---
# System prepended metadata

title: 資安事件新聞週報 2023/4/24  ~  2023/4/28
tags: [資安事件新聞週報]

---

###### tags: `資安事件新聞週報`
# 資安事件新聞週報 2023/4/24  ~  2023/4/28

1.重大弱點漏洞/後門/Exploit/Zero Day
美國 CISA 最新收錄三大漏洞，涉及Google和ChatGPT
https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=10424

CISA Adds 3 Actively Exploited Flaws to KEV Catalog, including Critical PaperCut Bug
https://thehackernews.com/2023/04/cisa-adds-3-actively-exploited-flaws-to.html

Google雲平台現「鬼魂漏洞」，能讓惡意軟體隱身
https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=10425

VMware 發布 Aria Operations for Logs 安全更新
https://www.cisa.gov/news-events/alerts/2023/04/21/vmware-releases-security-update-aria-operations-logs

VMware兩套PC虛擬化軟體被挖出漏洞，本周公布修補方式
https://www.bleepingcomputer.com/news/security/vmware-fixes-critical-zero-day-exploit-chain-used-at-pwn2own/

VMware Releases Critical Patches for Workstation and Fusion Software
https://thehackernews.com/2023/04/vmware-releases-critical-patches-for.html

Cisco and VMware Release Security Updates to Patch Critical Flaws in their Products
https://thehackernews.com/2023/04/cisco-and-vmware-release-security.html

Cisco 發布多個產品的安全公告
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cml-auth-bypass-4fUCCeG5

思科伺服器管理工具存在零時差漏洞，恐被用於跨網站指令碼攻擊
https://www.bleepingcomputer.com/news/security/cisco-discloses-xss-zero-day-flaw-in-server-management-tool/

Zyxel Firewall Devices Vulnerable to Remote Code Execution Attacks — Patch Now
https://thehackernews.com/2023/04/zyxel-firewall-devices-vulnerable-to.html

Modernizing Vulnerability Management: The Move Toward Exposure Management
https://thehackernews.com/2023/04/modernizing-vulnerability-management.html

Apache Superset Vulnerability: Insecure Default Configuration Exposes Servers to RCE Attacks
https://thehackernews.com/2023/04/apache-superset-vulnerability-insecure.html

服務定位協定SLP漏洞恐被用於DDoS流量放大攻擊
https://www.bitsight.com/blog/new-high-severity-vulnerability-cve-2023-29552-discovered-service-location-protocol-slp

New SLP Vulnerability Could Let Attackers Launch 2200x Powerful DDoS Attacks
https://thehackernews.com/2023/04/new-slp-vulnerability-could-let.html

微軟正式宣判 Windows 10 功能更新到此（22H2）為止
https://www.kocpc.com.tw/archives/489870

強化企業版本Chrome安全，Google提供擴充套件評估工具
https://cloud.google.com/blog/products/chrome-enterprise/secure-enterprise-browsing-more-data-protections-visibility-and-insights

電子商務平臺PrestaShop出現能讓後臺使用者刪除資料庫的漏洞
https://www.bleepingcomputer.com/news/security/prestashop-fixes-bug-that-lets-any-backend-user-delete-databases/

開源資料視覺化工具Apache Superset存在RCE漏洞
https://www.horizon3.ai/cve-2023-27524-insecure-default-configuration-in-apache-superset-leads-to-remote-code-execution/

強化PyPI套件發布者的身分安全性，可運用無密碼方式自動發布套件
https://www.securityweek.com/solarwinds-platform-update-patches-high-severity-vulnerabilities/

Intel處理器存在瞬間執行漏洞，恐被用於旁路攻擊
https://arxiv.org/pdf/2304.10877.pdf

SolarWinds修補高風險漏洞
https://www.securityweek.com/solarwinds-platform-update-patches-high-severity-vulnerabilities/

開源物件儲存系統MinIO存在漏洞，起因是ChatGPT採用了含有漏洞的版本
https://www.greynoise.io/blog/openai-minio-and-why-you-should-always-use-docker-cli-scan-to-keep-your-supply-chain-clean

供資安人員通報GitHub儲存庫漏洞的功能正式上線
https://github.blog/2023-04-19-private-vulnerability-reporting-now-generally-available/

Google Cloud平臺存在漏洞GhostToken，恐導致用戶帳號遭到挾持
https://astrix.security/ghosttoken-exploiting-gcp-application-infrastructure-to-create-invisible-unremovable-trojan-app-on-google-accounts/

GhostToken Flaw Could Let Attackers Hide Malicious Apps in Google Cloud Platform
https://thehackernews.com/2023/04/ghosttoken-flaw-could-let-attackers.html

阿里雲PostgreSQL資料庫出現2個重大漏洞
https://www.wiz.io/blog/brokensesame-accidental-write-permissions-to-private-registry-allowed-potential-r

Kubernetes的API被用於植入後門程式
https://blog.aquasec.com/leveraging-kubernetes-rbac-to-backdoor-clusters

2.銀行/金融/保險/證券/金融監理 新聞及資安
Attention Online Shoppers: Don't Be Fooled by Their Sleek, Modern Looks — It's Magecart!
https://thehackernews.com/2023/04/attention-online-shoppers-dont-be.html

Veeam備份伺服器漏洞被駭客組織FIN7用於攻擊行動
https://labs.withsecure.com/publications/fin7-target-veeam-servers

銀行自律上路 防堵供應鏈資安出包
https://readers.ctee.com.tw/cm/20230427/a04aa4/1237319/share

遭永豐金告背信罪一審無罪...「吹哨人」張晉源駭客手法毀3台筆電！疑藏「利益交換」鐵證
https://www.fountmedia.io/article/166350

是駭客還是「吹哨人」？ 張晉源專業手法毁三台重要証據筆電
https://tw.news.yahoo.com/%E6%98%AF%E9%A7%AD%E5%AE%A2%E9%82%84%E6%98%AF-%E5%90%B9%E5%93%A8%E4%BA%BA-%E5%BC%B5%E6%99%89%E6%BA%90%E5%B0%88%E6%A5%AD%E6%89%8B%E6%B3%95%E6%AF%81%E4%B8%89%E5%8F%B0%E9%87%8D%E8%A6%81%E8%A8%BC%E6%93%9A%E7%AD%86%E9%9B%BB-020959474.html

北歐銀行用戶遭到網釣簡訊鎖定
https://heimdalsecurity.com/blog/mitid-smishing-nordea-bank/

3.信用卡/電子支付/行動支付/pay/支付系統/資安
台灣大Apple「iPhone卡緊收」5月登場！用iPhone收款　免刷卡機即可搶攻嗶商機
https://www.winnews.com.tw/130155/

港人北上如何免VPN登錄WhatsApp　港元亦可完成電子支付
https://www.hk01.com/article/892485?utm_source=01articlecopy&utm_medium=referral

通勤月票新卡免費領　公總：現有電子票證、行動支付也可綁定
https://www.ettoday.net/news/20230427/2487913.htm

「一卡通Money」領錢要收費！5／1起　逾10家金融機構入列
https://finance.ettoday.net/news/2488323

掃QR碼支付超方便　詐騙3手法曝！網址「O變成0」要看清
https://www.ctwant.com/article/253017

2023繳稅神卡是哪張？「信用卡、行動支付」回饋懶人包比拚
https://www.nownews.com/news/6119637

4.加密貨幣/數位貨幣/挖礦/區塊鍊/智能合約/WEB3 資安
美國政府、Mt.Gox 託管人各持 205,514、137,890 BTC
https://www.blocktempo.com/us-government-and-mtgox-trustee-hold-10-billion-btc/

英國監管機構要求慈善機構謹慎接受加密貨幣並需遵守稅收和反洗錢規則
https://news.cnyes.com/news/id/5157692

Polygon生態項目0VIX疑遭駭客攻擊，損失約200萬美元
https://news.cnyes.com/news/id/5159378

5.資安事件新聞

A.病毒木馬 / 殭屍網路 / 勒索軟體 / Adware /APT /後門程式/IOC
美英警告：俄駭客組織在 Cisco 路由器部署Jaguar Tooth惡意軟體
https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=10430

Mac 比較少惡意軟體？資安報告揭露 Mac 與 Windows、Linux 的風險
https://3c.yipee.cc/217147/mac-%E6%AF%94%E8%BC%83%E5%B0%91%E6%83%A1%E6%84%8F%E8%BB%9F%E9%AB%94%EF%BC%9F%E8%B3%87%E5%AE%89%E5%A0%B1%E5%91%8A%E6%8F%AD%E9%9C%B2-mac-%E8%88%87-windows%E3%80%81linux-%E7%9A%84%E9%A2%A8%E9%9A%AA/

BabLock（又名 Rorschach）勒索病毒
https://www.trendmicro.com/en_us/research/23/d/an-analysis-of-the-bablock-ransomware.html

越南駭客散布竊資軟體SYS01 Stealer，管道是挾持企業臉書帳號來發送廣告
https://labs.guard.io/malverposting-with-over-500k-estimated-infections-facebook-ads-fuel-this-evolving-stealer-54b03d24b349

針對Mac電腦而來的竊資軟體Atomic，目標是洗劫50種加密貨幣錢包
https://www.bleepingcomputer.com/news/security/new-atomic-macos-info-stealing-malware-targets-50-crypto-wallets/

惡意軟體Lobshot透過Google廣告散布
https://www.elastic.co/security-labs/elastic-security-labs-discovers-lobshot-malware

Linux、NAS與VMware虛擬化平臺遭到勒索軟體RTM Locker鎖定
https://www.uptycs.com/blog/rtm-locker-ransomware-as-a-service-raas-linux

Linux系統成為中國駭客組織Alloy Taurus目標之一，他們開發出專用的後門程式PingPull
https://unit42.paloaltonetworks.com/alloy-taurus/

伊朗駭客組織Charming Kitten散布惡意軟體BellaCiao
https://www.bitdefender.com/blog/businessinsights/unpacking-bellaciao-a-closer-look-at-irans-latest-malware/

俄國駭客組織Tomiris利用惡意軟體Turla混淆視聽
https://securelist.com/tomiris-called-they-want-their-turla-malware-back/109552/

美國軍艦製造商Fincantieri Marinette Marine傳出遭勒索軟體攻擊
https://news.usni.org/2023/04/20/ransomware-attack-hits-marinette-marine-shipyard-results-in-short-term-delay-of-frigate-freedom-lcs-construction

TP-Link無線路由器漏洞遭到利用，植入殭屍網路病毒Mirai
https://www.zerodayinitiative.com/blog/2023/4/21/tp-link-wan-side-vulnerability-cve-2023-1389-added-to-the-mirai-botnet-arsenal

駭客透過重新上架PyPI同名套件來散布惡意程式
https://www.reversinglabs.com/blog/package-names-repurposed-to-push-malware-on-pypi

惡意軟體分析網站VirusTotal導入大型語言模型
https://blog.virustotal.com/2023/04/introducing-virustotal-code-insight.html

DNS惡意軟體工具包Decoy Dog鎖定組織的網路設備而來
https://blogs.infoblox.com/cyber-threat-intelligence/cyber-threat-advisory/dog-hunt-finding-decoy-dog-toolkit-via-anomalous-dns-traffic/

勒索軟體CrossLock繞過作業系統的事件追蹤機制
https://blog.cyble.com/2023/04/18/crosslock-ransomware-emerges-new-golang-based-malware-on-the-horizon/

惡意軟體Raspberry Robin採用新的迴避偵測手法
https://research.checkpoint.com/2023/raspberry-robin-anti-evasion-how-to-exploit-analysis/

安卓木馬Fakecalls濫用合法簽章迴避檢測
https://www.mcafee.com/blogs/other-blogs/mcafee-labs/fakecalls-android-malware-abusing-legitimate-signing-key/

美國與歐洲組織遭到惡意軟體EvilExtractor攻擊
https://www.fortinet.com/blog/threat-research/evil-extractor-all-in-one-stealer

駭客組織利用Google廣告散布BumbleBee
https://www.secureworks.com/blog/bumblebee-malware-distributed-via-trojanized-installer-downloads

惡意軟體代打服務Faceless向網路罪犯出售匿名身分
https://krebsonsecurity.com/2023/04/giving-a-face-to-the-malware-proxy-service-faceless/

加拿大黃頁搜尋網站Yellow Pages傳出遭到勒索軟體Black Basta攻擊
https://www.bleepingcomputer.com/news/security/yellow-pages-canada-confirms-cyber-attack-as-black-basta-leaks-data/

X_Trader Supply Chain Attack Affects Critical Infrastructure Organizations in U.S. and Europe
https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/xtrader-3cx-supply-chain

Mac用戶遭到北韓駭客鎖定，發動惡意軟體RustBucket攻擊
https://www.jamf.com/blog/bluenoroff-apt-targets-macos-rustbucket-malware/

'RustBucket' malware targets macOS
https://www.jamf.com/blog/bluenoroff-apt-targets-macos-rustbucket-malware/

俄國駭客組織Tomiris利用惡意軟體Turla混淆視聽
https://securelist.com/tomiris-called-they-want-their-turla-malware-back/109552/

Tomiris called, they want their Turla malware back
https://securelist.com/tomiris-called-they-want-their-turla-malware-back/109552/

Analyzing DNS Traffic for Anomalous Domains and Threat Detection
https://blogs.infoblox.com/cyber-threat-intelligence/cyber-threat-advisory/dog-hunt-finding-decoy-dog-toolkit-via-anomalous-dns-traffic/

EvilExtractor – All-in-One Stealer
https://www.fortinet.com/blog/threat-research/evil-extractor-all-in-one-stealer

Open-Source Gh0st RAT Still Haunting Inboxes 15 Years After Release
https://cofense.com/blog/open-source-gh0st-rat-still-haunting-inboxes-15-years-after-release/

RokRAT Malware Distributed Through LNK Files
https://asec.ahnlab.com/en/51751/

Chinese Alloy Taurus Updates PingPull Malware
https://unit42.paloaltonetworks.com/alloy-taurus/

Attackers Use Containers for Profit via TrafficStealer
https://www.trendmicro.com/en_us/research/23/d/attackers-use-containers-for-profit-via-trafficstealer.html

Unpacking BellaCiao: A Closer Look at Iran’s Latest Malware
https://businessinsights.bitdefender.com/unpacking-bellaciao-a-closer-look-at-irans-latest-malware

Magecart threat actor rolls out convincing modal forms
https://www.malwarebytes.com/blog/threat-intelligence/2023/04/kritec-art

New Atomic macOS Malware Steals Keychain Passwords and Crypto Wallets
https://thehackernews.com/2023/04/new-atomic-macos-stealer-can-steal-your.html

Lazarus Subgroup Targeting Apple Devices with New RustBucket macOS Malware
https://thehackernews.com/2023/04/lazarus-subgroup-targeting-apple.html

Lazarus X_TRADER Hack Impacts Critical Infrastructure Beyond 3CX Breach
https://thehackernews.com/2023/04/lazarus-xtrader-hack-impacts-critical.html

N.K. Hackers Employ Matryoshka Doll-Style Cascading Supply Chain Attack on 3CX
https://thehackernews.com/2023/04/nk-hackers-employ-matryoshka-doll-style.html

Tonto Team Uses Anti-Malware File to Launch Attacks on South Korean Institutions
https://thehackernews.com/2023/04/tonto-team-uses-anti-malware-file-to.html

Google Gets Court Order to Take Down CryptBot That Infected Over 670,000 Computers
https://thehackernews.com/2023/04/google-gets-court-order-to-take-down.html

Hackers Exploit Outdated WordPress Plugin to Backdoor Thousands of WordPress Sites
https://thehackernews.com/2023/04/hackers-exploit-outdated-wordpress.html

Ransomware Hackers Using AuKill Tool to Disable EDR Software Using BYOVD Attack
https://thehackernews.com/2023/04/ransomware-hackers-using-aukill-tool-to.html

Iranian Hackers Launch Sophisticated Attacks Targeting Israel with PowerLess Backdoor
https://thehackernews.com/2023/04/iranian-hackers-launch-sophisticated.html

LimeRAT Malware Analysis: Extracting the Config
https://thehackernews.com/2023/04/limerat-malware-analysis-extracting.html

RTM Locker's First Linux Ransomware Strain Targeting NAS and ESXi Hosts
https://thehackernews.com/2023/04/rtm-lockers-first-linux-ransomware.html

Chinese Hackers Using MgBot Malware to Target International NGOs in Mainland China
https://thehackernews.com/2023/04/chinese-hackers-using-mgbot-malware-to.html

B.行動安全 / iPhone / Android /穿戴裝置 /App / 5G / 即時通訊
Google Authenticator App Gets Cloud Backup Feature for TOTP Codes
https://thehackernews.com/2023/04/google-authenticator-app-gets-cloud.html

終於！Google Authenticator開啟帳號登入同步雲端的功能
https://netmag.tw/2023/04/27/finally-google-authenticator-has-enabled-the-feature-of-syncing-account-login-to-the-cloud

山寨Minecraft手機App在系統背景載入廣告牟利
https://www.mcafee.com/blogs/other-blogs/mcafee-labs/hiddenads-spread-via-android-gaming-apps-on-google-play/

C.事件 / 駭客 / DDOS / APT / 雲端/ 暗網/ 徵才 / 國際資安事件 / 資安人力
新光三越設安控長 從資安包辦到食安
https://www.gvm.com.tw/article/102129

鎖定科技與零售業的API與應用程式攻擊翻倍成長
https://www.akamai.com/lp/soti/slipping-through-the-security-gaps-the-rise-of-application-and-api-attacks

駭客正侵入AT&T電子郵件帳戶以竊取用戶的加密資產
https://news.cnyes.com/news/id/5158674

駭客於Docker環境部署TrafficStealer，將流量導向特定網站進行牟利
https://www.trendmicro.com/en_us/research/23/d/attackers-use-containers-for-profit-via-trafficstealer.html

「新東南海鮮」藏駭客？溢波遭利用、駭進LiTV
https://news.ebc.net.tw/news/society/364356

線上影視平臺LiTV雲端基礎設施1月遭破壞，初步調查結果出爐，疑為離職工程師報復，已拘提、交保候傳
https://www.cna.com.tw/news/asoc/202304270204.aspx

LiTV遭駭財損近3千萬元 刑事局拘提前工程師送辦
https://today.line.me/tw/v2/article/GgoKLmy

工程師不爽前東家廣告推播狂炸，駭進資料庫把片全刪光！用戶過年沒得看、LiTV差點倒閉
https://www.businesstoday.com.tw/article/category/183027/post/202304280008/

樂高遭駭客入侵系統：不提告反而還放任，背後的原因是什麼
https://www.gvm.com.tw/article/102183

38國參與北約組織2023年網路攻防演習
https://ccdcoe.org/news/2023/worlds-largest-cyber-defense-exercise-locked-shields-kicks-off-in-tallinn/

以色列組織遭到伊朗駭客Educated Manticore鎖定
https://research.checkpoint.com/2023/educated-manticore-iran-aligned-threat-actor-targeting-israel-via-improved-arsenal-of-tools/

加拿大天然氣管線遭到俄羅斯駭客Zarya攻擊
https://securityaffairs.com/145307/cyber-warfare-2/canadian-gas-pipeline-disruptive-attack.html

沙國王儲訪中隱藏任務？引進中國技術大規模監控人民
https://technews.tw/2023/04/28/the-saudi-crown-prince-wants-to-build-a-trillion-dollar-utopia-in-the-desert/

俄羅斯駭客劫持烏克蘭境內攝影機，收集軍隊動向情報
https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=10423

尹錫悅赴美國會演說 強調韓美日須共抗北韓威脅
https://news.cts.com.tw/cna/international/202304/202304282171436.html

美網安部隊前進多國 協助對抗駭客
https://tw.news.yahoo.com/news%2F%E7%BE%8E%E7%B6%B2%E5%AE%89%E9%83%A8%E9%9A%8A%E5%89%8D%E9%80%B2%E5%A4%9A%E5%9C%8B-%E5%8D%94%E5%8A%A9%E5%B0%8D%E6%8A%97%E9%A7%AD%E5%AE%A2-160000772.html

爆中國境內替北韓駭客「洗錢」 美國制裁3人
https://tw.news.yahoo.com/%E7%88%86%E4%B8%AD%E5%9C%8B%E5%A2%83%E5%85%A7%E6%9B%BF%E5%8C%97%E9%9F%93%E9%A7%AD%E5%AE%A2-%E6%B4%97%E9%8C%A2-%E7%BE%8E%E5%9C%8B%E5%88%B6%E8%A3%813%E4%BA%BA-091751807.html

FBI局長：中國的網路威脅空前、在美設警察站太離譜
https://www.worldjournal.com/wj/story/121148/7129287

中國駭客組織Evasive Panda疑似透過騰訊即時通訊軟體更新的管道，鎖定國際NGO組織人員散布後門程式
https://www.welivesecurity.com/2023/04/26/evasive-panda-apt-group-malware-updates-popular-chinese-software/

New All-in-One "EvilExtractor" Stealer for Windows Systems Surfaces on the Dark Web
https://thehackernews.com/2023/04/new-all-in-one-evilextractor-stealer.html

Critical Vulnerabilities in PaperCut Print Management Software
https://www.huntress.com/blog/critical-vulnerabilities-in-papercut-print-management-software

Microsoft Confirms PaperCut Servers Used to Deliver LockBit and Cl0p Ransomware
https://thehackernews.com/2023/04/microsoft-confirms-papercut-servers.html

列印管理軟體PaperCut漏洞已出現攻擊行動，但仍有9成伺服器尚未修補
https://www.huntress.com/blog/critical-vulnerabilities-in-papercut-print-management-software

Microsoft：駭客利用PaperCut漏洞　植入勒索軟體
https://www.technice.com.tw/outbound/50501/

出現更多駭客濫用PaperCut漏洞，勒索軟體駭客Clop、LockBit以此進行竊密
https://twitter.com/MsftSecIntel/status/1651346653901725696

Russian Hackers Suspected in Ongoing Exploitation of Unpatched PaperCut Servers
https://thehackernews.com/2023/04/russian-hackers-suspected-in-ongoing.html

Russian Hackers Tomiris Targeting Central Asia for Intelligence Gathering
https://thehackernews.com/2023/04/russian-hackers-tomiris-targeting.html

Chinese Hackers Spotted Using Linux Variant of PingPull in Targeted Cyberattacks
https://thehackernews.com/2023/04/chinese-hackers-using-pingpull-linux.html

Charming Kitten's New BellaCiao Malware Discovered in Multi-Country Attacks
https://thehackernews.com/2023/04/charming-kittens-new-bellaciao-malware.html

資訊安全顧問【高雄業一技服】
https://glints.com/tw/en/opportunities/jobs/%E8%B3%87%E8%A8%8A%E5%AE%89%E5%85%A8%E9%A1%A7%E5%95%8F%E9%AB%98%E9%9B%84%E6%A5%AD%E4%B8%80%E6%8A%80%E6%9C%8D/dd393730-f68b-41ef-9909-f0a73b853438

BC_資安程式設計師
https://job.1111.com.tw/job/103736314/

雲平台資安技術工程師(CSS) 
https://www.104.com.tw/job/7z7nv

D.資料外洩/個資法/GDPR/網路詐騙/網路釣魚/盜刷/假新聞/網路霸凌/帳號安全
個資外洩不能忍 資通安全不能等
https://tw.news.yahoo.com/%E5%80%8B%E8%B3%87%E5%A4%96%E6%B4%A9%E4%B8%8D%E8%83%BD%E5%BF%8D-%E8%B3%87%E9%80%9A%E5%AE%89%E5%85%A8%E4%B8%8D%E8%83%BD%E7%AD%89-124732929.html

臉書私訊「違反規定」有詐　賣家個資險被盜
https://news.tvbs.com.tw/local/2109300

南非Peugeot分公司外流車主資訊
https://cybernews.com/security/peugeot-user-data-leak-south-america/

扒兩層皮！北市警「詐騙」被害人 2大過免職
https://www.msn.com/zh-tw/news/national/%E6%89%92%E5%85%A9%E5%B1%A4%E7%9A%AE-%E5%8C%97%E5%B8%82%E8%AD%A6-%E8%A9%90%E9%A8%99-%E8%A2%AB%E5%AE%B3%E4%BA%BA-2%E5%A4%A7%E9%81%8E%E5%85%8D%E8%81%B7/ar-AA1ap0rn?ocid=Peregrine

科技業者仍是駭客網路釣魚攻擊冒用品牌的首選
https://blog.checkpoint.com/security/retail-giant-walmart-ranks-first-in-list-of-brands-most-likely-to-be-imitated-in-phishing-attempts-in-q1-2023/

Gogolook推出Roo AI，以生成式AI技術打造AI智能問答服務，能根據提問提醒用戶小心詐騙
https://www.ithome.com.tw/news/156566

濫用ChatGPT的網路釣魚攻擊活動，在2022年就已現蹤
https://info.zscaler.com/resources-industry-reports-threatlabz-phishing-report

ChatGPT's Data Protection Blind Spots and How Security Teams Can Solve Them
https://thehackernews.com/2023/04/chatgpts-data-protection-blind-spots.html

Study: 84% of Companies Use Breached SaaS Applications - Here's How to Fix it for Free!
https://thehackernews.com/2023/04/study-84-of-companies-use-breached-saas.html

未受保護的網頁伺服器曝露逾700億個檔案
https://cybelangel.com/2023-state-of-easm-report-cybelangel-analysis-of-half-billion-internet-facing-apps-devices-reveals-top-trends-in-critical-exposures-to-cyberattacks-across-industries/

錯誤配置的雲端軟體登錄檔曝露逾2.5億個物件
https://www.aquasec.com/cloud-native-academy/docker-container/registry-scanning/

ESET分析二手企業路由器，56%含有前用戶的配置資料
https://www.ithome.com.tw/news/156547

E.研究報告/工具
Browser Security Survey: 87% of SaaS Adopters Exposed to Browser-borne Attacks
https://thehackernews.com/2023/04/browser-security-survey-87-of-saas.html

Why Your Detection-First Security Approach Isn't Working
https://thehackernews.com/2023/04/why-your-detection-first-security.html

ViperSoftX InfoStealer Adopts Sophisticated Techniques to Avoid Detection
https://thehackernews.com/2023/04/vipersoftx-infostealer-adopts.html

Kubernetes的API存取控制機制RBAC遭到濫用，駭客接管並用於挖礦
https://blog.aquasec.com/leveraging-kubernetes-rbac-to-backdoor-clusters

Kubernetes RBAC Exploited in Large-Scale Campaign for Cryptocurrency Mining
https://thehackernews.com/2023/04/kubernetes-rbac-exploited-in-large.html

Google Cloud Introduces Security AI Workbench for Faster Threat Detection and Analysis
https://thehackernews.com/2023/04/google-cloud-introduces-security-ai.html

科學家用樂高打造了一台可以製造出人類皮膚的3D列印機
https://tomorrowsci.com/technology/%E7%A7%91%E5%AD%B8%E5%AE%B6%E7%94%A8%E6%A8%82%E9%AB%98%E6%89%93%E9%80%A0%E4%BA%86%E4%B8%80%E5%8F%B0%E5%8F%AF%E4%BB%A5%E8%A3%BD%E9%80%A0%E5%87%BA%E4%BA%BA%E9%A1%9E%E7%9A%AE%E8%86%9A%E7%9A%843d%E5%88%97/

Google在多項安全解決方案整合AI大型語言模型Sec-PaLM
https://cloud.google.com/blog/products/identity-security/rsa-google-cloud-security-ai-workbench-generative-ai

F.商業
A10 Networks與Fastly合作首推應用交付解決方案與下一代 WAF 整合加強雲端防禦
https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=10429

Palo Alto Networks：加密風潮退散，勒索軟體改竊取資料、騷擾脅迫
https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=10426

趨勢科技加入Microsoft私有邊緣運算生態系
https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=10428

14 Kubernetes and Cloud Security Challenges and How to Solve Them
https://thehackernews.com/2023/04/14-kubernetes-and-cloud-security.html

簡單上手！跨區追劇、遊戲及資安，使用 NordVPN 來完成
https://today.line.me/tw/v2/article/YaWMJ0W

陞泰推AI安控主機，Q3起搶類比安防市場
https://www.moneydj.com/kmdj/news/newsviewer.aspx?a=d5cdf5c8-f57e-44d9-83ad-1a0707169125

Netron網創資訊提供跨雲端平台整合服務 提升企業營運韌性
https://n.yam.com/Article/20230428605560

AWS擴大GuardDuty安全防守範圍，可偵測容器、資料庫與無伺服器應用安全威脅
https://www.businesswire.com/news/home/20230424005364/en/AWS-Announces-Three-New-Amazon-GuardDuty-Capabilities-to-Help-Customers-Protect-Container-Database-and-Serverless-Workloads

G.政府
籲完備資安法規 立委：應加強OT規範
https://www.epochtimes.com/b5/23/4/27/n13982881.htm

資安外洩頻傳 民眾黨團籲儘速推動修正草案
https://udn.com/news/story/6656/7126638

立院民眾黨團籲修《資通安全管理法》 納入OT面向
https://news.ltn.com.tw/news/politics/breakingnews/4283478

數位部攜無店面公會合作推防詐平台 30業者響應
https://ctee.com.tw/livenews/aj/ctee/a11608002023042712242352

台灣詐騙電話猖獗 陳美雅促民政局落實資安防護
https://www.cdns.com.tw/articles/789703

首波商用衛星通信頻率申請 2業者通過審查
https://www.rti.org.tw/news/view/id/2166075

林右昌拜會電商 防堵網路詐騙
https://wantrich.chinatimes.com/news/20230427900944-420501

陳麗娜質詢要求市府全面更新公文系統 落實樹木修剪及宣導參與式預算
https://www.youngnews3631.com/news_detail.php?NewsID=3856

ChatGPT應用於市政 議員認為有資安及正確性疑慮 應深入研究 不宜躁進	 
https://tcc8707.tcc.gov.tw/News_Content7.aspx?n=560ED0A737D102A8&sms=E37CE4C8B22090C0&s=8127E542297F87D1

調查局發布新人事！電腦偵辦科長上任　盼重建燒毀辦公室
https://www.ettoday.net/news/20230428/2488682.htm

調查局廉政大樓失火，起火點為資通安全處
https://news.pts.org.tw/article/633794

H.工控系統/ICS/SCADA/IOT/物聯網/車聯網/電動車/人工智慧/AI/ML/人臉辨識/醫療 相關資安
思科修補工控系統的重大漏洞
https://www.securityweek.com/cisco-patches-critical-vulnerabilities-in-industrial-network-director-modeling-labs/

I.教育訓練
iPAS資訊安全工程師中級筆記
https://hackmd.io/@Not/iPASInformationSecuritySpecialist

iPas資安工程師證照考前研習
https://reurl.cc/GEbA3p

Coursera 盤點 7 項雲端資安認證，高薪跳板都在這了！
https://buzzorange.com/techorange/2022/07/12/cloud-security-certificates/

全球網絡安全勞動力失衡 (ISC)2免費課程及考試填補人才缺口
https://reurl.cc/m39MDj

CISSP資安認證的8大領域
https://2formosa.blogspot.com/2022/12/CISSP-topic-domains.html

CISSP考試心得
https://reurl.cc/KbY83j

CISSP考試心得 – Benson
https://reurl.cc/GbWvxd

目標導向-20天光速考過CISSP
https://reurl.cc/2Zq6zn

CISSP證照考試實戰心得 第一章：初期準備工作
https://netmag.tw/2022/06/17/the-cissp-has-learned-the-first-chapter-in-actual-combat

CISSP證照考試實戰心得 第二章：規律且有紀律的讀書策略
https://netmag.tw/2022/07/01/the-cissp-is-in-the-field-of-combat-chapter-two-regular-and-disciplined-reading-strategies

CISSP證照考試實戰心得 第三章：終極一戰
https://netmag.tw/2022/07/12/the-cissp-has-learned-a-third-chapter-in-actual-combat-experience-the-ultimate-battle

Quick CISSP Infographic for IPSec
https://www.studynotesandtheory.com/single-post/quick-cissp-infographic-for-ipsec

CSSLP Certification - Security models in F#
https://github.com/vbocan/csslp

Certified Secure Software Lifecycle Professional in bullet points
https://github.com/joeyhage/csslp-notes

CPSA(CREST Practitioner Security Analyst) 資安分析師考試心得
https://tech-blog.cymetrics.io/posts/huli/crest-cpsa-prepare/

EC-Council CEH v11 考試心得、改版資訊以及準備方向 2021、2022
https://reurl.cc/1oyEM8

CEH v11 考試心得與準備方式
https://blog.sean.taipei/2022/01/ceh

CEH
https://github.com/a3cipher/CEH

CodeRed by EC-Council
https://github.com/codered-by-ec-council

深度解析 CPENT 考試心得、以及與 OSCP 的比較
https://reurl.cc/41eL8v

EC-Council CPENT v1 滲透測試認證 – 內容及心得分享
https://hackercat.org/pentesting/ec-council-cpent-v1-experience-review

[備考心得]CompTIA Security+ (SY0–601) 上篇
https://reurl.cc/M053DK

[備考心得]CompTIA Security+ (SY0–601) 下篇
https://reurl.cc/M053Gv

comptia-security-plus
https://github.com/ajfuto/comptia-security-plus

security-plus
https://github.com/fjavierm/security-plus

CompTIA Security+ Certification Practice Test Questions
https://www.examcompass.com/comptia/security-plus-certification/free-security-plus-practice-tests#google_vignette

不只是工程師才要懂的 App 資訊安全：取得資安檢測合格證書血淚史（iT邦幫忙鐵人賽系列書）
https://news.pchome.com.tw/living/books/20220202/index-64375841669874292009.html

Learn NIST Inside Out With 21 Hours of Training @ 86% OFF
https://thehackernews.com/2022/06/learn-nist-inside-out-with-21-hours-of.html

駭客與國家: 網路攻擊與地緣政治新常態
The hacker and the state: cyber attacks and the new normal of geopolitic
https://reurl.cc/D3nKKj

Practical Network Penetration Tester (PNPT) Certification Review
https://tmc222.medium.com/practical-network-penetration-tester-pnpt-certification-review-4280e4e164df

WUSON常用的基本詞彙
https://choson.lifenet.com.tw/?p=1958

6.近期資安活動及研討會
【資安系列工作坊】Fundamental of Windows Binary Reverse - Windows 逆向工程 2023/4/29
https://hackersir.kktix.cc/events/20230429-reverse

《數位沙龍座談小聚》崛起的區塊鏈正在顛覆我們的世界 2023/4/29
https://www.accupass.com/event/2304250834177851746850

【線上課程】ISO 27001:2022 資訊安全管理訓練 2023/4/29
https://www.accupass.com/event/2303060251572486924020

Just a chat - with no Expectations 2023/4/29
https://www.meetup.com/taipei-%E6%9A%97%E5%8F%B7%E9%80%9A%E8%B2%A8-cryptocurrency-meetup/events/292783537/

新竹比特幣交流討論 Hsinchu Bitcoin Discussions 2023/5/1
https://www.meetup.com/hsinchu-bitcoin-discussions/events/293147093/

Hugging Face :Depth Estimation 2023/5/2
https://www.meetup.com/tensorflow-user-group-taipei/events/290714782/

SyntaxError 2023/5/3
https://www.meetup.com/pythonhug/events/292869093/

HackingThursday 黑客星期四 - Week meetup Tamsui 固定聚會 淡水 2023/5/4
https://www.meetup.com/hackingthursday/events/292891721/

Bitcoin Socratic Seminar + Bitcoin and Nostr Meetup 2023/5/4
https://www.meetup.com/taiwan-bitdevs/events/293166577/

Web3 Meetup - 去中心應用 2023/5/4
https://www.accupass.com/event/2304070305181394577572

SEMI STANDARDS 半導體設備資安研討會議 2023/5/5
https://www.semi.org/en/connect/events/semi-standards-bandaotishebeizianyantaohuiyi

營業秘密保護與資訊安全管理 2023/5/6
https://www.accupass.com/event/2304241603381258796798

人工智慧之民事侵權責任探究 2023/5/6
https://www.accupass.com/event/2304241735321819706360

TEDxNYCULive 2023：Possibility 可能性 2023/5/7
https://www.accupass.com/event/2304180415231057647711

社團法人台灣駭客協會 112 年度第一次會員聚會 2023/5/9
https://hitcon.kktix.cc/events/hit-banquet-112

2023 CYBERSEC 資安大會 Jamf Apple 資安館 2023/5/9 ~ 2023/5/11
https://jamf.kktix.cc/events/cybersec2023jamf

Microsoft Azure 虛擬培訓日：基礎知識 2023/5/9 ~ 2023/5/10
https://mktoevents.com/Microsoft+Event/394403/157-GQE-382?wt.mc_id=AID3058380_QSG_EML_640883&wt.mc_id=AID3058380_EML_8317669

台灣網路講堂「建構多元異質的數位韌性」座談會 2023/5/10
https://www.twsig.tw/20230510/

Hack The Capitol 6.0 2023/5/10 ~ 2023/5/11
https://www.icsvillage.com/hack-the-capitol-2023

黑暗網站憑據如何導致軟體供應鏈攻擊 2023/5/11
https://lp.cyberark.com/how-dark-web-credentials-lead-to-a-software-supply-chain-attack-tc-registrationlp.html?utm_campaign=identity_security

Airflow Taiwan User Meetup #4 2023/5/11
https://www.meetup.com/taipei-py/events/292991559/

TWCC-CLI 進階操作- AI/ML 自動流程 2023/5/12
https://edu.nchc.org.tw/course/one_course_introduction.asp?lms_auto_course_id=4035&from_course_list_url=course_index

【實作體驗營】一日駭客x網路弱點滲透 2023/5/13
https://www.accupass.com/event/2303030820005796452650

借助現代分析實現數位轉型  2023/5/15 ~ 2023/5/16
https://mktoevents.com/Microsoft+Event/394032/157-GQE-382?wt.mc_id=AID3058384_QSG_EML_640909&wt.mc_id=AID3058380_EML_8317669

Elastic Security－ 檢測、調查和應對多變的威脅 2023/5/17
https://www.accupass.com/event/2304190909578502986500

上市櫃資安法規要求在即 企業如何掌握法遵與因應策略 2023/5/19
https://www.accupass.com/event/2304270202566389789600

Taipei dbt Meetup #11 (in-person 👫 & online 👨‍�2023/5/24
https://www.meetup.com/taipei-dbt-meetup/events/292891149/

Elixir meetup �2023/5/24
https://www.meetup.com/elixirtw-taipei/events/293147308/

資安五四三 2023/5/25 （線上14:00 - 15:30）
https://csa.kktix.cc/events/202305-543

鏈三上雲：資安解析峰會 掌握Web 3資安動向，開啟鏈雲新模式 2023/5/25 
https://www.accupass.com/event/2304120730519814020340

《區塊鏈初階課程》平日班  2023/5/25~2023/5/26
https://www.accupass.com/event/2304100300531686137286

3小時帶你了解AWS雲端服務與優勢 2023/5/26
https://www.uuu.com.tw/Public/content/edm/20230526_AWSDiscoveryDay_BC.htm

《區塊鏈初階課程》假日班 2023/5/27~2023/5/28
https://www.accupass.com/event/2304100341503819251900

大型語言模型時代下，建置解決方案該有的姿勢/知識 (Building solutions with LLMs) 2023/5/29
https://www.meetup.com/rladies-taipei/events/293170581/

5月台北例會_美國聯邦政府的供應鏈資安管理－以CMMC為例 (採線上舉辦) 2023/5/30
https://www.caa.org.tw/newsdetail-16263.html

台灣數位創新領航論壇 Taiwan Digital Innovation Navigation Forum 2023/5/30
https://www.accupass.com/event/2304240303341594373938

Azure AI 基礎知識 2023/5/31
https://mktoevents.com/Microsoft+Event/393899/157-GQE-382?wt.mc_id=AID3058385_QSG_EML_640902&wt.mc_id=AID3058380_EML_8317669

資安分析新手村：掌握網路封包分析技術（線上課程） 2023/6/13
https://forms.gle/msePzws5GtcDunrc7

資安分析新手村：掌握網路封包分析技術（實體課程）2023/6/14
https://forms.gle/mtpZNPCpTVyv97Dr9

黑客視角：網站漏洞挖掘與防禦 ( 線上課程) 2023/6/27
https://forms.gle/JpThJxMgxZd3uNh39

黑客視角：網站漏洞挖掘與防禦 ( 實體課程) 2023/6/28
https://forms.gle/qQAqx8KZzzntSyLd9

InfoSec Taiwan 2023 國際資安大會 2023/8/1 ~ 2023/8/3
https://csa.kktix.cc/events/infosectaiwan2023

DEF CON 32 2023/8/10 ~ 2023/8/13
https://defcon.org/index.html

Hou.Sec.Con 2023/10/12 ~ 2023/10/13
https://web.cvent.com/event/76d46ccb-fe00-4fe5-ba46-e4a77c807f21/summary

(ISC)2 SECURITY CONGRESS LEAD WITH CONFINDENCE 2023/10/25 ~ 2023/10/27
https://www.isc2.org/Congress-2023


