mod_dontdothat module and Subversion clients using http(s):// are vulnerable to a denial-of-service attack caused by exponential XML entity expansion. An authenticated remote attacker can cause d…
漏洞类别：Amazon Linux 漏洞等级： 漏洞信息 A NULL pointer dereference flaw was found in MIT Kerberos kadmind service. An authenticated attacker with permission to modify a principal entry could use this flaw to cause kadmind to dereference a null pointer and crash by supply…
漏洞类别：Amazon Linux 漏洞等级： 漏洞信息 A stack overflow vulnerability was found in _nss_dns_getnetbyname_r. On systems with nsswitch configured to include "networks: dns" with a privileged or network-facing service that would attempt to resolve user-provided network nam…
漏洞类别：CGI 漏洞等级： 漏洞信息 WordPress is an open source blogging tool and content management system based on PHP and MySQL. It has many features including a plug-in architecture and a template system. WordPress versions prior to 4.7.2 contain the following unauthorize…
漏洞类别：SUSE 漏洞等级： 漏洞信息 Suse has released security update for mysql to fix the vulnerabilities. Affected Products: SUSE Linux Enterprise Software Development Kit 11-SP4 SUSE Linux Enterprise Server 11-SP4 漏洞危害 This vulnerability could be exploited to gain complet…
漏洞类别：SUSE 漏洞等级： 漏洞信息 SUSE has released security update for spice to fix the vulnerabilities. Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP1 SUSE Linux Enterprise Server 12-SP1 SUSE Linux Enterprise Desktop 12-SP1 漏洞危害 This vulnerabili…
漏洞类别：SUSE 漏洞等级： 漏洞信息 SUSE has released security update for guile to fix the vulnerabilities. Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP2 SUSE Linux Enterprise Software Development Kit 12-SP1 SUSE Linux Enterprise Server 12-SP2 SUSE…
漏洞类别：SUSE 漏洞等级： 漏洞信息 SUSE has released security update for spice to fix the vulnerabilities. Affected Products: SUSE Linux Enterprise Software Development Kit 11-SP4 SUSE Linux Enterprise Server 11-SP4 漏洞危害 This vulnerability could be exploited to gain complet…
漏洞类别：SUSE 漏洞等级： 漏洞信息 SUSE has released security update for guile to fix the vulnerabilities. Affected Products: SUSE Linux Enterprise Software Development Kit 11-SP4 SUSE Linux Enterprise Server 11-SP4 漏洞危害 Malicious users could use this vulnerability to chang…
漏洞类别：SUSE 漏洞等级： 漏洞信息 SUSE has released security update for spice to fix the vulnerabilities. Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP2 SUSE Linux Enterprise Server 12-SP2 SUSE Linux Enterprise Desktop 12-SP2 漏洞危害 This vulnerabili…
漏洞类别：SUSE 漏洞等级： 漏洞信息 SUSE has released security update for libxml2 to fix the vulnerabilities. Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP2 SUSE Linux Enterprise Server 12-SP2 SUSE Linux Enterprise Desktop 12-SP2 漏洞危害 This vulnerabi…
漏洞类别：SUSE 漏洞等级： 漏洞信息 SUSE has released security update for gcc48 to fix the vulnerabilities. Affected Products: SUSE Linux Enterprise Software Development Kit 11-SP4 漏洞危害 This vulnerability could be exploited to gain partial access to sensitive information. 解决…
漏洞类别：SUSE 漏洞等级： 漏洞信息 SUSE has released security update for libcap-ng to fix the vulnerabilities. Affected Products: SUSE Linux Enterprise Software Development Kit 11-SP4 SUSE Linux Enterprise Server 11-SP4 漏洞危害 This vulnerability could be exploited to gain com…
漏洞类别：CGI 漏洞等级： 漏洞信息 LxCenter Kloxo (formerly known as Lxadmin) is a free, opensource web hosting control panel for the Red Hat and CentOS Linux distributions. The vulnerability exists because an implemented /lbin/webcommand.php source file fails to properly sa…
漏洞类别：Ubuntu 漏洞等级： 漏洞信息 It was discovered that Nettle incorrectly mitigated certain timing side-channel attacks. 漏洞危害 A remote attacker could possibly use this flaw to recover private keys. 解决方案 Refer to Ubuntu advisory USN-3193-1 for affected packages and patc…
漏洞类别：Ubuntu 漏洞等级： 漏洞信息 It was discovered that Squid incorrectly handled processing HTTP conditional requests. It was discovered that Squid incorrectly handled certain HTTP Request headers when using the Collapsed Forwarding feature. 漏洞危害 A remote attacker coul…