###### tags: `資安事件新聞週報` # 資安事件新聞週報 2019/9/16 ~ 2019/9/20 1.重大弱點漏洞/後門/Exploit/Zero Day Atlassian Jira 跨站脚本漏洞 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14996 Windows Defender malware scans are failing after a few seconds https://www.zdnet.com/article/windows-defender-malware-scans-are-failing-after-a-few-seconds/ Haxx curl 安全漏洞 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5481 IBM WebSphere Application Server 多個漏洞 https://www.ibm.com/support/pages/security-bulletin-information-disclosure-vulnerability-websphere-application-server-cve-2019-4477 https://www.ibm.com/support/pages/security-bulletin-file-traversal-vulnerability-websphere-application-server-admin-console-cve-2019-4268 https://www.ibm.com/support/pages/security-bulletin-cross-site-scripting-vulnerability-websphere-application-server-admin-console-cve-2019-4270 CVE-2019-1579:-- #Critical Pre-Authentication #Vulnerability https://github.com/securifera/CVE-2019-1579 Vivotek VIVOTEK IP Camera 安全漏洞 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14458 Warning: Researcher Drops phpMyAdmin Zero-Day Affecting All Versions https://thehackernews.com/2019/09/phpmyadmin-csrf-exploit.html 安全專家在多家廠商的SOHO路由器和NAS設備中發現了125個新漏洞 https://nosec.org/home/detail/2966.html 125 New Flaws Found in Routers and NAS Devices from Popular Brands https://thehackernews.com/2019/09/hacking-soho-routers.html 新的NetCAT 漏洞利用英特爾至強處理器上的DDIO 竊取數據 https://www.bilibili.com/read/cv3579340/ 使用ASPEED AST2400和 AST2500 system-on-chips (SoCs) 的系統相關的Baseboard Management Controller (BMC)安全漏洞 https://www.supermicro.com/support/security_CVE-2019-6260.cfm?mlg=1 CVE-2019-12922：零日phpMyAdmin跨站點請求偽造漏洞警報 https://www.linuxidc.com/Linux/2019-09/160657.htm phpMyAdmin 4.9.0.1 Cross Site Request Forgery https://packetstormsecurity.com/files/154483/phpmyadmin4901-xsrf.txt FTPShell Client 6.74 Buffer Overflow https://packetstormsecurity.com/files/154482/ftpshell674-overflow.txt [漏洞預警] CVE-2019-10392 / Jenkins Git Client插件遠程命令執行漏洞 https://qiita.com/shimizukawasaki/items/a4bd7e329252a90be3d4 必升！佳能連發8款單反升級固件：修復主要漏洞 https://news.sina.com.tw/article/20190917/32674210.html 微軟發佈09月份安全性公告 https://support.microsoft.com/en-us/help/20190910/security-update-deployment Red Hat OpenShift Container Platform 安全漏洞 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10213 Popular consumer and enterprise routers, IoT devices contain remote access vulnerabilities https://www.zdnet.com/article/iot-security-has-become-worse-in-the-last-five-years/#ftag=RSSbaffb68 jenkins -- script_security https://nvd.nist.gov/nvd.cfm?cvename=CVE-2019-10399 jenkins -- script_security https://nvd.nist.gov/nvd.cfm?cvename=CVE-2019-10400 dlink -- dir-806_firmware https://nvd.nist.gov/nvd.cfm?cvename=CVE-2019-10891 dlink -- dir-806_firmware https://nvd.nist.gov/nvd.cfm?cvename=CVE-2019-10892 dlink -- dir-868l_firmware https://nvd.nist.gov/nvd.cfm?cvename=CVE-2019-16190 teamviewer https://nvd.nist.gov/nvd.cfm?cvename=CVE-2019-11769 Symantec Advanced Secure Gateway (ASG) / ProxySG - Unrestricted File Upload https://www.exploit-db.com/exploits/47392 Misuse of WordPress update_option() function Leads to Website Infections https://blog.sucuri.net/2019/09/misuse-of-wordpress-update_option-function-leads-to-website-infections.html LastPass緊急修補會洩露用戶前一個登入網站密碼的漏洞 https://www.ithome.com.tw/news/133083 VMware Releases Security Updates for Multiple Products https://www.us-cert.gov/ncas/current-activity/2019/09/17/vmware-releases-security-updates-multiple-products VMware 產品多個漏洞 https://www.vmware.com/security/advisories/VMSA-2019-0013.html Webmin 1.920 Remote Code Execution https://packetstormsecurity.com/files/154485/CVE_2019_15107.c phpMyAdmin 4.9.0.1 Cross Site Request Forgery https://packetstormsecurity.com/files/154483/phpmyadmin4901-xsrf.txt FTPShell Client 6.74 Buffer Overflow https://packetstormsecurity.com/files/154482/ftpshell674-overflow.txt Western Digital My Book World II NAS 1.02.12 Hardcoded Credential https://packetstormsecurity.com/files/154524/wdmbwiinas10212-exec.txt TOR Virtual Network Tunneling Tool 0.4.1.6 https://packetstormsecurity.com/files/154534/tor-0.4.1.6.tar.gz Google Chrome 多個漏洞 https://chromereleases.googleblog.com/2019/09/stable-channel-update-for-desktop_18.html Dell EMC RSA Archer 信息洩露漏洞 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3756 Microsoft Windows遠端桌面服務存在安全漏洞(CVE-2019-1181、CVE-2019-1182、CVE-2019-1222及CVE-2019-1226)，允許攻擊者遠端執行任意程式碼，請儘速確認並進行更新 https://www.nccst.nat.gov.tw/VulnerabilityDetail?lang=zh&seq=1107 JVN#97845465 LINE (Android版) における複数の整数オーバーフローの脆弱性 https://jvn.jp/jp/JVN97845465/ 2.銀行/金融/保險/證券/支付系統/ 新聞及資安 港交所擬收購倫敦證券交易所　　傳英國政府或否決交易 https://unwire.pro/2019/09/12/hkex/news/ 「世紀併購」香港出價收購倫敦證券交易所，代表什麼？ https://www.cw.com.tw/article/article.action?id=5096845 外銀自建境外私有雲 採報備即可 https://www.chinatimes.com/realtimenews/20190912005557-260410?chdtv 銀行資料 可存境外雲端 https://udn.com/news/story/7239/4045210 金融科技淘金 考驗資安風險管控 https://money.udn.com/money/story/5613/4047131 資安險叫好不叫座 去年僅141張保單 https://news.wearn.com/c323744.html 澳門金融管理局:“亞洲證券交易所”未獲許可從事金融活動 http://www.hkcna.hk/content/2019/0914/784505.shtml 憂中共滲透！倫交所拒港交所兆元「提親」 http://bit.ly/2lWHoW9 就像在 ATM 上安裝盜卡裝置一樣, 「Magecart」專偷線上刷卡資料 https://blog.trendmicro.com.tw/?p=61779 Firstrade最新聲明與白帽駭客 https://coldbloodinvestment.blogspot.com/2019/09/firstrade.html Firstrade客戶資料被竄改　官方指是安全測試 http://bit.ly/2koMB8U 發票存載具...陌生伯吐槽「都沒人在用」　網反揭「長輩友善功能」：超好用 https://www.ettoday.net/news/20190913/1534730.htm 瑞士信用卡目前並不適用歐盟「嚴格顧客驗證機制規定」 http://bit.ly/2kzdIhP 出現金融獨角獸？顧立雄：跟金融業合作拓展海外就有機會 https://money.udn.com/money/story/12926/4050343 關注純網銀資訊安全 將來銀行打造生活Ⅹ金融生態圈 https://news.cnyes.com/news/id/4383013 《金融》保險、洗錢防制缺失，8金融機構挨罰 https://www.chinatimes.com/realtimenews/20190917001046-260410?chdtv 〈南山人壽遭重罰〉保險業今年罰單近億元 南山就苦吞5460萬元、占比55% https://news.cnyes.com/news/id/4383257 全球裂聯網與金融雅爾達體系 https://udn.com/news/story/7238/4053395 美商第一證券客戶資料遭竄改，官方宣稱是執行漏洞獎勵計畫的測試 https://www.ithome.com.tw/news/133101 數位銀行超車傳統金融 KPMG：整合、資安是關鍵 http://bit.ly/2kpLtlB 大馬銀行 擬來台發伊斯蘭債 https://udn.com/news/story/7239/4053410 網銀沒有獨立App被瘋狂抱怨，永豐大戶：要靠「金融美學」突圍 https://moptt.tw/p/creditcard.M.1568691509.A.D8A 財金Open API開發者平臺首度大公開，第二階段消費者資訊查詢API標準年底出爐 https://www.ithome.com.tw/news/133124 趨勢科技指歐洲最新銀行法規可能帶來資訊保安風險 https://times.hinet.net/topic/22563440 保險區塊鏈10月上路？　壽險公會：系統優化仍需時間 https://tw.finance.appledaily.com/realtime/20190918/1635266 加州網路保險問市 防遭駭客攻擊勒索 http://bit.ly/2m922m6 加強控管壽險？金管會祭債券ETF、目標到期基金限募令 http://bit.ly/2kHqqLz 壽險區塊鏈 保單存摺先行 https://www.chinatimes.com/newspapers/20190919000323-260205?chdtv%3 開放銀行浪潮席捲各行業，資策會MIC：未來10年金融服務將無所不在 https://www.bnext.com.tw/article/54811/mic-fintech-trend-openbanking 純網銀混搭零售...金融新服務來了 https://money.udn.com/money/story/9740/4057784 10/1 (二)遠東銀行系統維護 https://www.ecpay.com.tw/Announcement/DetailAnnouncement?nID=3677 Credit Card Theft Ringleader Pleads Guilty https://www.bankinfosecurity.com/credit-card-theft-ringleader-pleads-guilty-a-13088 PSD2 Authentication Requirements: The Implementation Hurdles https://www.bankinfosecurity.com/psd2-authentication-requirements-implementation-hurdles-a-13086 When PSD2 Opens More Doors: The Risks of Open Banking https://blog.trendmicro.com/trendlabs-security-intelligence/when-psd2-opens-more-doors-the-risks-of-open-banking/ The Risks of Open Banking http://bit.ly/2m0gMnc ATM theft link: Alert highway patrolling staff nab 2 criminals http://www.millenniumpost.in/delhi/atm-theft-link-alert-highway-patrolling-staff-nab-2-criminals-375034 LCPD in search of suspects for attempted ATM theft https://www.americanpress.com/news/crime/crime_brief/lcpd-in-search-of-suspects-for-attempted-atm-theft/article_c1f16f24-da4d-11e9-8109-aff32ce339e4.html Financial asset firm PCI ordered to pay $1.5 million for poor cybersecurity practices https://www.zdnet.com/article/company-ordered-to-pay-1-5-million-for-poor-cybersecurity-practices/ Old Magecart web domains resurrected for fraudulent ad schemes https://www.zdnet.com/article/old-magecart-domains-reincarnated-in-new-attacks/#ftag=RSSbaffb68 Magecart Skimming Attack Targets Mobile Users of Hotel Chain Booking Websites http://bit.ly/2krnD93 Vacationers Hit by Skimming Attack https://www.infosecurity-magazine.com/news/vacationers-hit-by-skimming/ Two years later, hackers are still breaching local government payment portals https://www.zdnet.com/article/two-years-later-hackers-are-still-breaching-local-government-payment-portals/#ftag=RSSbaffb68 Hotel websites infected with skimmer via supply chain attack https://www.scmagazine.com/home/security-news/hotel-websites-infected-with-skimmer-via-supply-chain-attack/ Police release video of driver who almost pinned officer to ATM http://www.fox5atlanta.com/news/police-release-video-of-driver-who-almost-pinned-officer-to-atm Police: Man burglarized South Middleton gas station, stole ATM and work van http://bit.ly/2kT13X1 Police investigating another attempted burglary of ATM at a local bank https://www.kbtx.com/content/news/Police-investigating-another-attempted-burglary-of-ATM-at-a-local-bank-560832841.html Nepal cautions Beijing as five Chinese men hack into ATMs https://www.dnaindia.com/world/report-nepal-cautions-beijing-as-five-chinese-men-hack-into-atms-2791052 3.電子支付/電子票證/行動支付/ pay/新聞及資安 來旅遊！大陸網紅行動支付碰壁 嗆台灣發展落後 https://news.ebc.net.tw/News/entertainment/177845 支付寶如果被駭或公司破產會怎樣 https://disp.cc/b/163-bH1q 【台灣Pay體檢1】綁金融卡痛失先機　連犯五大缺失！「國家品牌」市佔難破5% https://tw.appledaily.com/new/realtime/20190914/1630308/ 【台灣Pay體檢2】行銷費用和對手沒得比　公股銀行咬牙配合財政部 https://tw.appledaily.com/recommend/realtime/20190914/1630311 台灣Pay總體檢 5缺失輸很大 行銷銀彈不足 信用卡整合慢 https://tw.appledaily.com/finance/daily/20190915/38445031/ 埃塞俄比亞航空透過CellPoint Digital的Velocity支付平臺推出微信支付和KNET https://n.yam.com/Article/20190916599244 支付方式整理 https://www.dcard.tw/f/money/p/232087406 推動環保、分散通勤潮！東京推「電子貨幣」新政策獎勵民眾 https://fnc.ebc.net.tw/FncNews/world/99793 騰訊旗下財付通被央行罰149萬，因違反支付結算管理等制度 https://news.sina.com.tw/article/20190916/32666274.html 義大利新政府將加強現金管控 力推電子支付手段 https://news.sina.com.tw/article/20190918/32688848.html 支付寶澳門服務上線 居民可使用澳門手機號註冊 https://www.finet.hk/newscenter/news_content/5d82dfc0bde0b37e69366d57 台灣行動支付慘輸大陸？　眾人揭「真相」打臉：不懂裝懂 https://www.nownews.com/news/20190919/3640170/ 4.虛擬貨幣/區塊鍊 新聞及資安 瑞士警告 Libra 加密貨幣可能會受進一步審查 https://unwire.pro/2019/09/12/facebooks-libra-seeks-swiss-payment-system-license/blockchain/crytocurrency/ FB天秤幣申請牌照遭質疑 瑞士監管機構表示歡迎審查 https://news.sina.com.tw/article/20190912/32643708.html 以太坊項目AirSwap中的關鍵漏洞 https://0xzx.com/201909150604272060.html 台日虛擬貨幣糾紛 應付金額被灌水 幣寶台灣要告BPJ https://newtalk.tw/news/view/2019-09-11/297466 Libra 開源代碼含安全漏洞！網路安全公司：耗時近 1 個月完成修補 https://news.cnyes.com/news/id/4381023 黑市出現新型「洗錢」服務：支付一折價格的比特幣，向駭客購入十倍的黑錢 https://www.blocktempo.com/cybercriminals-selling-hacked-fiat-money-for-bitcoin-at-10-of-its-value/ 「目標年底 400 家！」——德意志銀行宣布加入摩根大通的「區塊鏈金融網路」 https://www.blocktempo.com/germanys-largest-bank-joins-jpmorgans-blockchain-network/ Mastercard區塊鏈與R3的跨境支付 https://0xzx.com/201909130601268938.html 中國推數位貨幣 意在挑戰美元地位 https://ec.ltn.com.tw/article/paper/1317766 德法反對臉書加密貨幣進入歐洲 https://tech.sina.com.cn/roll/2019-09-18/doc-iicezueu6560338.shtml FB天秤幣再遭質疑 歐洲央行官員稱將擾亂金融系統 https://news.sina.com.tw/article/20190918/32687050.html 天秤幣接受26國央行聯合會考，「批准的門檻肯定會很高」 https://news.sina.com.tw/article/20190917/32683432.html 加密貨幣成銀行業標配？「富國銀行數位現金」試點明年開跑 https://blockcast.it/2019/09/18/wells-fargo-is-developing-usd-stablecoin/ 中國央行虛擬貨幣來了！地位等同法定貨幣、可離線交易… 一次看懂「數位版人民幣」 https://buzzorange.com/techorange/2019/09/18/china-dcep/ LINE PAY 也能買幣了！LINE 旗下第二間交易所「BITMAX」上線 https://www.bnext.com.tw/article/54804/bitmax-cryptocurrency-exchange-for-japan-begins-operations 櫃買中心針對STO推出細部規範！將透過這5種方式管理虛擬通貨交易平台業者 http://news.knowing.asia/news/40dd5198-4378-4967-996c-a536cef079a2 證券型STO細部規範公佈，許毓仁：畫虎不成反類犬 http://news.knowing.asia/news/c9d3567a-a05d-4dcf-b90c-62292421bc78 富國銀行開發加密貨幣 明年試用於內部結算 https://news.sina.com.tw/article/20190918/32688320.html Two Ethereum consultants charged with extorting a cryptocurrency startup https://www.zdnet.com/article/two-ethereum-consultants-charged-with-extorting-a-cryptocurrency-startup/#ftag=RSSbaffb68 5.資安事件新聞 A.病毒木馬 / 殭屍網路 / 勒索軟體 / Adware /APT /後門程式 調查：惡意軟件Echobot正廣泛攻擊全球物聯網設備 http://bit.ly/2mgilxI 網絡漏洞多多　惡意軟件肆虐全球 http://bit.ly/2kLIkfQ 8 月三大惡意軟件 + 常被利用的漏洞出爐！殭屍網絡病毒 Echobot 對物聯網發起攻擊 http://bit.ly/2mdxzDr 升級漏洞受攻擊者“青睞”即時通信軟件被劫持用於傳播病毒 http://bit.ly/2ktMXLF 2019-09-13 - WSHRAT INFECTION FROM MALSPAM https://www.malware-traffic-analysis.net/2019/09/13/index.html InnfiRAT malware lurks in your machine to steal cryptocurrency wallet data https://www.zdnet.com/article/innfirat-malware-lurks-in-your-machine-to-steal-cryptocurrency-wallet-data/ InnfiRAT: A new RAT aiming for your cryptocurrency and more https://www.zscaler.com/blogs/research/innfirat-new-rat-aiming-your-cryptocurrency-and-more Emotet, today's most dangerous botnet, comes back to life https://www.zdnet.com/article/emotet-todays-most-dangerous-botnet-comes-back-to-life/#ftag=RSSbaffb68 2019-09-16 - DATA DUMP: URSNIF INFECTION WITH ICEDID AND TRICKBOT (GTAG: LEO16) https://www.malware-traffic-analysis.net/2019/09/16/index2.html 2019-09-16 - DATA DUMP: EMOTET INFECTION WITH TRICKBOT (GTAG: MOR1) https://www.malware-traffic-analysis.net/2019/09/16/index.html 2019-09-17 - PCAP AND MALWARE FOR AN ISC DIARY (EMOTET + TRICKBOT) https://www.malware-traffic-analysis.net/2019/09/17/index.html 2019-09-18 - DATA DUMP: EMOTET INFECTION WITH TRICKBOT (GTAG: MOR3) https://www.malware-traffic-analysis.net/2019/09/18/index.html 2019-09-19 - DATA DUMP: URSNIF, EMOTET, AND FORMBOOK INFECTIONS https://www.malware-traffic-analysis.net/2019/09/19/index.html Skidmap Linux Malware Uses Rootkit Capabilities to Hide Cryptocurrency-Mining Payload http://bit.ly/2kNZyJG Emotet is back: botnet springs back to life with new spam campaign https://blog.malwarebytes.com/botnets/2019/09/emotet-is-back-botnet-springs-back-to-life-with-new-spam-campaign/ New Threat Actor Fraudulently Buys Digital Certificates to Spread Malware https://threatpost.com/threat-actor-buys-digital-certs-spreads-malware/148345/ Digital Certificates - Models for Trust and Targets for Misuse https://blog.reversinglabs.com/blog/digital-certificates-impersonated-executives-as-certificate-identity-fronts Researchers: Emotet Botnet Is Active Again https://www.bankinfosecurity.com/researchers-emotet-botnet-active-again-a-13099 Gootkit malware crew left their database exposed online without a password https://www.zdnet.com/article/gootkit-malware-crew-left-their-database-exposed-online-without-a-password/#ftag=RSSbaffb68 Banking Trojan Database Exposed – Millions of Users At Risk https://securitydiscovery.com/banking-trojan-database-exposed-millions-of-users-at-risk/ Emotet is back after a summer break https://blog.talosintelligence.com/2019/09/emotet-is-back-after-summer-break.html Researchers: Emotet Botnet Is Active Again https://www.bankinfosecurity.com/researchers-emotet-botnet-active-again-a-13099 Nemty Ransomware 1.0: A Threat in its Early Stage https://www.fortinet.com/blog/threat-research/nemty-ransomware-early-stage-threat.html Cryptocurrency miners aren’t dead yet: Documenting the voracious but simple “Panda” https://blog.talosintelligence.com/2019/09/panda-evolution.html Smominru Botnet Indiscriminately Hacked Over 90,000 Computers Just Last Month https://thehackernews.com/2019/09/smominru-botnet.html Cryptoming Botnet Smominru Returns With a Vengeance https://www.bankinfosecurity.com/cryptoming-botnet-smominru-returns-vengeance-a-13123 THE MASSIVE PROPAGATION OF THE SMOMINRU BOTNET https://www.guardicore.com/2019/09/smominru-botnet-attack-breaches-windows-machines-using-eternalblue-exploit Malware Moves: The Rise of LookBack – And Return of Emotet https://threatpost.com/malware-moves-the-rise-of-lookback-and-return-of-emotet/148365/ Crypto-mining malware saw new life over the summer as Monero value tripled https://www.zdnet.com/article/crypto-mining-malware-saw-new-life-over-the-summer-as-monero-value-tripled/#ftag=RSSbaffb68 New ransomware strain uses ‘overkill’ encryption to lock down your PC https://www.zdnet.com/article/this-ransomware-uses-overkill-encryption-to-lock-down-your-pc/#ftag=RSSbaffb68 TFlower Ransomware - The Latest Attack Targeting Businesses https://www.bleepingcomputer.com/news/security/tflower-ransomware-the-latest-attack-targeting-businesses/ CookieMiner malware targets Macs, steals passwords and SMS messages, mines for cryptocurrency https://www.tripwire.com/state-of-security/featured/cookieminer-malware-targets-macs-steals-passwords-messages-mines-cryptocurrency/#new_tab B.行動安全 / iPhone / Android /穿戴裝置 /App APP個資無法可刪 江雅綺：個資保護一片混亂 http://bit.ly/2lNtgi4 手機內置中國防毒軟件技術　Samsung：不會傳送任何資料至個人裝置以外地方 http://bit.ly/2kznuAB iOS 13又現大漏洞：不解鎖iPhone的情況下可查看聯繫人 https://www.xfastest.com/thread-233466-1-1.html iOS 13驚傳有漏洞！就算iPhone有上鎖 駭客還是可輕鬆竊取個資 http://bit.ly/2kPzgXv 新型手機黑客攻擊 Simjacker 漏洞或影響全球逾 10 億用家 http://bit.ly/2kzNdJ8 CHECK POINT RESEARCH：部分 ANDROID 手機有 OTA 漏洞，黑客可發假 OMA CP 訊息 https://ysnweb.net/2019/09/news/international/check-point-research-android-ota-vulnerable/ 中美貿易戰背後的祕密！台灣5G產業的新商機來了 http://bit.ly/2lUiJ4U 駭客利用 SIM 卡漏洞來追蹤人們位置至少 2 年 https://chinese.engadget.com/2019/09/15/simjacker-attack/ 資安業者揭新漏洞！ SIM卡被「挾持」 iOS、安卓都中招 https://news.ltn.com.tw/news/Taipei/breakingnews/2917170 涉超額採集個人私隱　內地手機App被點名 https://hk.on.cc/hk/bkn/cnt/cnnews/20190916/bkn-20190916110239643-0916_00952_001.html IG再傳會洩露用戶電話、姓名的漏洞 https://www.ithome.com.tw/news/133043 【照片一上傳，想刪都刪不掉】手機 APP 藏個資「霸王條款」！專家警告：心理測驗、遊戲儘量別點 https://buzzorange.com/2019/09/16/personal-data-online-is-at-risk/ iPhone有「危險設定」要關閉？　3C達人：不必過慮...除非不想用地圖導航服務 https://www.ettoday.net/news/20190916/1536414.htm APP服務下市 個資無法可刪 https://money.udn.com/money/story/5617/4045606 防濫用Spotify共享計劃　突擊檢查家庭用家位置 http://bit.ly/2kwU7Pj 違規手機App 官方點名「碧桂園售樓」 金山詞霸涉擅取手機資料 http://bit.ly/2lXqMh2 App涉超額採集隱私 將進行監管 https://www.ydn.com.tw/News/352811 SIM卡漏洞遭SimJacker入侵！ 駭客發送簡訊即可監控掌握手機　10億用戶面臨威脅 https://www.ettoday.net/news/20190917/1537183.htm 頻繁被點名 App侵犯隱私何時休 https://news.sina.com.tw/article/20190917/32674010.html 國家計算機病毒中心發布違規APP和SDK 金山詞霸、墨跡天氣等被點名 https://m.nbd.com.cn/articles/2019-09-17/1372309.html 斯諾登警告法國政要不要用WhatsApp:絕對是個錯誤 https://news.sina.com.tw/article/20190918/32686174.html 黑龍江安卓用戶：你的手機有20.9個漏洞！男士更要注意 https://read01.com/BJGEex3.html 工程師開發程式助避收費陷阱　Apps試用到期自動取消 https://hk.on.cc/hk/bkn/cnt/aeanews/20190917/bkn-20190917190008988-0917_00912_001.html Google Fi 推「全球吃到飽」電信套餐，最低只要 45 美元起 https://www.inside.com.tw/article/17569-google-fi-launches-a-more-traditional-unlimited-plan 手機被駭入 大陸30萬台手機被控制用作詐騙 https://udn.com/news/story/7332/4056759 你一直被追蹤位置你知道嗎？教你看懂什麼是「定位」、「權限」 https://blog.trendmicro.com.tw/?p=61296 Check Point Research揭露Android手機安全性漏洞 https://www.digitimes.com.tw/tech/dt/n/shwnws.asp?cnlid=14&id=0000568584_P176MAFP77ELXF53MRLZZ Instagram再傳資安疑慮 安全漏洞恐讓用戶電話、姓名全外洩 http://bit.ly/2kOboDu Instagram fixed after researcher finds way to link account info to PII http://bit.ly/2lYa3KQ WhatsApp 'Delete for Everyone' Doesn't Delete Media Files Sent to iPhone Users https://thehackernews.com/2019/09/whatsapp-delete-for-everyone-privacy.html Yikes! iOS 13 Coming Next Week With iPhone LockScreen Bypass Bug https://thehackernews.com/2019/09/ios-13-lockscreen-bypass.html New SIM Card Flaw Lets Hackers Hijack Any Phone Just By Sending SMS https://thehackernews.com/2019/09/simjacker-mobile-hacking.html When is Android 10 coming to my phone https://www.zdnet.com/article/when-is-android-10-coming-to-my-phone/#ftag=RSSbaffb68 WhatsApp 'Delete for Everyone' Doesn't Delete Media Files Sent to iPhone Users https://thehackernews.com/2019/09/whatsapp-delete-for-everyone-privacy.html C.事件 / 駭客 / DDOS / APT / 雲端/暗網/徵才 / 國際資安事件 用來驗證真人的Captcha遭駭客利用，變成釣魚網頁的新工具 https://www.techbang.com/posts/72847-captcha-used-by-hackers-to-turn-it-into-a-new-tool-for-phishing-pages 月初同時DDoS《魔獸世界》、《鬥陣特攻》，官方：已經抓到人了 https://tw.news.yahoo.com/wowddoscaught-045540631.html 利用軟件漏洞侵占充值款食堂員工“揩油”120萬 http://www.51testing.com/html/74/n-4462474.html 15個新興崛起成長的工作 https://www.1111.com.tw/news/jobns/127323/ 連 Google 都在用！中國網友開發的「翻牆神器」Shadowsocks 為何比傳統 VPN 工具更受歡迎 https://buzzorange.com/techorange/2019/09/16/shadowsocks/ 國際電子戰研討會 成果展示 https://www.mitac.com.tw/article.cfm?id=301 資通安全事件通報應變推動淺談 https://www.acw.org.tw/Events/Detail.aspx?id=33 駭客冒名申請合法數位憑證以四處兜售 https://www.ithome.com.tw/news/133102 民眾黨官網遭駭客攻擊 警：機器人程式癱瘓註冊 http://bit.ly/2lTYvbs 獨／遭駭「開告」 民眾黨今前往信義分局報案 https://udn.com/news/story/7321/4052860 簡訊驗證機制遭濫用，臺灣民眾黨網站驚傳剛上線就被駭 https://www.ithome.com.tw/news/133089 出師不利！官網才上線秒掛...民眾黨：有心人士蓄意癱瘓 https://www.setn.com/News.aspx?NewsID=603343 DDoS攻擊？民眾黨不懂資安還推線上入黨 https://www.setn.com/News.aspx?NewsID=603127 台灣民眾黨官網遭駭客入侵癱瘓 柯文哲：報警處理 https://udn.com/news/story/6656/4049604 台灣民眾黨網站遭駭客入侵緊急關站維修中 https://boba.ettoday.net/video/1/698/179477 台灣民眾黨官網遭駭客入侵？ 黨員註冊系統被癱瘓 https://udn.com/news/story/6656/4049470 民眾黨網站上線 遭駭客入侵關閉 http://m.match.net.tw/pc/news/politics/20190916/5024781 台灣民眾黨網站遭駭客入侵 https://www.ptt.cc/bbs/HatePolitics/M.1568599276.A.BFB.html 台灣民眾黨官網昨暝上線 半暝受駭客攻擊 https://news.pts.org.tw/article/446415 資安疑慮監視器入侵校園 綠委籲全面汰換 https://www.cna.com.tw/news/aipl/201909200097.aspx 台大傳出安裝中國監視器 立委呼籲教部立即全面檢查 https://udn.com/news/story/6656/4058251 台大裝中國監視器 校方：依規儘速處理 https://www.cna.com.tw/news/ahel/201909190342.aspx Armor 揭暗網洗錢新招：比特幣支付 800 美元換取 1 萬美元現金 https://blockcast.it/2019/09/16/new-trend-of-illicit-conversions-from-btc-to-cash-on-dark-web/amp/ 應對亞太區暗網崛起的威脅　　企業的四大關鍵策略 https://unwire.pro/2019/09/15/lenovo-3/news/ 俄羅斯網路監控系統SORM曝光 https://ithome.com.tw/news/133162 伊朗駭客集團Cobalt Dickens於全球大學展開大規模網釣行動 https://ithome.com.tw/news/133071 澳洲國會被「駭」 中國國安部幹的 https://news.ltn.com.tw/news/world/paper/1318467 未公開報告：澳洲選前國會與3大黨都駭客入侵 中國是幕後黑手 http://bit.ly/2kDv8dc 路透：澳國會、政黨遭駭客入侵「是中國出手」　怕得罪集體噤聲 https://www.ettoday.net/news/20190916/1536302.htm 路透：澳洲傳查出網攻是「中國發動」！怕破壞關係不敢說 https://ec.ltn.com.tw/article/breakingnews/2917234 傳澳洲查出中國發動網攻 擔心損及貿易秘而不宣 https://money.udn.com/money/story/5599/4050832 中國侵害台灣不夠，連澳洲選舉都要干預 https://taronews.tw/2019/09/18/468984/ 美國務院：阿里巴巴騰訊百度或從事間諜活動 https://hk.on.cc/hk/bkn/cnt/cnnews/20190916/bkn-20190916084239982-0916_00952_001.html 中國駭客危及台灣資安 學者籲尋求國際合作 https://udn.com/news/story/7088/4045670 業務和網絡控制各自為戰是網絡安全的最大漏洞 http://finance.eastmoney.com/a/201909161238190056.html 無孔不入 中共挾陸企滲透全球 https://www.ydn.com.tw/News/352712 中共滲透台灣——網絡篇 「網攻台灣」 中共網軍盯上明年台灣大選 http://www.epochtimes.com/b5/19/9/16/n11524852.htm 全球網絡安全行業組織First 暫停華為成員資格 http://bit.ly/2lZ2JOT 中國大陸網絡安全宣傳周千鋒教育積極構建網絡安全新格局 http://info.chinabyte.com/111/410111.shtml 中國大陸湖北省網絡與信息安全保障工作進入臨戰階段 http://www.hb.xinhuanet.com/2019-09/20/c_1125017605.htm 中國大陸外交部：網路安全應防備思科、蘋果 非華為 https://www.chinatimes.com/realtimenews/20190916003650-260410?chdtv 中國大陸共同織密網絡安全防護網——黨的十八大以來網絡安全工作綜述 http://finance.eastmoney.com/a/201909161237318943.html 中國工程院院士鄔江興：網絡空間安全最大的威脅是不確定威脅 http://it.people.com.cn/n1/2019/0917/c1009-31357755.html 北京軍事專家：香港反送中 具「超限戰」特徵 https://udn.com/news/story/120538/4049892 傳許家印被邊控 中共對富豪下手 http://www.epochtimes.com/b5/19/9/19/n11531193.htm 網攻竊密攫奪資金 美制裁3北韓駭客集團 http://bit.ly/2mdzNmk 美制裁3受北韓資助惡意網攻團體 https://www.ydn.com.tw/News/352599 北韓駭客組織因網絡攻擊事件而遭到美國制裁 http://bit.ly/2kgioJ5 北韓網攻攫奪飛彈資金 陷受害美企於兩難 https://www.cna.com.tw/news/firstnews/201909140036.aspx 朝鮮黑客「戰績彪炳」　受害企業陷道德兩難 http://bit.ly/2kyLN1v 美財政部：北韓駭客用勒索軟體攫取飛彈資金 http://bit.ly/2mgu3Zc 美財政部：北韓利用3大駭客組織籌錢 網攻竊密勒索樣樣來 https://ec.ltn.com.tw/article/breakingnews/2915934 美制裁３個朝鮮網絡組織 http://bit.ly/2kNw4vk 美國制裁 3 個北韓駭客組織，WannaCry 病毒兇手入列 http://technews.tw/2019/09/18/us-treasury-sanctions-three-north-korean-hacking-groups-lazarus-group-bluenoroff-and-andarial/ 利用WannaCry發動全球網攻　3北韓黑客組織遭制裁 https://hk.on.cc/hk/bkn/cnt/aeanews/20190914/bkn-20190914011159570-0914_00912_001.html 國際產經：美國制裁北韓政府支持的三個駭客組織 http://bit.ly/2kyHIKJ 賴岳謙：日本國安局長換人做！安倍外交戰略起變化 https://www.chinatimes.com/opinion/20190909000002-262115?chdtv 俄媒：斯諾登否認與俄情報機關合作 https://news.sina.com.tw/article/20190914/32654270.html 加國皇家騎警情報部總長被控洩密 https://hk.news.appledaily.com/international/daily/article/20190915/20768539 加拿大資安漏洞 皇家騎警情報高官涉洩密 http://bit.ly/2kJqBG1 加警操流利中文情報官員涉嫌洩密 恐危害五眼聯盟 http://bit.ly/2kkmBeY “五眼聯盟”或受損‧加高官涉洩密被捕 https://www.sinchew.com.my/content/content_2116009.html 美眾院反壟斷調查 要求蘋果臉書等交內部電郵 http://bit.ly/2kfZi5S 「全球最強大的國家希望我從這世界消失」史上最強揭密者史諾登回憶錄暢談童年與揭密心境 https://www.storm.mg/article/1711355 出身軍事情報世家 中學曾入侵校網 http://paper.wenweipo.com/2019/09/15/GJ1909150009.htm 普亭身旁臥底 美在俄最高階間諜險曝光 CIA急撤人 http://bit.ly/2kFkbrp 去年砸650億買美國武器 沙國卻難擋廉價科技偷襲 http://bit.ly/2kRux7J 越南再推本土新版社群網站 加強控制網路自由 https://www.cna.com.tw/news/aopl/201909170122.aspx 共同強化資安 AIT：台美11月首度網路攻防演練 https://www.cna.com.tw/news/firstnews/201909170216.aspx 中國對台網攻2年暴增20倍！台美11月將聯合舉行網路攻防演練，15國齊聚強化資安 https://www.storm.mg/article/1725930 周曉輝：美台將聯合舉行網絡攻防演練 威懾中共 http://www.epochtimes.com/b5/19/9/20/n11534130.htm 多國聯軍稱襲擊武器來自伊朗 特朗普指暫不動武 http://www.hkcna.hk/content/2019/0917/785005.shtml 美國有官員稱華為設備具嚴重安全漏洞 電訊商或須移除 http://bit.ly/2kRGKcp 美國官員：可能需移除華為生產的通信設備 https://hk.finance.appledaily.com/finance/realtime/article/20190918/60056818 印度國產航母「4台電腦＋硬碟」失竊！　未完工卻創「下水3次」奇蹟 https://www.ettoday.net/news/20190919/1538513.htm?from=news-sitemap 糗！印首艘國產航母還在建 電腦設備竟遭竊 https://www.chinatimes.com/realtimenews/20190920000013-260417?chdtv 還敢買中國貨？ 美軍精銳部隊遭爆採購中國無人機 https://news.ltn.com.tw/news/world/breakingnews/2919013 台灣已進入準戰爭狀態？ 專家揭秘中共對台資訊戰背後秘密 http://bit.ly/2ksbbG7 禁公費購陸製無人機 美跨黨派議員提案 http://bit.ly/2m0lCBb US Sanctions 3 North Korean Hacking Groups Accused for Global Cyber Attacks https://thehackernews.com/2019/09/north-korea-cyber-attack.html Israeli police arrest execs from vendor of mobile surveillance tech https://www.zdnet.com/article/israeli-police-arrest-execs-from-vendor-of-mobile-surveillance-tech/#ftag=RSSbaffb68 Disqus & Kickstarter hacker warns against password reuse https://www.zdnet.com/article/disqus-kickstarter-hacker-warns-against-password-reuse/#ftag=RSSbaffb68 US Treasury sanctions three North Korean hacking groups https://www.zdnet.com/article/us-treasury-sanctions-three-north-korean-hacking-groups/#ftag=RSSbaffb68 How Cloud-Based Automation Can Keep Business Operations Secure https://thehackernews.com/2019/09/how-cloud-based-automation-can-keep.html Drones attack Saudi Arabia oil production plants, slice output in half https://www.zdnet.com/article/drone-attack-slices-saudi-arabia-oil-production-in-half/#ftag=RSSbaffb68 Israeli police arrest execs from vendor of mobile surveillance tech https://www.zdnet.com/article/israeli-police-arrest-execs-from-vendor-of-mobile-surveillance-tech/#ftag=RSSbaffb68 Brokerage Firm Hit With $500,000 Data Breach Penalty https://www.bankinfosecurity.com/brokerage-firm-hit-500000-data-breach-penalty-a-13095 Cyberattackers now pose as business executives to secure security certificates https://www.zdnet.com/article/cyberattackers-now-pose-as-executives-to-secure-security-certificates/#ftag=RSSbaffb68 Mainframe Security Challenges: An Encroaching Perimeter https://www.bankinfosecurity.com/interviews/mainframe-security-challenges-encroaching-perimeter-i-4444 US government sues ex-IT guy for breaking his NDA (Yes, we mean Edward Snowden) https://www.theregister.co.uk/2019/09/17/us_govt_sues_snowden/ The Definitive RFP Templates for EDR/EPP and APT Protection https://thehackernews.com/2019/09/rfp-templates-for-edr-epp.html United States Sues Edward Snowden and You'd be Surprised to Know Why https://thehackernews.com/2019/09/edward-snowden-lawsuit.html Ubisoft to send out cease & desist requests to DDoS-for-hire services https://www.zdnet.com/article/ubisoft-to-send-out-cease-desist-legal-letters-to-ddos-for-hire-services/#ftag=RSSbaffb68 Senators Urge FCC to Review Licenses for Chinese Telecoms https://www.bankinfosecurity.asia/senators-urge-fcc-to-review-licenses-for-chinese-telecoms-a-13118 A new type of DDoS attack can amplify attack strength by more than 15,300% https://www.techrepublic.com/article/a-new-type-of-ddos-attack-can-amplify-attack-strength-by-more-than-15300/ THE AIR FORCE IS INVITING HACKERS TO BREACH A SATELLITE https://futurism.com/the-byte/air-force-invite-hackers-breach-satellite Massive Gaming DDoS Exploits Widespread Technology https://threatpost.com/massive-gaming-ddos-attack-widespread-technology/148443/ Patch now: 1,300 Harbor cloud registries open to attack https://www.zdnet.com/article/patch-now-1300-harbor-cloud-registries-open-to-attack/#ftag=RSSbaffb68 Microsoft plans to rearchitect Azure Stack by making it container-based https://www.zdnet.com/article/microsoft-plans-to-rearchitect-azure-stack-by-making-it-container-based/#ftag=RSSbaffb68 Supply Chain Attacks: Hackers Hit IT Providers https://www.bankinfosecurity.com/supply-chain-attacks-hackers-hit-providers-a-13122 資訊室誠徵契約資訊工程師 http://bit.ly/2lVDLQj 資訊專員 https://www.104.com.tw/job/6qezh 資安技術工程師【PM一部】 https://www.104.com.tw/job/6qiwu?jobsource=jolist_a_relevance 知名人壽 - 資安助理 FL http://bit.ly/2m0MYXJ 業務代表_資安系統(19091901B) https://www.104.com.tw/job/6qmnu?jobsource=keyword2Keyword D.資料外洩/個資法/GDPR/網路詐騙/網路釣魚/盜刷/假新聞 起底「神秘」西安詐騙集團：互稱首長將軍　涉「聯合國搬遷」假項目 http://bit.ly/2kf7qDH 伊朗駭客集團Cobalt Dickens於全球大學展開大規模網釣行動 https://www.ithome.com.tw/news/133071 衛報的SecureDrop匿名爆料平台遭網釣駭客鎖定 https://ithome.com.tw/news/133088 國際警方聯手在全球逮捕281名商業電子郵件詐騙嫌犯 https://www.ithome.com.tw/news/133018 「人臉辨識」洩台人個資？銀行監視器爆中貨 https://www.setn.com/News.aspx?NewsID=601681 聯邦銀行員機警阻匯款 愛情騙子終失敗 https://news.ltn.com.tw/news/society/breakingnews/2914642 個資管理多頭馬車 成立專責機構當務之急 https://www.cna.com.tw/news/afe/201909140061.aspx 廣告追蹤器定位訪客拉票 眾院撤國會議員網站鏈接 http://www.mingpaocanada.com/Tor/htm/News/20190914/tdc1_r.htm 罪犯來自新南向 詐欺酒駕激增 https://www.chinatimes.com/newspapers/20190915001046-260106?chdtv 日本企業求才秘辛：從日本最大人力銀行Rikunabi驚傳個資不當使用說起 https://udn.com/news/story/6871/4044109 假賽馬誘賭客投資再榨乾　不給錢嗆炸掉你家...11人慘淪ATM被吸600萬 https://www.ettoday.net/news/20190914/1535464.htm “剪刀手”照片或洩露指紋信息專家：舊手機恢復出廠設置還不夠 http://sh.eastday.com/m/20190915/u1ai12833407.html 從源頭把關 資策會科法所攜手業者對抗網購詐騙 http://n.yam.com/Article/20190916179844 韓星假賣票真詐騙　徐永明：售票平台應負連帶責任 https://www.ctwant.com/article/7311 3 年內 FBI 接獲商業電子郵件詐騙投訴金額高達 262 億美元，企業不可不慎 https://www.openfind.com.tw/taiwan/news_detail.php?news_id=10194 借記卡在北京卻在美國被盜刷超5萬元，持卡人起訴銀行獲全賠 https://news.sina.com.tw/article/20190916/32667548.html Garmin南非網站洩露顧客姓名、完整信用卡號、地址 https://www.ithome.com.tw/news/133045 女子遇新型網絡詐騙　下載App後被匯走6萬人仔 https://hk.on.cc/hk/bkn/cnt/cnnews/20190914/bkn-20190914191512871-0914_00952_001.html 電影看到飽 MoviePass結束服務 客戶個資恐外洩 http://bit.ly/2kOasyX 高中同學「出錢出力」組詐騙集團 騙大陸人上千萬元 https://udn.com/news/story/7321/4044149 給甜頭誘投資 博奕網站詐600萬 https://money.udn.com/money/story/12524/4047852 金融聯防反詐有成 士林警偕行員聯手阻詐 https://times.hinet.net/news/22556677 吸金216億元 刑事局查獲中資網路簽賭 http://bit.ly/2klk1Fz 刑事局破獲中資非法博弈產業鏈來台 https://news.pts.org.tw/article/446489 網路廉價詐售蘋果手機 警逮5嫌送辦 http://bit.ly/2mmjVyd 偷手機後利用App漏洞盜刷信用卡 團伙獲利百萬元被抓 http://finance.sina.com/bg/tech/technews/thepaper/2019-09-16/doc-ifznycny5952067.shtml 厄瓜多全民個資幾全遭外洩 亞桑傑也在其中 https://www.rti.org.tw/news/view/id/2034769 厄瓜多爾全國人民資料外洩 總統維基創辦人俱受害 https://hk.news.appledaily.com/international/realtime/article/20190917/60055558 資安大漏洞！厄瓜多全國2000萬筆個資遭外洩 連總統也受害 https://cnews.com.tw/140190918a05/ 逾3千萬名印尼獅子航空乘客資料外洩 https://www.ithome.com.tw/news/133115 陌生號碼發來年檢簡訊 車主被高仿公眾號騙走兩千 https://news.sina.com.tw/article/20190917/32673884.html 如何防止師生信息泄露被竊取？專家給了這些建議 https://news.sina.com.tw/article/20190917/32685064.html 海南原人防辦報賬員7年間300多次造假騙取公款超百萬 https://news.sina.com.tw/article/20190918/32686996.html 隨手按個讚綁定臉書當帳號 都有個資外洩風險 https://udn.com/news/story/7088/4053706 看待個資大不同 日本可換咖啡韓改身分證號碼 https://udn.com/news/story/7088/4053726 假身份刷卡後退貨索錢 2男騙招遭拆穿落網 http://bit.ly/2kn2sVw 相同投資網卻不同IP？警方：有詐騙風險 https://news.ltn.com.tw/news/society/breakingnews/2919258 深圳福田警方打掉一利用網銀U盾作案犯罪團伙 http://www.legaldaily.com.cn/index/content/2019-09/17/content_7994996.htm 馬印航空公司發生數據泄露 數百萬名乘客或受影響 https://news.sina.com.tw/article/20190918/32693834.html 保險業現新型詐騙 企業內控再臨考 https://news.sina.com.tw/article/20190919/32698646.html 數億張醫療影像在網路上曝光 https://ithome.com.tw/news/133132 堵陸媒惡行港法院禁洩《蘋果》員工個資 https://tw.appledaily.com/column/article/860/twapple/20190920/38450020/ YouTube 更改認證條件，大量用戶遭到撤銷資格引發批評與緊張 https://tw.mobi.yahoo.com/news/changeyoutube-032232611.html 冒牌AdBlock、uBlock廣告封鎖外掛實則廣告詐欺，300網站受害 https://www.ithome.com.tw/news/133164 Heatstrok網路釣魚攻擊,為何鎖定科技產業員工免費信箱 https://blog.trendmicro.com.tw/?p=62007 Smart TVs send user data to tech heavyweights including Facebook, Google, Netflix https://www.zdnet.com/article/smart-tvs-send-user-data-to-tech-heavyweights-including-facebook-google-netflix/#ftag=RSSbaffb68 Data of 24.3 million Lumin PDF users shared on hacking forum https://www.zdnet.com/article/data-of-24-3-million-lumin-pdf-users-shared-on-hacking-forum/#ftag=RSSbaffb68 LastPass bug leaks credentials from previous site https://www.zdnet.com/article/lastpass-bug-leaks-credentials-from-previous-site/#ftag=RSSbaffb68 Database leaks data on most of Ecuador's citizens, including 6.7 million children https://www.zdnet.com/article/database-leaks-data-on-most-of-ecuadors-citizens-including-6-7-million-children/#ftag=RSSbaffb68 Thousands of Google Calendars Possibly Leaking Private Information Online https://thehackernews.com/2019/09/google-calendar-search.html Investigation Launched After Ecuadorian Records Exposed https://www.bankinfosecurity.com/investigation-launched-after-ecuadorian-records-exposed-a-13097 Arrest made in Ecuador's massive data breach https://www.zdnet.com/article/arrest-made-in-ecuadors-massive-data-breach/#ftag=RSSbaffb68 If you are a Restaurant Depot customer, don’t open that phishing email https://www.zdnet.com/article/if-you-are-a-restaurant-depot-customer-dont-open-that-phishing-email/#ftag=RSSbaffb68 IT Firm Manager Arrested in the Biggest Data Breach Case of Ecuador’s History https://thehackernews.com/2019/09/ecuador-data-breach.html Scotiabank slammed for 'muppet-grade security' after internal source code and credentials spill onto open internet https://www.theregister.co.uk/2019/09/18/scotiabank_code_github_leak/ E.研究報告 K8S 漏洞報告｜近期重要bug fix 分析 https://www.infoq.cn/article/rLHhx2V8sXmkXx7RHTDl 基於鯤鵬雲服務器的MongoDB未授權訪問漏洞檢測及整改建議 https://bbs.huaweicloud.com/forum/thread-24668-1-1.html 釣魚攻擊姿勢老套，不明真相還是上當 https://www.freebuf.com/articles/system/212565.html Heatstrok網路釣魚攻擊,為何鎖定科技產業員工免費信箱 https://blog.trendmicro.com.tw/?p=62007 深入分析Adobe忽略了6年的PDF漏洞 https://xlab.tencent.com/cn/2019/09/12/deep-analysis-of-cve-2019-8014/ 一款漏洞驗證框架的構思 https://www.jishuwen.com/d/251d/zh-tw Fortigate SSL VPN從漏洞挖掘到漏洞利用分析 https://www.4hou.com/vulnerable/20170.html 一次無聊的APP漏洞挖掘 https://zhuanlan.zhihu.com/p/82513348 一篇RPO漏洞挖掘文章翻譯加深理解 https://www.cnblogs.com/piaomiaohongchen/p/11528205.html 記一次內部系統滲透測試：小漏洞組合拳 https://www.freebuf.com/articles/web/213675.html Jenkins RCE漏洞分析匯總 https://xz.aliyun.com/t/6361 深入探索在野外發現的iOS漏洞利用鏈 https://www.anquanke.com/post/id/186456 BlueKeep 漏洞利用分析 https://paper.seebug.org/1035/ 细数Android系统那些DOS漏洞 http://www.tiejiang.org/25242.html 安全漏洞XSS、CSRF、SQL注入以及DDOS攻擊 https://www.cnblogs.com/rinack/p/11549410.html CORS介紹及其漏洞檢測 http://www.saucer-man.com/information_security/331.html 攻撃グループBlackTechが侵入後に使用するマルウエア https://blogs.jpcert.or.jp/ja/2019/09/tscookie_loader.html Hacking LED Wristbands: A ‘Lightning’ Recap of RF Security Basics https://blog.trendmicro.com/trendlabs-security-intelligence/hacking-led-wristbands-a-lightning-recap-of-rf-security-basics/ 2019 CWE Top 25 Most Dangerous Software Errors https://cwe.mitre.org/top25/archive/2019/2019_cwe_top25.html These software vulnerabilities top MITRE’s most dangerous list https://www.zdnet.com/article/these-software-vulnerabilities-top-mitres-most-dangerous-list-in-2019/#ftag=RSSbaffb68 SQL Injection Cheat Sheet https://www.netsparker.com/blog/web-security/sql-injection-cheat-sheet/ GitHub security alerts now support PHP projects https://www.zdnet.com/article/github-security-alerts-now-support-php-projects/#ftag=RSSbaffb68 guillaC/wsManager https://github.com/guillaC/wsManager Sumeet-R/HackTheKeyboard https://github.com/Sumeet-R/HackTheKeyboard Leviathan36/kaboom https://github.com/Leviathan36/kaboom BullsEye0/shodan-eye https://github.com/BullsEye0/shodan-eye dlfernando/Instagram-downloader https://github.com/dlfernando/Instagram-downloader fkasler/dolos_cloak https://github.com/fkasler/dolos_cloak The TIDoS Framework - The Offensive Manual Web Application Penetration Testing Framework https://hakin9.org/the-tidos-framework-the-offensive-manual-web-application-penetration-testing-framework/ Edward Snowden - Permanent Record https://kaketosdelano.ml/threads/edward-snowden-permanent-record-2019-mp3-epub.8599/ GNU Radio CON 2019 https://www.gnuradio.org/grcon/grcon19/presentations/ [macOS, CTF] ChiChou/DezhouInstrumenz https://github.com/ChiChou/DezhouInstrumenz F.商業 Nexusguard研究顯示，DNS DNS放大攻擊去年以來增加了1,000％ https://times.hinet.net/news/22559475 微軟資料中心逐步融合資安防護與GDPR合規服務 https://www.digitimes.com.tw/iot/article.asp?cat=158&cat1=20&cat2=70&id=0000568592_AH06L6AJ8B537J35H5MKK 瀏覽網頁變不一樣了！Chrome 77 最新版增添3項實用功能 https://3c.ltn.com.tw/news/38018 Palo Alto Networks：打擊網路犯罪企業用AI了嗎 https://news.sina.com.tw/article/20190917/32684284.html 迎戰中國削價競爭 台灣安全監控產業資安升級 https://www.cna.com.tw/news/ahel/201909180037.aspx 甲骨文推出自主Linux作業系統 https://www.ithome.com.tw/news/133110 Office 365 vs. LibreOffice 比一比 ，誰才是你最得心應手的生產力工具 https://www.kocpc.com.tw/archives/275178 Windows 7 即將停止更新！即刻升級 Windows 10，保障資安、商用作業系統維護 https://www.cool3c.com/article/147971 GitHub 收購程式碼分析工具商 Semmle，協助開發人員發現程式碼漏洞 https://finance.technews.tw/2019/09/19/github-acquires-semmle-to-help-developers-spot-code-exploits/ Chrome v77推3項新功能 改善文字傳送消失問題 https://udn.com/news/story/7086/4056208 Firefox 瀏覽器從明年開始，將進入每 4 週就更新一次的週期 https://www.kocpc.com.tw/archives/281165 甲骨文以上千台Raspberry Pi組成超級電腦叢集 https://www.ithome.com.tw/news/133137 Microsoft acquires code-analysis platform vendor Semmle https://www.zdnet.com/article/microsoft-acquires-code-analysis-platform-vendor-semmle/#ftag=RSSbaffb68 Microsoft pushes back end of support for Exchange Server 2010 by nine months https://www.zdnet.com/article/microsoft-pushes-back-end-of-support-for-exchange-server-2010-by-nine-months/#ftag=RSSbaffb68 Is Microsoft getting closer to launching its expected Microsoft 365 Consumer subscription https://www.zdnet.com/article/is-microsoft-getting-closer-to-launching-its-expected-microsoft-365-consumer-subscription/#ftag=RSSbaffb68 How Cloud-Based Automation Can Keep Business Operations Secure https://thehackernews.com/2019/09/how-cloud-based-automation-can-keep.html Dremio releases Data Lake Engines for AWS and Azure https://www.zdnet.com/article/dremio-releases-data-lake-engines-for-aws-azure-and-hybrid-cloud/#ftag=RSSbaffb68 Google removes two Chrome ad blocker extensions caught 'cookie stuffing' https://www.zdnet.com/article/google-removes-two-chrome-ad-blocker-extensions-caught-cookie-stuffing/#ftag=RSSbaffb68 G.政府 數位身分證會掌握你的行蹤？無稽之談 http://bit.ly/2kzNpbk 政院強推數位身分證監控人民? 內政部駁斥 https://news.sina.com.tw/article/20190916/32667930.html 再轟內政部新式身分證具追蹤機制　許毓仁：哪條法律授權政府在人民身上放eTag https://www.storm.mg/article/1716278 新式身分證 恐釀資安危機／關鍵「私人金鑰」發包民間廠商處理 晶片、系統將成駭客攻擊對象 https://news.ltn.com.tw/news/life/paper/1316927 揭露數位身分證2大隱憂 台權會：個資外洩及國家機器監控 http://bit.ly/2kKaEPR 內政部：數位身分證私密金鑰無法重製 資安無虞 https://money.udn.com/money/story/7307/4041268 新身分證具追蹤機制 藍委：這不叫監控什麼叫監控 https://www.chinatimes.com/realtimenews/20190916001996-260407?chdtv 政府領域聯防監控情資回傳作業常見問題 http://bit.ly/2kB75LZ 陳美伶：個資涉及層面廣 需跨領域規管整合 http://bit.ly/2kAPSlS 黃國昌稱時力不賣亡國感 學者李忠憲：論述真是矛盾 https://news.ltn.com.tw/news/politics/breakingnews/2915732 廖世偉觀點：純網銀的身分認證的監理與資安 https://www.storm.mg/article/1671595 防「自己人」亂查／查過必留痕跡 警方不定期資安稽核 https://news.ltn.com.tw/news/society/paper/1318159 案情反推諜對諜：調查局調查官教你如何就營業秘密案件搜證 https://udn.com/news/story/6871/4044037 網路賭博無罪 法部修法堵漏洞 https://money.udn.com/money/story/5618/4047850 ​網路賭博不一樣　法務部修法改這2項 https://tw.appledaily.com/new/realtime/20190916/1633987/ 防恐攻 大型無人機零件進口要納管 https://www.chinatimes.com/newspapers/20190917000255-260202?chdtv 台商回流重視供電 台電、調查局推「資安聯防」阻駭 https://news.ltn.com.tw/news/politics/breakingnews/2917999 金管會修訂「金融機構作業委託他人處理內部作業制度及程序辦法」 http://bit.ly/2kPhio1 H.ICS/SCADA 工控系統 工業資安保衛戰　IT/OT各司其職 https://www.mem.com.tw/arti.php?sn=1909160005 智慧工廠暴露製造端安全風險 半導體、資安業者跨界合作推動資安平台 https://www.digitimes.com.tw/iot/article.asp?cat=158&id=0000568850_YTS76D756XWIV4LEZRSXB 半導體資安標準動起來　鏈結供需更有感 https://www.mem.com.tw/arti.php?sn=1909190002 advantech -- webaccess https://nvd.nist.gov/nvd.cfm?cvename=CVE-2019-3975 頂象：工控設備被遠程瞬間摧毀企業該怎麼防 http://nx.sina.com.cn/finance/2019-09-20/detail-iicezueu7161266.shtml I.教育訓練 【資安講座#2】揭露郵件與惡的距離，談Openfind BEC反詐騙應用與技術發展 https://funny-video-online.com/watch/j5d4f4d415o494m4a445v4.html 『 Day 2 』認識 CTF https://ithelp.ithome.com.tw/articles/10215497 [駭客工具 Day12] 密碼暴力破解 - Hydra https://ithelp.ithome.com.tw/articles/10215072 [駭客工具 Day13] 密碼字典檔生成工具 - crunch https://ithelp.ithome.com.tw/articles/10215234?sc=rss.qu [駭客工具 Day14] 快速網站弱點掃描- Nikto https://ithelp.ithome.com.tw/articles/10215447 [駭客工具 Day15] 主機系統弱點掃描 - Nessus https://ithelp.ithome.com.tw/articles/10215646 [駭客工具 Day16] 滲透神器 - Metasploit https://ithelp.ithome.com.tw/articles/10216722 [駭客工具 Day17] SQL Injection漏洞利用 - sqlmap https://ithelp.ithome.com.tw/articles/10217184 [Day 1] 話說這個人會講些啥 https://ithelp.ithome.com.tw/articles/10213662 [Day 2] Template Injection：欸不是，你真的懂 Python 嗎？ https://ithelp.ithome.com.tw/articles/10217309 [Day04] AI實例-將來銀行 https://ithelp.ithome.com.tw/articles/10217786?sc=iThelpR Day4 駭客&滲透階段 https://ithelp.ithome.com.tw/articles/10217638 資安開源工具：神兵利器還是雙面利刃？ (二) https://ithelp.ithome.com.tw/articles/10215297 那個夜裡的資安-9 https://ithelp.ithome.com.tw/articles/10215354 Day01 前言x初探CTF https://ithelp.ithome.com.tw/articles/10215346 [Day 01] 資安百物語-第零談：前言 &百物語 https://ithelp.ithome.com.tw/articles/10216250 利用Decorator進行參數型別檢查 https://www.uuu.com.tw/Public/content/article/19/20190916.htm [Day1] 淺談 Kubernetes 設計原理 https://ithelp.ithome.com.tw/articles/10215384 [Day01]源自於同事的困擾 https://ithelp.ithome.com.tw/articles/10213187 [Day02]來自駭客的預告信 https://ithelp.ithome.com.tw/articles/10213967 [Day-1] Tensorflow 介紹 及 Tensorflow 2.0相關知識 https://ithelp.ithome.com.tw/articles/10215969 馬坤：成立網絡安全學院專注人才培養 http://m.cnwest.com/sxxw/a/2019/09/14/17995033.html [英語面試大秘訣] – 北美軟體工程師面試實戰分享 http://bit.ly/2lYU9zu 從拉麵店的販賣機理解什麼是 API https://medium.com/@hulitw/ramen-and-api-6238437dc544 鐵人賽：初入程式語言，沒想到是 JavaScript 的親戚啊 https://wcc723.github.io/ironman/2019/09/18/start-to-learn-program/ PyCon TW 2019 共同筆記 https://hackmd.io/@PyConTW/2019/%2FitlYBVanTbSrdXhjlbEdyA DVWA（Damn Vulnerable Web Application）- Brute Force http://bit.ly/2mryP6c J.物聯網/IOT/人工智慧/車聯網/光聯網/深度學習/機器學習/無人機/人臉辨識 全國IoT資安挑戰賽 民眾玩密室逃脫找資安弱點 https://udn.com/news/story/7266/4045825 2019IoT資安挑戰賽成果揭曉 UCCU Hacker奪冠 http://bit.ly/2kp9Css 智慧家庭要防駭 「2019 IoT資安挑戰賽」成果揭曉 https://times.hinet.net/news/22556980 趨勢科技：物聯網已成網路犯罪地下市場熱門話題 https://newtalk.tw/news/view/2019-09-17/299906 防堵網路攝影機資安漏洞 消費者自保有道 https://money.udn.com/money/story/7307/4053660 網路攝影機不設防 資安漏洞隱私被看光 https://money.udn.com/money/story/7307/4053658 工控系統資安認證網路攝影機也有家用款 http://bit.ly/2kStW5J This Week in Security News: IoT Devices Are a Target in Cybercriminal Underground https://blog.trendmicro.com/this-week-in-security-news-iot-devices-are-a-target-in-cybercriminal-underground/ Protocol found in webcams and DVRs is fueling a new round of big DDoSes https://arstechnica.com/information-technology/2019/09/in-the-wild-ddoses-are-abusing-webcams-and-dvrs-to-amplify-their-crippling-effects/ 6.近期資安活動及研討會 HITCON HackDoor 駭入辦公室 7/2 ~ 9/28 https://www.accupass.com/event/1906050355291064968019 PyTorch Tainan x CCNS 聚會 #28 9/21 https://pytorch-tainan.kktix.cc/events/2019-09-21-m28 Android Code Club(Taipei) 9/21 https://www.meetup.com/Taiwan-Android-Developer-Study-Group/events/bsctnqyzlbcc/ SyntaxError 9/21 https://www.meetup.com/pythonhug/events/tnzzgpyzlbcc/ 資策會開辦「認證系統安全從業人員 SSCP 輔導班」2019/9/21 https://ithome.com.tw/pr/131772 交通大學亥客書院-A011:入侵行為發覺與應變指南 9/21 https://hackercollege.nctu.edu.tw/?p=1082 AIC課程 _ Python 入門 9/21 ~ 9/22 https://www.facebook.com/events/429157554391837/?event_time_id=429157561058503 資訊安全管理系統-進階課程 9/21 https://www.accupass.com/event/1907160908138705889800 Open UP Summit Fukuoka Outreach 9/21 https://www.meetup.com/TaipeiWomeninTech/events/263683783/ Python 入門 台北 2019/09 月份 9/21 https://www.meetup.com/PyLadiesTW/events/264464501/ TEM 基礎教育課程第二階段：「工程師的即戰力」 9/21 https://www.meetup.com/Taipei-Ethereum-Meetup/events/264544639/ 【CIT週末玩程式】- (9月)認識電腦與程式邏輯訓練 9/21 https://www.meetup.com/Women-Who-Code-Taipei/events/264121660/ Developer Meetup Taipei 2019 9/22 https://www.meetup.com/Taipei-Dapp-com-Meetup-Group/events/264898014/ Coffee & Code 9/22 https://www.meetup.com/Innovate-Taiwan/events/hkdmgryzmbdc/ Build Your First Custom Blockchain - 親手打造你的第一個客制區塊鏈 9/24 https://www.meetup.com/Polkadot-Taipei/events/264188190/ Golang Taipei Gathering #44 x Wanted 9/24 https://www.meetup.com/golang-taipei-meetup/events/264492552/ Android Taipei - 2019 九月聚會 9/24 https://www.facebook.com/events/421900911784891/ 智慧型手機破密 9/24 https://www.iforensics.com.tw/cgi-bin/registform.cgi?pick=37 Women Who Code <> VMware Taiwan 帶你進入K8s的世界 9/25 https://www.meetup.com/Women-Who-Code-Taipei/events/264860059/ TANET 2019 - 臺灣網際網路研討會 9/25 https://www.twcert.org.tw/subpages/securityInfo/securityactivity_details.aspx?id=310 不起眼的讀書會 #12 9/25 https://www.meetup.com/cschat-taichung/events/264917307/ Nextlink Technology 9/25 (三) https://www.accupass.com/event/1908020858535104977240 DEVCORE Conference 2019 9/25 https://devco.re/conf/2019/ Nextlink Technology | 企業資安防護能力再升級 | Nextlink 資安論壇9/25 (三) https://www.accupass.com/event/1908020858535104977240 面對 APT進階持續性滲透攻擊，企業如何建立正確防護觀念與有效、低成本的資安防護能力 9/26 https://www.techbang.com/posts/72484-lecturecorporate-apt Thinking Thursday 第四場 9/26 https://www.meetup.com/Thinking-Thursday/events/263826166/ Taipei.py 七週年慶 No. 7 Anniversary 9/26 https://www.meetup.com/Taipei-py/events/264775361/ [CyCarrier]-奧義智慧資安活動_Fintech威脅剖析 金融科技資安升級 9/26 https://www.zerone.com.tw/TrainingDetial/Seminar/2CB2943BF5366C08%7C581222C91497B312 [Akamai]-Akamai線上研討會快速部署與高效預測抵禦的資安防護網 9/27 https://www.zerone.com.tw/TrainingDetial/Seminar/33439C9B5852933A%7C4D840EFFD881209B 交通大學亥客書院-B022:基礎網頁安全與滲透測試 9/28 https://hackercollege.nctu.edu.tw/?p=1084 【Flutter Brunch】： 一起來交流 Flutter 技術 9/28 https://www.meetup.com/Women-Who-Code-Taipei/events/264801570/ WTM Networking - UXers' Breakfast #3 9/28 https://www.meetup.com/GDGTaipei/events/264719986/ JavaScript Developer Conference-2019 2019-09-28(六) 09:30 ~ 2019-10-26(六) 17:30 (GMT+8) https://www.accupass.com/event/1907081509101081922774 AI/BigData技能養成系列課程-資料工程實務應用精鍊假日班(確定開課) 9/28 ~ 10/6 https://www.accupass.com/event/1908010601311553672560 NSPA實作課程(假日班)報名表 9/29 https://docs.google.com/forms/d/e/1FAIpQLSf6g7LmwAk_T6RFCaZL3dvgxjS9qlMrHlLtkXDC-nqNza_V9w/viewform 軟體安全測試實務 9/29 https://www.sce.pccu.edu.tw/event/chtweb/index.html 2019 NASA黑客松賽前技術分享[Microsoft]_Azure 雲端運算與認知識別服務 10/1 https://www.facebook.com/events/421753888461417/ 技職校院物聯網創新應用賽 10/1 受理報名 https://iot2gather.ntust.edu.tw/ Gnss海面反射訊號之技術及應用 10/1 https://www.facebook.com/events/384731849123773/ Nasa黑客松，太空中心能幫你什麼 10/2 https://www.facebook.com/events/390573691633383/ GDG DevFest Taipei 2019 10/1 https://www.meetup.com/GDGTaipei/events/263142255/ 108 年「先進製造 AI 與物聯網資安實務應用研討會」 10/3 https://seminars.tca.org.tw/D15e02340.aspx 我們與資安的距離 10/5 https://hackersir.kktix.cc/events/20191005 安全程式碼撰寫基礎 10/6 https://www.sce.pccu.edu.tw/event/chtweb/index.html XRY Certification 教育訓練 10/7 ~ 10/8 https://www.iforensics.com.tw/cgi-bin/registform.cgi?pick=38 資安檢核核心技術及進階技術研討會 10月7日至10月9日 http://bit.ly/2TN2UtD 2019年台灣資安通報應變年會 10/8 https://www.informationsecurity.com.tw/Seminar/ISevent20191008/ Cloud Native Forum 2019 10/9 https://www.meetup.com/Cloud-Native-Taipei-User-Group/events/264613646/ HITB+ CYBER WEEK 2019/10/12 ~17 https://d2p.hitb.org/ 白帽駭客體驗實作 10/13 https://www.sce.pccu.edu.tw/event/chtweb/index.html 國家高速網路與計算中心 台灣杉一號高速計算主機使用進階課程 10/14 https://edu.nchc.org.tw/course/one_course_introduction.asp?lms_auto_course_id=3869&from_course_list_url=course_index 數位時代，自已的權利自己顧 -- 不可不知！基礎資安教戰講座 10/15 https://ocftw.kktix.cc/events/e0c1048b 智資時代 2019 科技法制前瞻論壇 10/15 https://seminar.ithome.com.tw/live/iii20191015/index.html?eDM_iThome AI時代下，資安與視覺化的觀點與實例 10/16 https://www.tiai.org.tw/tiaiActDetailClass?sno=19 TFUG Taipei | TensorFlow All Around 10/16 https://www.meetup.com/TensorFlow-User-Group-Taipei/events/264713077/ Kotlin/Everywhere GDG Hsinchu - Kotlin on Cloud and Web 10/17 https://www.meetup.com/GDG-Hsinchu/events/263741333/ 2019 Space Apps Challenge_NASA 黑客松台北場 10/18 https://www.facebook.com/events/2112377919060176/ 2019 邊緣運算論壇 - AI + IoT 備戰台商回流潮，IIoT 智慧升級 10/18 https://www.accupass.com/event/1909040655361186052756 Crosslink Taiwan 2019 10/19 https://www.meetup.com/Taipei-Ethereum-Meetup/events/264302796/ 交通大學亥客書院-A006:數位足跡追蹤與分析 10/19 https://hackercollege.nctu.edu.tw/?p=1088 無痛上手-WiFi無線網路安全檢測 10/20 https://www.sce.pccu.edu.tw/event/chtweb/index.html 日盛金融黑客松 報名至10/20 止 https://app.jsun.com/hackathon/Main Splunk .conf 19 10/21 ~ 10/24 https://conf.splunk.com/ 國家高速網路與計算中心 平行計算程式設計基礎課程 10/22 https://edu.nchc.org.tw/course/one_course_introduction.asp?lms_auto_course_id=3778&from_course_list_url=course_index AIoT智能物聯網開發人才就業養成班[免費諮詢] 10/22 https://ittraining.kktix.cc/events/aiot-training-2019 Industrial Control Systems (ICS) Cyber Security Conference USA October 21 – 24, 2019 https://www.icscybersecurityconference.com [Palo Alto Networks]-Palo Alto Networks 直播研討會Part6. MITRE ATT&CK 新資安攻防框架進階產業應用 10/24 https://www.zerone.com.tw/TrainingDetial/Seminar/7747B901A8198AC3%7C1C130FE6FEC34700 Cybersecurity Framework 擴大資安視野 Seminar CYBERSEC 101 研討會 10/25 https://signupcybersec101.ithome.com.tw/ 國家高速網路與計算中心 大數據軟體開發平台與深度學習、HBase(大數據資料庫)開發應用案例 10/25 https://edu.nchc.org.tw/course/one_course_introduction.asp?lms_auto_course_id=3867&from_course_list_url=course_index 交通大學亥客書院-A015:進階網頁滲透測試 10/26 https://hackercollege.nctu.edu.tw/?p=1090 資安檢核核心技術及進階技術研討會 10月28日至10月30日 http://bit.ly/2TN2UtD Foundations in Digital Forensics with EnCase® (DF120) (原CF1) 10/28 ~ 10/31 https://www.iforensics.com.tw/cgi-bin/registform.cgi?pick=39 行政院資安學院 物聯網資安培訓課程 11/3 ~ 11/30 https://www.accupass.com/event/1810080517061259295030 Red Hat Forum Taipei 2019 11/5 https://www.facebook.com/events/1390202967799392/ 駭客攻防暨數位鑑識系列一(第1期) 11/7 https://service.tabf.org.tw/Training/CourseDetail.aspx?PID=384540 Cybersecurity Framework 擴大資安視野 Seminar CYBERSEC 101 研討會 11/8 https://signupcybersec101.ithome.com.tw/ Kotlin/Everywhere GDG Taoyuan - 運用 Ktor 建置一個以 Kotlin 打造的後端服務 11/9 https://www.meetup.com/GDGTaoyuan/events/264776152/ 交通大學亥客書院-P006:高階網頁滲透測試 11/16 https://hackercollege.nctu.edu.tw/?p=1092 Trend Micro CTF 2019 // Raimund Genes Cup FINAL / NOVEMBER 23–24, 2019 https://www.trendmicro.com/en_us/campaigns/capture-the-flag.html 資安檢核核心技術及進階技術研討會11月26日至11月28日 http://bit.ly/2TN2UtD 人資人員必修的職安法規定 11/26 https://www.accupass.com/event/1909121441141977826554 Cybersecurity Framework 擴大資安視野 Seminar CYBERSEC 101 研討會 11/29 https://signupcybersec101.ithome.com.tw/ 交通大學亥客書院-B015:惡意程式檢測 11/30 https://hackercollege.nctu.edu.tw/?p=1098 交通大學亥客書院-A018:企業網域控管－Active Directory攻擊與防禦 12/14 https://hackercollege.nctu.edu.tw/?p=1094 Japan Security Analyst Conference https://jsac.jpcert.or.jp/