###### tags: `資安事件新聞週報`
# 資安事件新聞週報 2022/5/2 ~ 2022/5/6

1.重大弱點漏洞/後門/Exploit/Zero Day
F5 BIG-IP 多版本存在安全性弱點
https://support.f5.com/csp/article/K23605346

Cisco 近日發布更新以解決多個產品的安全性弱點
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-security-bypass-JhOd29Gg

Linux 系統拉警報！全新 Nimbuspwn 漏洞讓駭客成功獲取系統最高權限
https://technews.tw/2022/05/03/new-nimbuspwn-linux-vulnerability-gives-hackers-root-privileges/

Google修補Chrome逾30個漏洞，當中7個存在重大風險
https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html

Google Releases Android Update to Patch Actively Exploited Vulnerability
https://thehackernews.com/2022/05/google-releases-android-update-to-patch.html

微軟修補Azure PostgreSQL租戶隔離漏洞
https://www.wiz.io/blog/wiz-research-discovers-extrareplica-cross-account-database-vulnerability-in-azure-postgresql/

TLStorm 2.0漏洞波及Aruba、Avaya交換器
https://www.armis.com/blog/tlstorm-2-nanossl-tls-library-misuse-leads-to-vulnerabilities-in-common-switches/

北韓駭客DarkSeoul利用Log4Shell漏洞入侵VMware遠距工作平臺
https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/stonefly-north-korea-espionage

Critical RCE Bug Reported in dotCMS Content Management Software
https://thehackernews.com/2022/05/critical-rce-bug-reported-in-dotcms.html

Critical TLStorm 2.0 Bugs Affect Widely-Used Aruba and Avaya Network Switches
https://thehackernews.com/2022/05/critical-tlstorm-20-bugs-affect-widely.html

Unpatched DNS Related Vulnerability Affects a Wide Range of IoT Devices
https://thehackernews.com/2022/05/unpatched-dns-related-vulnerability.html

Which Hole to Plug First? Solving Chronic Vulnerability Patching Overload
https://thehackernews.com/2022/05/which-hole-to-plug-first-solving.html

2.銀行/金融/保險/證券/支付系統/金融監理 新聞及資安
報稅季線上申報 留意自我資安防護檢測
https://turnnewsapp.com/livenews/finance/A07659002022050312300874

百年行庫從ATM案重生，一銀跨域挖角救火力挽狂瀾
https://times.hinet.net/news/23895014

矽谷搶華爾街午餐！　陳冲：十年來「純網銀」命運最坎坷
https://finance.ettoday.net/news/2242858?redirect=1

網攻逐年增加，「零信任安全」概念打造金融資安聯防網，徹底防駭
https://www.bnext.com.tw/article/68959/finance-security-twb

將來銀行爆帳務異常 狂發「扣款未成功」簡訊硬拗系統優化
https://www.wealth.com.tw/articles/d5521c6c-5c1e-4fe8-a569-5bbbffa04e02

強化上市櫃資安措施政策大公開，提供資通安全管控指引，推動加入情資分享平臺
https://www.ithome.com.tw/news/150803

手機報稅全攻略 3認證5步驟完成
https://reurl.cc/GxEabZ

為何我的無框行動門號無法進行手機報稅? 手機報稅須知
https://www.kocpc.com.tw/archives/439491

3.電子支付/行動支付/pay/資安
歐盟認為蘋果在 iOS 裝置限制 PayPal 等第三方電子錢包競爭能力 讓 Apple Pay 取得電子支付競爭優勢
https://www.cool3c.com/article/176717

iPhone悠遊卡NFC功能有望實現？歐盟控蘋果NFC 行動支付壟斷
https://mrmad.com.tw/eu-controls-apples-nfc-payment-monopoly

方保僑：香港電子支付市場洗牌
https://reurl.cc/loep5Y

4.加密貨幣/數位貨幣/挖礦/區塊鍊/智能合約 資安
Blockchain layers (L0, L1, L2, L3) in a Diagram
https://medium.com/@nick.5montana/blockchain-layers-l0-l1-l2-l3-in-a-diagram-569162398db

Why blockchain and Web3 user interfaces will suck for a while
https://uxdesign.cc/why-blockchain-and-web-3-user-interfaces-will-suck-for-a-while-7575b7515757

驚悚趣聞？「北韓駭客」來面試區塊鏈工程師是一種怎樣的體驗
https://www.blocktempo.com/i-think-i-just-interviewed-a-north-korean-hacker/

駭客竊取的 3 億美元等值比特幣遭沒收，暗網「絲路」創辦人的賠償金不用還了
https://www.inside.com.tw/article/27543-silk-road-ross-ulbricht-debt-bitcoin-siezure

NEAR 彩虹橋攻擊始末：駭客未得逞反損失 2.5 枚以太幣
https://blockcast.it/2022/05/03/hacker-lost-2-5-eth-due-to-a-failed-attack-on-the-near-protocol-rainbow-bridge/

一夜歸零！穩定幣項目Cashio遭駭客攻擊
https://reurl.cc/QLbVEp

虛擬貨幣玩家必備？軍規安全等級「大螢幕」電子硬體錢包，讓你的數位資產更安全
https://www.gq.com.tw/gadget/article/secux

「無聊猿」BAYC交易總額突破20億美元
https://news.cnyes.com/news/id/4862526

Yuga Labs元宇宙Otherside虛擬地塊Otherdeed NFT交易量突破20萬枚ETH
https://news.cnyes.com/news/id/4863127

買NFT沒有買到JPG嗎？談BAYC無聊猿藏家的模糊高度權利開放，到Koda的版權規則明朗化
https://news.cnyes.com/news/id/4864458

Cronos 上 DeFi 協議 MM.Finance 遭到前端攻擊，損失超 200 萬美元
https://news.cnyes.com/news/id/4864978?exp=a

什麼是加密貨幣挖礦（Crypto Mining）？新手挖礦掏金前需要知道的幾件事
https://blog.trendmicro.com.tw/?p=71744

電子支付最後一哩路 央行數位貨幣見雛形
https://vip.udn.com/vip/story/121938/6262361

5.資安事件新聞

A.病毒木馬 / 殭屍網路 / 勒索軟體 / Adware /APT /後門程式/IOC
微軟關閉VBA使Emotet改用新手法感染用戶
https://www.ithome.com.tw/news/150714

殭屍網路Emotet改用Excel外掛發動攻擊
https://www.proofpoint.com/au/blog/threat-insight/emotet-tests-new-delivery-techniques

安全團隊：駭客團伙利用惡意的 npm 包盜取助記詞和數字資產
https://news.cnyes.com/news/id/4862406

中國駭客Moshen Dragon操弄防毒軟體元件，利用DLL側載的方式執行後門程式
https://reurl.cc/q5NKVg

勒索軟體Magniber以Windows 10更新名義散布
https://reurl.cc/vdWKaL

OpenSSF推出能檢測惡意NPM與PyPI套件的工具
https://github.com/ossf/package-analysis/blob/main/docs/case_studies.md

勒索軟體REvil重出江湖，研究人員發現新的惡意軟體檔案
https://www.bleepingcomputer.com/news/security/revil-ransomware-returns-new-malware-sample-confirms-gang-is-back/

Avast防蠕蟲元件遭到勒索軟體AvosLocker濫用，用於停用防毒軟體，並掃描Log4Shell漏洞
https://www.trendmicro.com/en_us/research/22/e/avoslocker-ransomware-variant-abuses-driver-file-to-disable-anti-Virus-scans-log4shell.html

勒索軟體Black Basta竄改傳真服務並在安全模式執行
https://blog.minerva-labs.com/new-black-basta-ransomware-hijacks-windows-fax-service

駭客以AWS的名義上傳2個惡意NPM套件
https://www.whitesourcesoftware.com/resources/blog/aws-targeted-by-a-package-backfill-attack/

中Windows更新勒索病毒大崩潰！別想救回網勸1退路
https://3c.ltn.com.tw/news/48972

Windows用戶小心被騙！勒索病毒利用更新入侵要贖金
https://reurl.cc/OA4R97

北韓駭客Lazarus利用多種勒索軟體發動攻擊
https://www.trellix.com/en-us/about/newsroom/stories/threat-labs/the-hermit-kingdoms-ransomware-play.html

網路圖書館應用程式Onleihe供應商遭到勒索軟體LockBit攻擊
https://www.bleepingcomputer.com/news/security/online-library-app-onleihe-faces-issues-after-cyberattack-on-provider/

駭客以無聊猿的名義向圖像創作者散布惡意軟體
https://blog.malwarebytes.com/scams/2022/05/fake-cyberpunk-ape-executives-target-artists-with-malware-laden-job-offer/

研究人員發起Malvuln專案，找尋勒索軟體的漏洞來阻止攻擊行動
https://www.malvuln.com/

Mustang Panda deploys a new wave of malware targeting Europe
https://blog.talosintelligence.com/2022/05/mustang-panda-targets-europe.html

NetDooka Framework Distributed via PrivateLoader Malware as Part of Pay-Per-Install Service
https://www.trendmicro.com/en_us/research/22/e/netdooka-framework-distributed-via-privateloader-ppi.html

Raspberry Robin gets the worm early
https://redcanary.com/blog/raspberry-robin/

Old Services, New Tricks: Cloud Metadata Abuse by UNC2903
https://www.mandiant.com/resources/cloud-metadata-abuse-unc2903

The strange link between a destructive malware and a ransomware-gang linked
custom loader: IsaacWiper vs Vatet
https://reurl.cc/RrXk36

A new secret stash for “fileless” malware
https://securelist.com/a-new-secret-stash-for-fileless-malware/106393/

Password protected Excel spreadsheet pushes Remcos RAT
https://isc.sans.edu/diary/rss/28616

A new BluStealer Loader Uses Direct Syscalls to Evade EDRs
https://blog.minerva-labs.com/a-new-blustealer-loader-uses-direct-syscalls-to-evade-edrs

Analyzing BlackByte Ransomware Go-Based Variants
https://www.zscaler.com/blogs/security-research/analysis-blackbyte-ransomwares-go-based-variants

Backdoor disguised as a document editing and messenger program (*.chm)
https://asec.ahnlab.com/ko/33948/

Update on cyber activity in Eastern Europe
https://otx.alienvault.com/pulse/6272996039678903e0b73dd5

UAC-0056 cyberattack using GraphSteel and GrimPlant malware and COVID-19
https://cert.gov.ua/article/39882

AvosLocker Ransomware Variant Abuses Driver File to Disable Anti-Virus, Scans for Log4shell
https://reurl.cc/0pXWrA

New APT Group Earth Berberoka Targets Gambling Websites With Old and New Malware
https://documents.trendmicro.com/assets/txt/earth-berberoka-domains-2.txt
https://www.trendmicro.com/en_us/research/22/d/new-apt-group-earth-berberoka-targets-gambling-websites-with-old.html

Moshen Dragon’s Triad-and-Error Approach | Abusing Security Software to Sideload PlugX and ShadowPad
https://www.sentinelone.com/labs/moshen-dragons-triad-and-error-approach-abusing-security-software-to-sideload-plugx-and-shadowpad/

UNC3524: Eye Spy on Your Email
https://www.mandiant.com/resources/unc3524-eye-spy-email

Researchers Disclose Years-Old Vulnerabilities in Avast and AVG Antivirus
https://thehackernews.com/2022/05/researchers-disclose-10-year-old.html

Researchers Warn of 'Raspberry Robin' Malware Spreading via External Drives
https://thehackernews.com/2022/05/researchers-warn-of-raspberry-robin.html

Experts Analyze Conti and Hive Ransomware Gangs' Chats With Their Victims
https://thehackernews.com/2022/05/experts-analyze-conti-and-hive.html

AvosLocker Ransomware Variant Using New Trick to Disable Antivirus Protection
https://thehackernews.com/2022/05/avoslocker-ransomware-variant-using-new.html

Here's a New Tool That Scans Open-Source Repositories for Malicious Packages
https://thehackernews.com/2022/05/heres-new-tool-that-scans-for-malicious.html

Hackers Using PrivateLoader PPI Service to Distribute New NetDooka Malware
https://thehackernews.com/2022/05/hackers-using-privateloader-ppi-service.html

B.行動安全 / iPhone / Android /穿戴裝置 /App / 5G / 即時通訊
Google to Add Passwordless Authentication Support to Android and Chrome
https://thehackernews.com/2022/05/google-to-add-passwordless.html

Google Releases First Developer Preview of Privacy Sandbox on Android 13
https://thehackernews.com/2022/05/google-releases-first-developer-preview.html

西班牙首相和防長手機 發現間諜軟體
https://reurl.cc/7Dpb7y

不再隱藏！微軟網頁版App商店終於有「最後更新日期」
https://3c.ltn.com.tw/news/48923

「使用手機等於同意接受跟監」——美國發明這 APP，讓你取回自身隱私的控制權
https://buzzorange.com/citiorange/2022/05/05/phone-privacy-information-security/

中國京東方擅改iPhone OLED設計，遭蘋果抓包導致暫停生產
https://www.bnext.com.tw/article/69002/boe-changed-iphone-oled-design

日線上醫療「 LINE Doctor 」診療件數再創新高！3 亮點：免群聚、輕症分流、幼兒安心
https://www.inside.com.tw/article/27559-line-doctor-20times-onlinemed-omicron

蘋果Apple Silicon處理器存在Augury漏洞，恐洩露準備要執行的命令
https://www.prefetchers.info/

C.事件 / 駭客 / DDOS / APT / 雲端/ 暗網/ 徵才 / 國際資安事件 / 資安人力
台灣第一隊！如梭世代團隊入選國際資安機構弱點研究成員
https://www.ettoday.net/news/20220504/2244175.htm

台灣資安新秀成軍3年　被國際漏洞揭露計畫招為No.1管理者
https://www.ctwant.com/article/181687

前高中生黑帽駭客今變CNA資安專家 漏洞通報全球資料庫
https://udn.com/news/story/7315/6291363

當雲端環境出現挖礦活動,對企業是一種警訊
https://blog.trendmicro.com.tw/?p=72183

資安長該擔心的不只資料外洩或勒索病毒, 別忽略「礦坑的金絲雀」－加密貨幣挖礦
https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=9843

新興地下商業模式:專賣企業網路存取權限的 AaaS ,五個資安長 (CISO) 該知道的防禦策略
https://blog.trendmicro.com.tw/?p=71956

鴻海研究院執行長李維斌：AI塑造的環境就像是廚房，駭客蟑螂找到價值就會攻擊
https://www.thenewslens.com/article/166369

評鑑台灣百貨業者資安防護力，網站、電郵安全性最弱
https://technews.tw/2022/05/03/department-store-security/

駭客有多神祕？可以確定跟電影演的不一樣
https://www.gvm.com.tw/article/89500

駭客到底有多賺錢？抓1個漏洞最高拿260萬元
https://www.gvm.com.tw/article/89501

曝露於網際網路的資料庫於自2021年開始不斷增加
https://www.group-ib.com/media/public-facing-db/

Atlassian斷線事件影響775家客戶
https://www.ithome.com.tw/news/150708

SolarWinds 駭客這次進攻iOS 設備，竊取果粉網站登入資訊
https://techtagtw.com/results/086674a4a51f325b63d5

OpenSea官方Discord遭遇駭客攻擊，放出與YouTube合作相關釣魚鏈接
https://news.cnyes.com/news/id/4865772

美軍方社群網站帳號遭駭客入侵
https://reurl.cc/2ZmlGa

傳真社新聞通訊系統網站及內部系統受駭客入侵 逾3700電郵被存取
https://reurl.cc/ErRbY0

網路間諜藉由Exchange伺服器竊密，並攻擊網路視訊設備
https://www.mandiant.com/resources/unc3524-eye-spy-email

俄羅斯駭客APT29濫用工作行程安排平臺Trello發動攻擊
https://www.mandiant.com/resources/tracking-apt29-phishing-campaigns

駭客空前攻擊 俄國疲於應付
https://news.ltn.com.tw/news/world/paper/1515054

「匿名者」挺烏克蘭讓俄羅斯成「紙老虎」？慘遭3股境外駭客勢力圍剿
https://www.ftvnews.com.tw/news/detail/2022503W0046

烏情報主管：普廷死後 戰爭才能結束
https://ec.ltn.com.tw/article/breakingnews/3913914

俄遇空前駭客攻擊浪潮 普京或勝利日正式宣戰 摩爾多瓦恐遭入侵 北京開緊急會議
https://www.soundofhope.org/post/617707?lang=b5

香港無線新聞連發「詭異推播」 疑遭駭客警介入調查
https://reurl.cc/j1Gm3m

無綫新聞App連發異常推送訊息 TVB：網罪科今午已到辦公室蒐證
https://reurl.cc/yrMKvD

準備隨時接管洗腦？香港TVB連發詭異推播
https://www.ntdtv.com/b5/2022/05/03/a103416896.html

TVBS難道也有駭客入侵的問題嗎
https://www.readgov.com/8560/

中國駭客Naikon攻擊南亞軍事單位，植入滲透測試工具Viper
https://cluster25.io/2022/04/29/lotus-panda-awake-last-strike/

韓國執法部門逮捕2名朝鮮駭客資助的間諜
https://news.cnyes.com/news/id/4863410

北韓駭客利用VMware Log4j漏洞，駭入美國防、能源業的工程合作廠商
https://www.ithome.com.tw/news/150749

俄羅斯駭客針對羅馬尼亞政府發動DDoS攻擊
https://www.sri.ro/articole/atacuri-cibernetice-asupra-site-urilor-unor-institutii-publice-si-financiar-bancare.html

CrowdStrike的Docker蜜罐發現兩個可能引發阻斷服務的映像檔，疑似鎖定俄羅斯、白俄羅斯政府機關
https://www.crowdstrike.com/blog/compromised-docker-honeypots-used-for-pro-ukrainian-dos-attack/

美報告再揭中國政府駭客竊密 涉及國防產業逾30家企業受害
https://news.ltn.com.tw/news/world/breakingnews/3915448

所有單位統一用國產電腦 網民爆料中共實施安可計畫
https://www.soundofhope.org/post/618220?lang=b5

北京擬令各機關和國企全面汰除外國電腦 消除資安疑慮
https://www.worldjournal.com/wj/story/121347/6293807

美媒提前披露布林肯演講內容 仍定位中共是美最大威脅
https://www.soundofhope.org/post/618280?lang=b5

南韓加入北約網路防禦中心　強化網路防衛力
https://www.upmedia.mg/news_info.php?Type=3&SerialNo=144033

NIST Releases Updated Cybersecurity Guidance for Managing Supply Chain Risks
https://thehackernews.com/2022/05/nist-releases-updated-guidance-for.html

Chinese Hackers Caught Stealing Intellectual Property from Multinational Companies
https://thehackernews.com/2022/05/chinese-hackers-caught-stealing.html

Ukraine War Themed Files Become the Lure of Choice for a Wide Range of Hackers
https://thehackernews.com/2022/05/ukraine-war-themed-files-become-lure-of.html

Chinese Hackers Caught Exploiting Popular Antivirus Products to Target Telecom Sector
https://thehackernews.com/2022/05/chinese-hackers-caught-exploiting.html

Chinese "Override Panda" Hackers Resurface With New Espionage Attacks
https://thehackernews.com/2022/05/chinese-override-panda-hackers.html

Russian Hackers Targeting Diplomatic Entities in Europe, Americas, and Asia
https://thehackernews.com/2022/05/russian-hackers-targeting-diplomatic.html

Experts Uncover New Espionage Attacks by Chinese 'Mustang Panda' Hackers
https://thehackernews.com/2022/05/experts-uncover-new-espionage-attacks.html

NIST Releases Updated Cybersecurity Guidance for Managing Supply Chain Risks
https://thehackernews.com/2022/05/nist-releases-updated-guidance-for.html

資訊系統工程師(山鶯)-IIS(OA資安)_某知名公司 (3005767)
https://headhunt.com.tw/Pages/job-description.aspx?id=3005767

【知名外商網路資安軟體公司】軟體測試工讀生
https://www.104.com.tw/job/7mek1

台中大軟體公司資安主管
https://www.104.com.tw/job/7mg0i

MIS 程式設計師
https://www.104.com.tw/job/7meew

【資安所】資安生態推動人員
https://www.104.com.tw/job/7mfx3

資安軟體-業務工程師
https://www.104.com.tw/job/7mg22

新手網路資安工程師
https://www.1111.com.tw/job/98768986/

資安威脅與調查分析工程師
https://www.104.com.tw/job/7mj3y

資訊安全主管人員_某知名公司 (3004391)
https://headhunt.com.tw/pages/job-description.aspx?id=3004391

D.資料外洩/個資法/GDPR/網路詐騙/網路釣魚/盜刷/假新聞/網路霸凌/帳號安全
SEC Plans to Hire More Staff in Crypto Enforcement Unit to Fight Frauds
https://thehackernews.com/2022/05/sec-plans-to-hire-more-staff-in-crypto.html

網購詐騙再現！5大高風險電商曝　來電出現「+」就要當心
https://www.setn.com/News.aspx?NewsID=1109208

「你被加入高級會員」 迪卡儂消費者遭詐50萬
https://reurl.cc/2Zmlm9

網路報稅成趨勢　會計師提醒：小心6跡象、駭客竊個資
https://finance.ettoday.net/news/2242689

手機報稅夯，KPMG：留意三大安全要點，防駭客竊個資
https://www.bnext.com.tw/article/68935/tax-return-0503

好萊塢名媛大量私密裸照外流 囂張駭客再盜她數百萬元
https://reurl.cc/e3OVyj

小白機蒐1.7億筆個資 17房仲灌錄程式獲緩起訴
https://www.chinatimes.com/realtimenews/20220503004876-260402?chdtv

駭客濫用Google的SMTP中繼服務發送釣魚郵件
https://www.avanan.com/blog/the-gmail-smtp-relay-service-exploit

五大高風險電商 Q1發生1127詐騙
https://udn.com/news/story/7320/6281303?from=udn_ch2_menu_v2_main_cate

英國健保局有上百名員工的帳號遭駭，被用來發送網釣郵件
https://www.ithome.com.tw/news/150772

別當詐騙集團提款機，趨勢科技教你網路報稅如何顧資安
https://technews.tw/2022/05/05/scam-tax/

網傳購物網站「緊急通知！輝瑞新冠口服特效藥正式上線 治療率達89%可降低重症感染以及死亡率」
https://tfc-taiwan.org.tw/articles/7301

網傳殯儀館燒不停 調查局：疑境外勢力造假
https://www.rti.org.tw/news/view/id/2131952

多個 NFT 平台上的創作者遭釣魚惡意軟體攻擊
https://www.twcert.org.tw/tw/cp-104-6093-de801-1.html

新一波釣魚攻擊，鎖定官方認證 Twitter 帳號
https://www.twcert.org.tw/tw/cp-104-6092-c7c57-1.html

Yahoo交易安全中心提醒：注意釣魚網站與詐騙手法
https://reurl.cc/vdWEny

第一季詐騙高風險賣場出爐　假冒客服人員3月騙529件
https://beanfun.com/articles/detail/1520762648084353024?country=tw&site=446

E.研究報告/工具
研究報告:駭客集團入侵大量雲端機器挖礦圖利,對企業造成那些影響
https://blog.trendmicro.com.tw/?p=72196

微軟 Edge 新增免費 VPN 服務，臨時安全上網的方便選擇
https://technews.tw/2022/05/05/for-security-microsoft-edge-provides-free-vpn/

GitHub 將在 2023 年前強制所有貢獻者啟用雙重驗證
https://unwire.pro/2022/05/05/github-2/security/

資安學習路上-怎麼開始的
https://ithelp.ithome.com.tw/articles/10284928?sc=rss.qu

TikTok事件，是資安保護？還是政治打劫
https://vocus.cc/article/626f9d2cfd89780001bfb8bc

資安學習路上-Linux基礎與Web基礎
https://www.potatomedia.co/post/164f7462-23df-4e82-a8c5-3ffa49105aa2
https://www.potatomedia.co/post/2b271fb6-1d12-40ab-9bba-36bf6db32f5a

如何啟用Windows的動態鎖定功能
https://www.techbang.com/posts/95157-how-to-enable-the-dynamic-lock-feature-of-windows

擔心系統「遭小偷」，怎麼靠備份還原防止駭客入侵
https://www.bnext.com.tw/article/68991/hacker-proof-dep-backup-nick

軍備藍圖失竊？報告揭中駭客竊密壯大經濟，美歐亞企業受害
https://open.firstory.me/story/cl2srswz5006i01yo0s8t9n85

疫情驅動雲端化應用成顯學　企業重新奪回資安風險控制點 SASE融合網路安全　雲端服務保護混合辦公
https://www.netadmin.com.tw/netadmin/zh-tw/trend/0553A593737F49ACAD8714E603ECE06E

收購手段補強微分段技術　持續擴展SASE框架機制 邊緣至地端東西向防護　落實零信任網路存取
https://www.netadmin.com.tw/netadmin/zh-tw/viewpoint/D0048821033D4D9EBD121A191CA68897

10 Books Every Senior Engineer Should Read
https://semaphoreci.medium.com/10-books-every-senior-engineer-should-read-a61c1917e2a7

I Switched Password Managers and It Changed Everything
https://medium.com/macoclock/i-switched-password-managers-and-it-changed-everything-9b0417fe64a

Python Alpha 5 is HERE! 5 Promising Features that will blow your mind
https://medium.com/@Sabrina-Carpenter/python-alpha-5-is-here-5-promising-features-that-will-blow-your-mind-a4abd406d0ad

Renegotiate the web “bargain” by blocking all ads
https://doctorow.medium.com/renegotiate-the-web-bargain-by-blocking-all-ads-93844287566f

LinkedIn Is No Longer a Professional Networking Site
https://medium.com/artistic-mystic-soul/linkedin-is-no-longer-a-professional-networking-site-3ed273b05872

top 10 Android libraries
https://medium.com/localazy/top-10-android-libraries-to-boost-your-development-in-2022-3ec37fce8c22

A Bug Bounty Hunter’s Guide to IDOR Vulnerabilities
https://medium.com/@daniel.j.hunt/an-bug-bounty-hunters-guide-to-idor-vulnerabilities-27012bbccd7

Published in CodeX
https://medium.com/codex/lets-learn-build-and-sell-an-api-a12b0d7b4c2

Build Your first CI/CD Pipeline in Azure DevOps
https://qatechtalks.medium.com/build-your-first-ci-cd-pipeline-in-azure-devops-5bd3408f36ff

THE 15 BEST Chrome Extensions for 2022
https://bdarfler.medium.com/the-16-bestchrome-extensions-for-2022-b14e3bd08001

Spotify: UX Research case study
https://medium.com/@jainanumeha74/spotify-ux-research-case-study-68997acf20f1

How to learn anything fast, no matter what your brain condition is
https://medium.com/illumination/how-to-learn-anything-fast-no-matter-what-your-brain-condition-is-e3ffd9bf7e12

8 amazing Open Source projects
https://medium.com/codex/part-2-8-best-open-source-projects-you-should-try-out-6de58feba631

Train your computer vision models atleast 2X faster by making these small changes
https://akhilprasannan.medium.com/train-your-computer-vision-model-least-2x-by-making-these-small-changes-db801e7b22ad

10 Automation Scripts for Your Daily Python Projects
https://python.plainenglish.io/10-automation-scripts-for-your-daily-python-projects-892a82be3f75

Everything That You Didn’t Know About The Dark Web But Should
https://medium.com/illumination/everything-that-you-didnt-know-about-the-dark-web-but-should-24ecb4c501a

The Importance of Defining Secure Code
https://thehackernews.com/2022/05/the-importance-of-defining-secure-code.html

Heroku Forces User Password Resets Following GitHub OAuth Token Theft
https://thehackernews.com/2022/05/heroku-forces-user-password-resets.html

How to make Excel look less like… Excel
https://datastudio.medium.com/how-to-make-excel-look-less-like-excel-8eb91b75ab8f

Top 5 FREE Cyber Security Certifications
https://medium.com/@sam5epi0l/top-5-free-cyber-security-certifications-ac06fe46309c

F.商業
雲世代的資安治理需與企業商業決策並行
https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=9836

Check Point Research：全球三分之二 Android 使用者恐面臨隱私洩露風險
https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=9839

東捷資訊一站式供應鏈整合管理平台為製造業打造合規安全的供應鏈生態系
https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=9842

SailPoint推出雲端身分安全治理組合方案全新模組
https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=9841

漢領國際總代理Perception Point 防禦即服務 Prevention as a Service
https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=9837

訊連加入FIDO聯盟，致力打造安全簡易的數位身份驗證
https://www.techbang.com/posts/95940-cyberlink-joins-fido-alliance

研發擴展雲端資安服務能量　統一政策監控防破口遭滲透 端到端整合安全連線存取　實踐零信任邊緣架構
https://www.netadmin.com.tw/netadmin/zh-tw/trend/B7A9171CF1774A9DB4763B41B31DC649

快速還原機制不難打造！企業如何從勒索攻擊中全身而退
https://buzzorange.com/techorange/2022/05/05/commvault-it/

Microsoft 365、Azure即將允許不同帳號間一鍵切換
https://www.ithome.com.tw/news/150709

義美高志明站台！完成近 6,000 萬元募資，池安科技瞄準「後量子密碼技術」
https://technews.tw/2022/05/03/chelpis-post-quantum-cryptography-aorta/

免費G-Suite企業版6月1日自動改成付費Workspace，新增免費使用方案
https://www.ithome.com.tw/news/150722

Nozomi Networks成為CISA首家資安合作夥伴
https://tw.systex.com/nozomi-networks-cisa/

中華電組織轉型最後一塊拼圖 成立資訊技術分公司
https://news.cnyes.com/news/id/4863678

Citrix 全新以意圖為基礎的新世代應用與安全交付解決方案
https://www.netadmin.com.tw/netadmin/zh-tw/snapshot/4EC424B8D273420D8C017FC3EA223A83

Noname Security 主動偵測找出 API 資安威脅，打造專屬的 API 資安平台
https://www.netfos.com.tw/Projects/netfos/pages/product/Noname.html

IBM 宣布推出新一代快閃儲存產品，因應當前資安挑戰
https://technews.tw/2022/05/05/ibm-flashsystem-cyber-vault/

網路即安全 Aruba ClearPass強化網路存取的安全性和合規性
https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=9851

G.政府
副總統：臺灣發展新安全產業是天時、地利、人和
https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=9840

資安威脅政府單位首當其衝 事前監控才能有效防堵
https://www.digitimes.com.tw/tech/dt/n/shwnws.asp?cnlid=14&id=0000634250_F673SSGK47YQNK1ILPR3H

《李忠憲專欄》1922 資料庫
https://taronews.tw/2022/05/02/829215/

民調駭客頻干擾惹民怨 民進黨屏東縣黨部譴責此風不可長
https://reurl.cc/n1Oldn

調查局公布科、組長等34人職務調動
https://news.ltn.com.tw/news/society/breakingnews/3913699

PCR結果收不到？ 指揮中心：手機號碼填寫一定要正確
https://news.ltn.com.tw/news/life/breakingnews/3917549

台北市補助低收入戶買華為 基進批把市民當韭菜
https://www.epochtimes.com/b5/22/5/6/n13728804.htm

H.工控系統/ICS/SCADA/IOT/物聯網/車聯網/電動車/人工智慧/AI/ML/人臉辨識/醫療 相關資安
趨勢科技攻車用資安 VicOne要做「電動車界莫德納」
https://www.chinatimes.com/realtimenews/20220504004925-260410?chdtv

用於嵌入式系統的程式庫存在DNS漏洞，恐波及數百萬物聯網設備
https://www.nozominetworks.com/blog/nozomi-networks-discovers-unpatched-dns-bug-in-popular-c-standard-library-putting-iot-at-risk/

小心新DNS漏洞！數百萬路由器、IoT恐遭駭客攻擊
https://3c.ltn.com.tw/news/48955

大葉大學蔡渙良開發物聯網系統 監測電力減少電器虛功
https://times.hinet.net/news/23891713

I.教育訓練
中華軟協-iPAS「初級」資訊安全工程師能力研習衝刺班：全面招生中
https://www.cs.nycu.edu.tw/announcements/detail/8778

2022「證券期貨資訊安全實務養成課程」即日起開始報名
https://www.sfi.org.tw/news/news-7/3589

網路時代人人要學的資安基礎必修課 (How Cybersecurity Really Works)
https://www.tenlong.com.tw/products/9786263240384?list_name=p-r-zh_tw

不只是工程師才要懂的 App 資訊安全：取得資安檢測合格證書血淚史（iT邦幫忙鐵人賽系列書）
https://news.pchome.com.tw/living/books/20220202/index-64375841669874292009.html

【資安管理國際證照懶人包】學習心得、考試要點一次整理！2022 轉職夢幻工作看這篇
https://buzzorange.com/techorange/2021/12/30/isaca/

CISSP考試心得 – Benson
https://reurl.cc/GbWvxd

CPSA(CREST Practitioner Security Analyst) 資安分析師考試心得
https://tech-blog.cymetrics.io/posts/huli/crest-cpsa-prepare/

EC-Council CEH v11 考試心得、改版資訊以及準備方向 2021、2022
https://reurl.cc/1oyEM8

CEH v11 考試心得與準備方式
https://blog.sean.taipei/2022/01/ceh

110年新進人員「校園資訊安全講座」教材
https://cc.nccu.edu.tw/p/406-1001-740,r18.php

【訓練教材D】資訊安全技術教育訓練教材
https://iscb.nchu.edu.tw/2019/07/d.html

109資通安全管理法數位教育訓練
https://reurl.cc/ARlmqp

110-1初級資訊安全工程師-資訊安全管理概論
https://yamol.tw/exam.php?id=104050

中大信息工程學系 栽培資訊科技領導人才
https://reurl.cc/ARZKDK

伊雲谷、中山大學產學合作 累積雲端資安人才能量
https://ctee.com.tw/industrynews/technology/587459.html

SANS Cyber Aces Online Tutorials
https://tutorials.cyberaces.org/tutorials.html

Free Online Cybersecurity Courses (MOOCs)
https://www.cyberdegrees.org/resources/free-online-courses/

Develop Your Cybersecurity Skills
https://www.cybrary.it/catalog/cybersecurity/

Mobile App Security
https://www.cybrary.it/course/mobile-app-security/

Introduction to Cybersecurity
https://reurl.cc/bnaj6d

How to Tackle SaaS Security Misconfigurations
https://thehackernews.com/2021/11/how-to-tackle-saas-security.html

How to Build a Security Awareness Training Program that Yields Measurable Results
https://thehackernews.com/2021/11/how-to-build-security-awareness.html

Common Attacks
https://choson.lifenet.com.tw/?p=1174

6.近期資安活動及研討會
【資安系列講座】去中心化神話也暗藏危機? 區塊鏈安全線上講座 2022/5/7
https://hackersir.kktix.cc/events/20220507blockchain

Scala Taiwan Mokumoku #15 2022/5/7
https://www.meetup.com/Scala-Taiwan-Meetup/events/285310131/

Just a chat - with no Expectations 2022/5/7
https://www.meetup.com/Taipei-%E6%9A%97%E5%8F%B7%E9%80%9A%E8%B2%A8-Cryptocurrency-Meetup/events/285326731/

Empowering Yourself, Empowering Others | 一場蛻變的旅程 | Part 1 2022/5/8
https://www.meetup.com/Women-Who-Code-Taipei/events/285321784/

K12的科技教育-除了程式還可以教什麼 2022/5/9
https://www.meetup.com/rladies-taipei/events/284421238/

資安社 - 大學之道: 數位時代的資安素養入門-認識資安搶旗賽、參賽經驗分享 2022/5/11
https://nsysuisc.kktix.cc/events/20220511ctf

沙崙資安基地 線上免費資安課程 個人資料盤點暨風險評鑑實務 2022/5/12
https://bit.ly/3kcdoRg

Taipei Creative Coders Meetup #17 2022/5/13
https://www.meetup.com/tpecreativecoders/events/285540074/

元智資工高中生短期資訊課程-微插電資安體驗工作坊 2022/5/14
https://cse-yzu.kktix.cc/events/yzcs7

工控系統資安安全線上論壇 2022/5/16
https://www.ctsp.gov.tw/chinese/01-News/01-online_view.aspx?v=1&fr=1000&no=1001&sn=15005

沙崙資安基地 線上免費資安課程 多的是你不知道的事-揭秘OSINT 2022/5/24
https://bit.ly/3vDkjYO

釣魚釣魚釣到你_白帽駭客教你如何利用人性弱點突破防禦 2022/5/25
http://www.cs.thu.edu.tw/web/news/detail.php?id=4129

資安政策法規標準 2022/5/25 ~ 2022/5/26
https://moltke.nccu.edu.tw/Registration/registration.do?action=conferenceInfo&conferenceID=X19873

國家高速網路與計算中心教育訓練 「大數據程式開發平台(VM版本)」建置與開發實務課程 2022/5/27
https://edu.nchc.org.tw/course/one_course_introduction.asp?lms_auto_course_id=3983&from_course_list_url=course_index

資訊安全系列課程系列九：機器學習與資安異常診斷實務(第1期) 2022/6/7
https://www.tabf.org.tw/CourseDetail.aspx?PID=487302

駭客奪旗攻防演練：金融資安人才養成專班(第1期) 2022/04/28~2022/06/09
https://www.tabf.org.tw/CourseDetail.aspx?PID=487750

國家高速網路與計算中心教育訓練 「大數據程式開發平台(VM版本)」建置與開發實務課程 2022/5/27
https://edu.nchc.org.tw/course/one_course_introduction.asp?lms_auto_course_id=3983&from_course_list_url=homepage

風險導向資安稽核 2022/7/20
https://www.cisanet.org.tw/Course/Detail/2756

2022 CYBERSEC 資安大會 Jamf 攤位講座 2022/9/20 ~ 2022/9/22
https://jamf.kktix.cc/events/cybersec2022jamf