###### tags: `資安事件新聞週報`
# 資安事件新聞週報 2019/7/8 ~ 2019/7/12

1.重大弱點漏洞/後門/Exploit/Zero Day
安全公告：LEN-27828 Intel PROSet/Wireless WiFi Software 漏洞
http://iknow.lenovo.com/detail/dc_183380.html

Juniper Junos OS 多個漏洞
https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10938
https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10940
https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10942
https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10946

Lodash 嚴重安全漏洞背後你不得不知道的JavaScript 知識
https://juejin.im/post/5d271332f265da1b934e2d48

Lodash庫爆出嚴重安全漏洞，波及400萬+項目
https://mp.weixin.qq.com/s/tfZq2PZylGfMjOp8h8eeTw

Jenkins Dependency Graph View Plugin 0.13 - Persistent Cross-Site Scripting
https://www.exploit-db.com/exploits/47111

知名飯店Kiosk系統漏洞讓後台資料庫憑證曝險，可致客戶資料被竊
https://ithome.com.tw/news/131809

Jira Server and Data Center Update Patches Critical Vulnerability
https://www.bleepingcomputer.com/news/security/jira-server-and-data-center-update-patches-critical-vulnerability/

JIRA Security Advisory 2019-07-10
https://confluence.atlassian.com/jira/jira-security-advisory-2019-07-10-973486595.html

Bad McAfee Exploit Prevention Update Blocked Windows Logins
https://www.bleepingcomputer.com/news/security/bad-mcafee-exploit-prevention-update-blocked-windows-logins/

Unable to log on to Windows systems with Endpoint Security 10.2 (or earlier) after you apply Exploit Prevention content version 9418
http://bit.ly/2JvWk7a

物理黑客上線，羅技被曝出四個硬件漏洞
https://www.tuicool.com/articles/mqQFjiR

Logitech wireless USB dongles vulnerable to new hijacking flaws
https://www.zdnet.com/article/logitech-wireless-usb-dongles-vulnerable-to-new-hijacking-flaws/#ftag=RSSbaffb68

傳 PSN 現安全漏洞　黑客盜用玩家信用卡
https://unwire.hk/2019/07/04/psn-security/tech-secure/

小心被盜刷！PlayStation Network 爆發信用卡漏洞
https://www.inside.com.tw/article/16833-Security-Flaw-Allows-Hackers-To-Access-PSN-Accounts-Credit-Card-Info

火狐瀏覽器被發現某個存在17年的漏洞可竊取用戶本地存儲的文件
https://www.landiannews.com/archives/60168.html

中國大陸國家工業信息安全漏洞庫上線
https://news.sina.com.tw/article/20190708/31885498.html

Zoom Mac版安全漏洞曝光：可以讓網站劫持Mac攝像頭
https://news.sina.com.tw/article/20190709/31904184.html

Apple macOS Sierra IOFireWireFamily組件信息洩露漏洞
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7608

Apple發出更新，主動移除Mac中的Zoom本地主機網頁伺服器
https://www.ithome.com.tw/news/131792

Apple Issues Silent Update to Remove Old Zoom Software
https://www.bankinfosecurity.com/apple-issues-silent-update-to-remove-old-zoom-software-a-12767

VMware 多個產品發布新的安全更新
https://www.us-cert.gov/ncas/current-activity/2019/07/02/vmware-releases-security-advisory-multiple-products

VMWare vSphere ESXi 阻斷服務漏洞
https://www.vmware.com/security/advisories/VMSA-2019-0011.html

思科產品阻斷服務漏洞
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190710-asa-ftd-dos

Cisco 多個產品存在安全性弱點
https://www.us-cert.gov/ncas/current-activity/2019/07/03/cisco-releases-security-updates-multiple-products

Cisco delivers Patch Tuesday warmup with bundle of 18 bug fixes
https://www.theregister.co.uk/2019/07/05/cisco_patch_fix/

Citrix SD-WAN Appliance 10.2.2 - Authentication Bypass / Remote Command Execution
https://www.exploit-db.com/exploits/47112

Symantec Endpoint Encryption Privilege Escalation
https://support.symantec.com/us/en/article.SYMSA1485.html

Symantec DLP 15.5 MP1 - Cross-Site Scripting
https://www.exploit-db.com/exploits/47071

更新前先等等！微軟承認 Windows 10 五月更新有 VPN 網路瑕疵
https://3c.ltn.com.tw/news/37319

Microsoft Exchange 2003 base64-MIME Remote Code Execution
https://packetstormsecurity.com/files/153533/msexchange2003-exec.txt

The Windows 10 misinformation machine fires up again
https://www.zdnet.com/article/the-windows-10-misinformation-machine-fires-up-again/#ftag=RSSbaffb68

Microsoft July 2019 Patch Tuesday fixes zero-day exploited by Russian hackers
https://www.zdnet.com/article/microsoft-july-2019-patch-tuesday-fixes-zero-day-exploited-by-russian-hackers/#ftag=RSSbaffb68

Windows 10 KB4507453 Cumulative Update Causes Restart Alert Loop
https://www.bleepingcomputer.com/news/microsoft/windows-10-kb4507453-cumulative-update-causes-restart-alert-loop/

在Microsoft Visual Studio 2010 Service Pack 1 信息洩露漏洞的安全更新的說明： 2019 7 月9日
https://support.microsoft.com/zh-cn/help/4506161/security-update-for-information-disclosure-vulnerability-in-vs-2010

微軟發佈07月份安全性公告
https://support.microsoft.com/en-us/help/20190709/security-update-deployment-information-july-9-2019

July’s Patch Tuesday Fixes Critical Flaws in Microsoft Edge and Internet Explorer, Including Windows DHCP Server
https://blog.trendmicro.com/trendlabs-security-intelligence/julys-patch-tuesday-fixes-critical-flaws-in-microsoft-edge-and-internet-explorer-including-windows-dhcp-server/

Windows Zero-Day Used by Buhtrap Group For Cyber-Espionage
https://www.bleepingcomputer.com/news/security/windows-zero-day-used-by-buhtrap-group-for-cyber-espionage/

Debian 10 'Buster' Linux arrives
https://www.zdnet.com/article/debian-10-buster-linux-arrives/#ftag=RSSbaffb68

最新Redis未授權訪問漏洞，該如何守護Redis安全
http://news.51cto.com/art/201907/599444.htm

ibm -- db2 CVE-2019-4057
https://nvd.nist.gov/nvd.cfm?cvename=CVE-2019-4057

ibm -- db2 CVE-2019-4154
https://nvd.nist.gov/nvd.cfm?cvename=CVE-2019-4154

ibm -- db2 CVE-2019-4322
https://nvd.nist.gov/nvd.cfm?cvename=CVE-2019-4322

netapp -- clustered_data_ontap CVE-2019-5497
https://nvd.nist.gov/nvd.cfm?cvename=CVE-2019-5497

nginx -- njs CVE-2019-13067
https://nvd.nist.gov/nvd.cfm?cvename=CVE-2019-13067

synology -- calendar CVE-2019-11829
https://nvd.nist.gov/nvd.cfm?cvename=CVE-2019-11829

synology -- photo_station CVE-2019-11821
https://nvd.nist.gov/nvd.cfm?cvename=CVE-2019-11821

CVE-2019-13142:雷蛇影音軟件（Razer Surround）的權限提升漏洞
https://nosec.org/home/detail/2758.html

Adobe tackles vulnerabilities in Dreamweaver, Experience Manager, Bridge
https://www.zdnet.com/article/adobe-tackles-vulnerabilities-in-dreamweaver-experience-manager-bridge-cc/#ftag=RSSbaffb68

Intel Patches High-Severity Flaw in Processor Diagnostic Tool
https://threatpost.com/intel-patches-high-severity-flaw-in-processor-diagnostic-tool/146352/

Intel 發布新的安全更新
https://www.us-cert.gov/ncas/current-activity/2019/07/09/intel-releases-security-updates

Mozilla 已發布安全更新
https://www.us-cert.gov/ncas/current-activity/2019/07/09/mozilla-releases-security-updates-firefox-and-firefox-esr

Juniper updates its multi-cloud container platform Juke
https://www.zdnet.com/article/juniper-updates-its-multi-cloud-container-platform-juke/#ftag=RSSbaffb68

Apache Tomcat - CGIServlet enableCmdLineArguments Remote Code Execution (Metasploit)
https://www.exploit-db.com/exploits/47073

2.銀行/金融/保險/證券/支付系統/ 新聞及資安
香港銀行公會：環聯須提交獨立報告　恢復服務前要作詳解
https://hk.on.cc/hk/bkn/cnt/finance/20190705/bkn-20190705201332275-0705_00842_001.html

「Visa QR Code掃碼支付平台」服務上線，手機就能繳費
https://www.chinatimes.com/realtimenews/20190705001599-260410?chdtv

元大銀 進軍外幣ATM提匯業務
http://bit.ly/2S6pbln

銀聯卡全球發行逾75億張可在174個國家地區使用
https://money.udn.com/money/story/5605/3910855

日本電通成立資訊銀行 鼓勵消費者分享數據
https://money.udn.com/money/story/5602/3910763

盧希鵬：純網銀有3件傳統銀行做不到的優勢，數據、利他、弱連結生態系
https://www.ithome.com.tw/news/131709

東歐假卡集團ATM撳錢作案　骨幹成員被捕
https://hk.on.cc/hk/bkn/cnt/news/20190708/bkn-20190708114803488-0708_00822_001.html

陸客不來不怕，東協旅客來台消費 EMV 通用條碼支付漸漸增加
https://technews.tw/2019/07/09/luke-not-here-is-not-a-problem-south-east-asia-tourists-shop-in-taiwan-by-using-emv-qr-code-is-increasing/

Visa在台推EMV掃碼支付 串聯10大電子錢包
https://www.chinatimes.com/realtimenews/20190709003140-260410?chdtv

開放銀行大勢所趨　完善安全措施降低風險
https://www.netadmin.com.tw/netadmin/zh-tw/viewpoint/9F6D22BB76F54B70A83E612B7306259A

林坤正：傳統銀行數位轉型的大難題
https://www.wealth.com.tw/home/articles/21402

臺灣開放銀行大進展！首版Open API標準出爐，2大準則5項安控13家銀行先支援
https://www.ithome.com.tw/news/131648

銀行戰純網銀 央行下指導棋
https://money.udn.com/money/story/5613/3922001

英國張手迎接「數位銀行」
http://bit.ly/2XAK7Xw

中國大陸央行公佈第七批支付牌照續展結果：17家順利通過
https://news.sina.com.tw/article/20190710/31919242.html

客戶資料不再獨享…3階段「開放銀行」 下月啟動
https://udn.com/news/story/11316/3888637

英推開放銀行規範 來台探路
http://bit.ly/2XRGE6l

香港金管局要求管理信用卡業務風險
http://bit.ly/2XA83p2

網貸機構備案沒有時間表 個別地方明確不發展P2P
https://news.sina.com.tw/article/20190709/31896416.html

P2P頻爆雷 受害者聲明退出中共
http://bit.ly/2XWkQGu

國銀分行連5年減少 ATM台數資安人才需求增加
https://money.udn.com/money/story/5613/3923704

證券超業小心囉！客戶下單5分鐘內嚴禁跟單
https://ec.ltn.com.tw/article/breakingnews/2850373

German banks are moving away from SMS one-time passcodes
https://www.zdnet.com/article/german-banks-are-moving-away-from-sms-one-time-passcodes/#ftag=RSSbaffb68

Cyber Attacks Biggest Threat to Financial Sector
https://www.infosecurity-magazine.com/news/cyber-attacks-biggest-threat/

Only three global banks given top website security score by ImmuniWeb
https://www.zdnet.com/article/only-three-global-banks-given-top-website-security-score-by-immuniweb/

State of Application Security at S&P Global World's 100 Largest Banks
https://www.immuniweb.com/blog/SP-100-banks-application-security.html

Synthetic identity theft is the fastest-growing financial crime in the U.S.
https://www.cyberscoop.com/synthetic-identity-theft-stolen-fake-data/

Synthetic Identity Fraud in the U.S. Payment System
https://fedpaymentsimprovement.org/wp-content/uploads/frs-synthetic-identity-payments-fraud-white-paper-july-2019.pdf

3.電子支付/電子票證/行動支付/ pay/新聞及資安
日本7-Eleven手機支付新app被駭，近900名用戶損失5500萬日幣
https://times.hinet.net/news/22448660

日本「7Pay」出師不利　上線即遭嚴重盜刷
https://news.tvbs.com.tw/focus/1161283

日本7-11的資安風暴：超商電子支付「7pay」盜用風波
https://global.udn.com/global_vision/story/8662/3911089

日7-11手機支付軟體疑遭犯罪盜用 日逮捕2名陸嫌
https://www.chinatimes.com/realtimenews/20190705001440-260408?chdtv

密碼重設功能不嚴謹，缺乏驗證，日本7Pay用戶遭竄改密碼並盜刷
https://www.ithome.com.tw/news/131715

密碼重設功能不嚴謹，缺乏驗證，日本7Pay App用戶遭竄改密碼並盜刷
https://www.ithome.com.tw/news/131715

從日本7pay遭駭，看行動支付的資安風險
https://news.tvbs.com.tw/politics/1162387

日本7-11手機支付盜刷背後有中國團夥影子
https://zh.cn.nikkei.com/politicsaeconomy/politicsasociety/36386-2019-07-11-05-00-30.html

日本7-11推行動支付APP「7pay」 駭客竊取900人個資花光1600萬
https://news.sina.com.tw/article/20190708/31891034.html

日超商推手機支付，全家比 7-11 強在兩步驟驗證
https://technews.tw/2019/07/08/famipay-stronger-than-7pay/

日本7-11手機支付遭盜刷 日本政府要求做到這件事
https://ec.ltn.com.tw/article/breakingnews/2848446

7Pay 剛上線就被盜刷 1581 萬台幣，為什麼全家 FamiPay 沒事
https://buzzorange.com/techorange/2019/07/08/711-familymart-7pay-famipay-tokoyo-japan/

數百名用戶遭駭客竊取5,000多萬日圓　日本7-11停用手機支付App
https://www.digitimes.com.tw/iot/article.asp?cat=158&cat1=20&cat2=80&id=0000564028_2m1lktxu39oun97mgwlod

印度法院稱PayPal在當地涉嫌非法運營 或被叫停
https://news.sina.com.tw/article/20190705/31870396.html

日本7-11推行動支付APP「7pay」 駭客竊取900人個資花光1600萬
https://cnews.com.tw/140190708a02/

「7-11APP」有漏洞 屏蔽外部帳號登錄
https://zh.cn.nikkei.com/industry/tradingretail/36433-2019-07-12-10-37-06.html

陸Q1網路支付達58兆人幣 支付寶位居寶座
https://www.chinatimes.com/realtimenews/20190704003692-260410?chdtv

第三方支付平台須加強對第四方支付平台監管
https://news.sina.com.tw/article/20190705/31859902.html

台水、台電合作 推動行動支付服務
http://bit.ly/30acFUo

看好掃碼支付 Visa QR Code首波合作10家銀行今上線
https://news.cnyes.com/news/id/4354008

VISA支付安全路綫藍圖　代碼取代信用卡帳號
http://bit.ly/2N91hXf

新加坡「支付寶」時代要來臨了！媽媽再也不用擔心我忘帶錢包了
http://www.orgs.one/show/739002

【電子支付】法國央行建議　建立泛歐支付系統
http://bit.ly/2xIyO04

使用電子支付更方便了 金管會開放五大措施
https://udn.com/news/story/7239/3902836

提升電子支付便利性 金管會祭3大修正重點
https://money.udn.com/money/story/5613/3903223

與星巴克、微軟合作，Bakkt被爆將推加密支付APP
http://news.knowing.asia/news/a17fd6a8-f13f-40a3-90b7-244ebad0c3e8

4.虛擬貨幣/區塊鍊 新聞及資安
在真正重構傳統金融體系之前，Libra得先解決監管難題
http://news.knowing.asia/news/de731887-8998-4837-8d2c-3db35bc50abb

Libra回應國會:接受反洗錢監督和政府監管(全文）
https://news.sina.com.tw/article/20190710/31919732.html

區塊鏈、資安 下一代數位科技
http://bit.ly/2xJXjKl

從 Libra 的誕生看網路支付工具的演進與區塊鏈代幣的未來
https://www.inside.com.tw/article/16706-Libra-and-the-future-of-blockchain

證券型代幣（STO）規範的開端！上路前的STO規範總體檢報名開跑
http://bit.ly/2XqQWGj

STO為台灣帶來新活力
https://www.gvm.com.tw/article.html?id=66948

全球首創訂 STO 專門規範，金管會法規 10 月出爐
https://finance.technews.tw/2019/06/28/sto-specification-taiwan-october/

Monero（XMR）：披露了九個安全漏洞，一個暴露的加密貨幣交易所到盜竊
https://0xzx.com/201907052153155348.html

關於 Edgeware 鎖倉合約的拒絕服務漏洞
https://www.tuoluocaijing.com.tw/article/detail-50076.html

歐洲央行執行董事：金融監管機構需對Libra迅速採取行動
http://news.knowing.asia/news/39aac84f-5cbc-4ad3-a774-1e1e115a437d

資誠：虛擬貨幣平台，須符法遵
https://reurl.cc/G0Z1y

MUB美人幣將在區塊鏈資產交易平臺MBAEX交易所開放交易
http://n.yam.com/Article/20190708275028

區塊鏈技術在智慧城市之應用
http://sa.ylib.com/MagArticle.aspx?Unit=webonly&id=4422

門羅幣XMR被發現數個安全漏洞，目前多數已被修復
http://bit.ly/30n9etE

區塊鏈產業趨勢下一波～不得不被重視的加密貨幣資產託管潮
https://cnews.com.tw/152190709a01/

加密幣經紀業 SEC擬鬆綁
https://money.udn.com/money/story/5599/3919682

Electroneum重大升級使ETN成為全球最安全的去中心化和環境友善型加密貨幣，並將區塊獎勵降低75%
http://www.businesswirechina.com/hk/news/41074.html

中國是否會開始著手開發微信加密貨幣呢
http://news.knowing.asia/news/66a138ac-d6bc-4b50-b649-5fe78f53d3b8

Libra圖謀全球化貨幣 周小川談人民幣應對挑戰
https://news.sina.com.tw/article/20190711/31925080.html

謝平：如果10億人使用Libra 將會是區塊鏈的大普及
https://news.sina.com.tw/article/20190710/31915700.html

羅玫:區塊鏈應用需要技術和產業的復合型人才
https://news.sina.com.tw/article/20190701/31813486.html

臉書幣若涉儲值、跨境匯兌 須金管會核准
https://udn.com/news/story/11316/3885935

Huffpost深度分析臉書Libra：一個發行偽貨幣的笑話
https://news.sina.com.tw/article/20190622/31716626.html

與FATF新規定有關？韓國銀行加強對加密貨幣匿名交易的監控
http://news.knowing.asia/news/cd59a16b-ae79-413b-86b0-dd48ec150696

POSCMS交易所繫統存在多個高危漏洞平台資金存在被竊風險
http://www.lingchenliang.com/post/57638.html

日本交易所BITPoint證實因駭客攻擊損失35億日元！BITPoint Taiwan客戶不受此事件影響
http://bit.ly/2LjiBr0

比特幣 ATM 或暴露了歐盟洗錢條例的漏洞
http://bit.ly/30tjWyX

Bitcoin ATMs Show Gap in EU’s Money Laundering Rules, Police Say
https://www.bloomberg.com/news/articles/2019-07-11/bitcoin-atms-show-gap-in-eu-s-money-laundering-rules-police-say

Facebook’s Libra cryptocurrency project branded of ‘serious concern’ by Federal Reserve
https://www.zdnet.com/article/facebooks-libra-cryptocurrency-project-branded-a-serious-concern-by-federal-reserve/#ftag=RSSbaffb68

Bitcoin eats as much energy as Switzerland
https://nakedsecurity.sophos.com/2019/07/05/bitcoin-eats-as-much-energy-as-switzerland/

Bitcoin Scammers Go Public With Tesco Twitter Hacking
https://www.pandasecurity.com/mediacenter/social-media/tesco-twitter-hacking/

5.資安事件新聞

A.病毒木馬 / 殭屍網路 / 勒索軟體 / Adware /APT /後門程式
惡意垃圾郵件利用 ISO 映像檔散佈夾帶兩隻木馬的假發票
https://blog.trendmicro.com.tw/?p=61108

駭客利用偽造的eFax文件遞送惡意程式
https://ithome.com.tw/news/131757

微軟警告竊密程式Astaroth來襲，攻擊過程完全使用合法工具
https://www.ithome.com.tw/news/131742

殭屍病毒GoBotKR鎖定韓劇迷
https://ithome.com.tw/news/131756

維加斯若遭駭 市長將不會付駭客贖金
https://www.lvcnn.com/news.php?id=27176

資安業者揭露有勒索軟體鎖定威聯通的NAS裝置展開攻擊
https://www.ithome.com.tw/news/131800

QNAP NAS遭勒索軟體盯上，Arm、x86處理器產品皆中鏢
https://www.techbang.com/posts/71485-qnap-nas-targeted-by-ransomware-virus-arm-x86-processor-products-are-all-dart

2,500萬支Android手機感染Agent Smith惡意程式
https://www.ithome.com.tw/news/131794

僵屍網路（Botnet）攻擊布署，由 Windows 轉向 Linux 與 IoT 設備
https://blog.twnic.net.tw/2019/07/11/4222/

Pale Moon檔案伺服器遭駭客下毒
https://www.ithome.com.tw/news/131797

ATM 意軟體在地下市場出售
https://blog.trendmicro.com.tw/

Data breach post-mortem
https://forum.palemoon.org/viewtopic.php?f=17&t=22526

A New Ransomware Is Targeting Network Attached Storage (NAS) Devices
https://thehackernews.com/2019/07/ransomware-nas-devices.html

New Malware Replaced Legit Android Apps With Fake Ones On 25 Million Devices
https://thehackernews.com/2019/07/whatsapp-android-malware.html

Pale Moon says hackers added malware to older browser versions
https://www.zdnet.com/article/pale-moon-says-hackers-added-malware-to-older-browser-versions/#ftag=RSSbaffb68

Trickbot Trojan Gets IcedID Proxy Module to Steal Banking Info
https://www.bleepingcomputer.com/news/security/trickbot-trojan-gets-icedid-proxy-module-to-steal-banking-info/

New Android malware replaces legitimate apps with ad-infested doppelgangers
https://www.zdnet.com/article/new-android-malware-replaces-legitimate-apps-with-ad-infested-doppelgangers/#ftag=RSSbaffb68

Iran-Linked Malware Shared by USCYBERCOM First Seen in December 2016: Kaspersky
https://www.securityweek.com/iran-linked-malware-shared-uscybercom-first-seen-december-2016-kaspersky

A Quick and Efficient Method For Locating the main() function of Linux ELF Malware Variants
http://bit.ly/2XmJtrC

US Coast Guard warns about malware designed to disrupt ships' computer systems
https://www.zdnet.com/article/us-coast-guard-warns-about-malware-designed-to-disrupt-ships-computer-systems/#ftag=RSSbaffb68

Two US cities opt to pay $1m to ransomware operators
https://www.welivesecurity.com/2019/06/26/cities-pay-ransom-ransomware-operators/

Crimeware for Sale:The Commoditization of ATM Malware in the Cybercriminal Underground
http://bit.ly/323csnQ

Golang-based Spreader Used in a Cryptocurrency-Mining Malware Campaign
http://bit.ly/2Xr9G8o

ShadowGate Returns to Worldwide Operations With Evolved Greenflash Sundown Exploit Kit
http://bit.ly/2JhMLZD

RATs and stealers rush through “Heaven’s Gate” with new loader
https://blog.talosintelligence.com/2019/07/rats-and-stealers-rush-through-heavens.html

Malicious Script With Multiple Payloads
https://isc.sans.edu/diary/Malicious+Script+With+Multiple+Payloads/25090

Maldoc: Payloads in User Forms
https://isc.sans.edu/diary/Maldoc%3A+Payloads+in+User+Forms/25084

Steer clear of Bitcoin Cash generators
https://blog.malwarebytes.com/crypto/2019/07/steer-clear-of-bitcoin-cash-generators/

Helping survivors of domestic abuse: What to do when you find stalkerware
https://blog.malwarebytes.com/stalkerware/2019/07/helping-survivors-of-domestic-abuse-what-to-do-when-you-find-stalkerware/

Crimeware for Sale:The Commoditization of ATM Malware in the Cybercriminal Underground
https://www.trendmicro.com/vinfo/us/security/news/cybercrime-and-digital-threats/crimeware-for-sale-the-commoditization-of-atm-malware-in-the-cybercriminal-underground

UK's largest police forensics lab paid ransom demand to recover locked data
https://www.zdnet.com/article/uks-largest-police-forensics-lab-paid-ransom-demand-to-recover-locked-data/#ftag=RSSbaffb68

Inter: Skimmer For All
https://www.fortinet.com/blog/threat-research/inter-skimmer-for-all.html

2019-07-05 - QUICK POST: URSNIF INFECTION WITH TRICKBOT
https://www.malware-traffic-analysis.net/2019/07/05/index.html

BianLian Android Banking Malware is Back with Screen Recording and SSH Server Capabilities
https://gbhackers.com/bianlian-android-banking-malware/

Ransomware found exploiting former Windows flaw
https://www.ehackingnews.com/2019/07/ransomware-found-exploiting-former.html

More AgentTesla keylogger info-stealer campaigns hitting UK
https://myonlinesecurity.co.uk/more-agenttesla-keylogger-info-stealer-campaigns-hitting-uk/

The world's most famous and dangerous APT (state-developed) malware
https://www.zdnet.com/pictures/the-worlds-most-famous-and-dangerous-apt-state-developed-malware/#ftag=RSSbaffb68

Microsoft warns about Astaroth malware campaign
https://www.zdnet.com/article/microsoft-warns-about-astaroth-malware-campaign/#ftag=RSSbaffb68

Watch Out! Microsoft Spotted Spike in Astaroth Fileless Malware Attacks
https://thehackernews.com/2019/07/astaroth-fileless-malware.html

Dismantling a fileless campaign: Microsoft Defender ATP next-gen protection exposes Astaroth attack
https://www.microsoft.com/security/blog/2019/07/08/dismantling-a-fileless-campaign-microsoft-defender-atp-next-gen-protection-exposes-astaroth-attack/

Backdoor found in Ruby library for checking for strong passwords
https://www.zdnet.com/article/backdoor-found-in-ruby-library-for-checking-for-strong-passwords/#ftag=RSSbaffb68

Malicious campaign targets South Korean users with backdoor-laced torrents
https://www.welivesecurity.com/2019/07/08/south-korean-users-backdoor-torrents/

Anubis Android Malware Returns with Over 17,000 Samples
https://blog.trendmicro.com/trendlabs-security-intelligence/anubis-android-malware-returns-with-over-17000-samples/

Fake eFax emails are now spreading Dridex Trojan, RMS RAT
https://www.zdnet.com/article/fake-efax-emails-are-now-spreading-dridex-trojan-rms-rat/#ftag=RSSbaffb68

Double Duty: Dridex Banking Malware Delivered with RMS RAT
https://cofense.com/double-duty-dridex-banking-malware-delivered-rms-rat/

2019-07-08 - QUICK POST: URSNIF INFECTION WITH DRIDEX AND POWERSHELL EMPIRE
https://www.malware-traffic-analysis.net/2019/07/08/index.html

2019-07-08 - QUICK POST: RIG EK SENDS AMADEY
https://www.malware-traffic-analysis.net/2019/07/08/index2.html

Anubis Android banking malware returns with extensive financial app hit list
https://www.zdnet.com/article/anubis-android-banking-malware-returns-with-a-bang/#ftag=RSSbaffb68

Anubis Android Malware Returns with Over 17,000 Samples
https://blog.trendmicro.com/trendlabs-security-intelligence/anubis-android-malware-returns-with-over-17000-samples/

Where Will Ransomware Go In The Second Half Of 2019
https://blog.trendmicro.com/where-will-ransomware-go-in-the-second-half-of-2019/

New versions of FinFisher mobile spyware discovered in Myanmar
https://www.zdnet.com/article/new-versions-of-finfisher-mobile-spyware-discovered-in-myanmar/#ftag=RSSbaffb68

New FinSpy iOS and Android implants revealed ITW
https://securelist.com/new-finspy-ios-and-android-implants-revealed-itw/91685/

eCh0raix — New Ransomware Targets QNAP NAS Devices
https://thehackernews.com/2019/07/ransomware-nas-devices.html

New Miori Variant Uses Unique Protocol to Communicate with C&C
https://blog.trendmicro.com/trendlabs-security-intelligence/new-miori-variant-uses-unique-protocol-to-communicate-with-cc/

Remote access — for a scammer
https://www.kaspersky.com/blog/remote-access-scams/27552/

Sodin ransomware enters through MSPs
https://www.kaspersky.com/blog/sodin-msp-ransomware/27530/

New Malware Replaced Legit Android Apps With Fake Ones On 25 Million Devices
https://thehackernews.com/2019/07/whatsapp-android-malware.html

Cybersecurity: Malware lingers in SMBs for an average of 800 days before discovery
https://www.techrepublic.com/article/cybersecurity-malware-lingers-in-smbs-for-an-average-of-800-days-before-discovery/

Wannacry ransomware attack: Industry experts offer their tips for prevention
https://www.techrepublic.com/article/wannacry-ransomware-attack-industry-experts-offer-their-tips-for-prevention/

Agent Smith Android Malware Downloaded 25m+ Times
https://www.infosecurity-magazine.com/news/agent-smith-android-malware/

New eCh0raix Ransomware Brute-Forces QNAP NAS Devices
https://www.bleepingcomputer.com/news/security/new-ech0raix-ransomware-brute-forces-qnap-nas-devices/

US mayors group adopts resolution not to pay any more ransoms to hackers
https://www.zdnet.com/article/us-mayors-group-adopts-resolution-not-to-pay-any-more-ransoms-to-hackers/#ftag=RSSbaffb68

This new ransomware is targeting network attached storage devices
https://www.zdnet.com/google-amp/article/this-new-ransomware-is-targeting-network-attached-storage-devices/

Trickbot Trojan Gets 'BokBot' Proxy Module to Steal Banking Info.
https://www.ehackingnews.com/2019/07/trickbot-trojan-gets-bokbot-proxy.html

Trickbot gets custom proxy module from IcedID banking trojan| Cyware Hacker News
https://cybersecurityboard.com/trickbot-gets-custom-proxy-module-from-icedid-banking-trojan-cyware-hacker-news

B.行動安全 / iPhone / Android /穿戴裝置 /App
警告！「三星更新」是詐騙 APP，千萬別從 Google Play 下載
https://m.eprice.com.tw/mobile/talk/4523/5366299/1/

公共Wi-Fi暗藏危機 出國旅遊連網務必注意
http://bit.ly/2NIYZOW

駭客利用三星免費固件程式騙錢，安裝量超1000萬
http://bit.ly/2NQWqdY

Google Play 出現冒充 Samsung 更新軟件！逾千萬用戶中招
http://bit.ly/32dC2a1

趨勢科技預警182個免費App夾帶惱人廣告 百萬用戶中箭
https://www.chinatimes.com/realtimenews/20190705003637-260412?chdtv

安卓粉注意！上百款免費應用程式暗藏「進化版」惡意廣告，個資恐遭竊取
https://3c.ltn.com.tw/news/37301

用戶拒授權無用！逾千Android程式 繞後門存取用戶資料
http://www.limedia.tw/tech/7084/

谷歌挖出iMessage新漏洞運行舊系統的iPhone只能重置修復
http://bit.ly/32ak885

華為作業系統易被駭「鴻蒙」遭檢出多項漏洞
https://news.cnyes.com/news/id/4353528

華為作業系統「鴻蒙」　遭義大利網路資安公司點出多項漏洞
https://www.ettoday.net/news/20190709/1485715.htm

鴻蒙作業系統還未推出，資訊安全公司就發現 3 個危險漏洞
https://technews.tw/2019/07/09/huawei-os-information-security/

如何辨識手機內假應用程式?安裝應用程式前後須留意的事項
https://blog.trendmicro.com.tw/?p=61015

Swascan scopre criticità anche su Huawei
https://www.swascan.com/it/huawei-2/

新青年社交APP伴伴存在源代碼洩露漏洞[T00ls-2019-00073]
https://www.t00ls.net/Vuls-T00ls-2019-00073.html

市議員批台中購物節APP漏洞百出 市府：將儘速調整
https://www.chinatimes.com/realtimenews/20190710003631-260405?chdtv

台中購物節開跑 議員：APP漏洞百出 恐洩個資
https://udn.com/news/story/7325/3921759?from=udn-catebreaknews_ch2

港人「空投」傳訊息 突破中共防火牆
http://bit.ly/2xDLViT

信用卡智能還款App暗藏風險專家：套現本身違法違規
http://www.sohu.com/a/326074773_362042?scm=0.0.0.0

中國公司暗黑行動潛入手機 App 清單，掉包 App 賺取廣告費
https://technews.tw/2019/07/11/china-company-seek-into-app-list-on-phone-and-switching-app-for-ad-profit/

有竊聽疑慮，蘋果暫停 Apple Watch 對講機 App 服務
https://www.eprice.com.tw/mobile/talk/4503/5369977/1/

下載逾五萬次的Android遊戲,暗中竊取 Facebook 和 Google 登入憑證
https://blog.trendmicro.com.tw/?p=61146

如何辨識手機內假應用程式?安裝 APP 前後須留意的事項
https://blog.trendmicro.com.tw/?p=61015

These are the sneaky new ways that Android apps are tracking you
https://www.fastcompany.com/90372033/these-are-the-sneaky-new-ways-that-android-apps-are-tracking-you

50 Ways to Leak Your Data: An Exploration of Apps’ Circumvention of the Android Permissions System
https://www.ftc.gov/system/files/documents/public_events/1415032/privacycon2019_serge_egelman.pdf

Adware Campaign Identified From 182 Game and Camera Apps on Google Play and Third-Party Stores Like 9Apps
http://bit.ly/30ii24i

Symantec Mobile Threat Defense: A Snapshot of Mobile Security Incidents in Q2 2019
https://www.symantec.com/blogs/product-insights/symantec-mobile-threat-defense-snapshot-mobile-security-incidents-q2-2019

Over 150 Fake Jio Android Apps Offer Free Data but Deliver Only Ads
https://www.symantec.com/blogs/threat-intelligence/malicious-android-apps-india-jio

How to update apps on your smartphone
https://www.kaspersky.com/blog/how-to-update-ios-android-apps/27541/

Samsung Galaxy S10 update is causing huge problems for some users
https://www.zdnet.com/article/samsung-galaxy-s10-update-is-causing-huge-problems-for-some-users/#ftag=RSSbaffb68

C.事件 / 駭客 / DDOS / APT / 雲端/暗網/徵才 / 國際資安事件
領略 WCTF 2019 | 各國駭客豪情碰撞，「網路安全世界大戰」一觸即發
http://bit.ly/2Xp6Y3r

【HITCON CMT 2019 售票】票價變更通知
https://blog.hitcon.org/2019/07/hitcon-2019-cmt-regedit.html?m=1

2019年7月8日午，某駭客攻克小付钱包信息管理平台-内蒙古
http://www.fangongheike.com/2019/07/201978.html

谷歌、臉書乖乖把錢匯入「他的」帳戶 >>東歐駭客「代收」廣達38億驚奇
http://bit.ly/2LgXzcw

糗！美國四名高中生因自動 Wifi 登入，惡意噴漆被抓包
https://www.inside.com.tw/article/16874-police-get-mischief-students-via-free-wifi

東歐駭客「代收」廣達38億驚奇
https://magazine.chinatimes.com/wealth/20190711002883-300205

藉電訊取用電腦罪 IT業憂變「萬能Key」
http://bit.ly/2LdmVI9

2018年網攻猖獗 全球損失逾1.4兆
https://summit.rti.org.tw/news/view/id/2026884

全球3成VPN業者被中資掌控 網民翻牆恐被監控
https://www.cna.com.tw/news/acn/201907090332.aspx

調查指出：世界百大 VPN 中，29 項為六家中國公司所持有
https://www.inside.com.tw/article/16840-Top-VPNs-secretly-owned-by-Chinese-firms

別挑錯！翻牆未必安全 全球主要VPN公司近3成在中國
https://news.ltn.com.tw/news/world/breakingnews/2846658

Ubuntu Linux發行商Canonical的官方GitHub帳號被駭
https://www.ithome.com.tw/news/131721

Firefox拒絕信任安全廠商DarkMatter發的憑證，理由是該公司協助政府監控民眾
https://www.ithome.com.tw/news/131770

駭死妳！ 宅男竊女網友性愛照恐嚇50萬元
https://www.chinatimes.com/realtimenews/20190708001664-260402?chdtv

駭客追女網友被打槍 竟駭入雲端竊取性愛影片勒索50萬元
https://news.ltn.com.tw/news/society/breakingnews/2846066

中駭客連你電話都聽？他呼叫電信公司
https://reurl.cc/4VZ4K

大家都還好嗎？林昶佐憂中國駭客入侵電信公司情資
https://newtalk.tw/news/view/2019-07-08/269761

闇黑部隊入侵 無聲的國安危機
https://www.wealth.com.tw/home/articles/21383

台灣部隊 靠「駭客學」挺進世界杯
https://www.wealth.com.tw/home/articles/21385

防範藏在細節的闇黑部隊 員工是最重要的防火牆
https://www.wealth.com.tw/home/articles/21386

不甩美國警告 阿根廷接受中國公司安裝監控設備
https://news.ltn.com.tw/news/world/breakingnews/2845602

中製無人機 美國會要軍方禁購
https://ec.ltn.com.tw/article/paper/1301626

最高219年徒刑！台裔教授涉嫌盜取美國晶片轉賣中國
https://n.yam.com/Article/20190708418453

英國智庫起底!百名華為員工有軍方背景
https://www.ustv.com.tw/UstvMedia/news/109/20190708A128

華為「紅色」員工 證實與攻擊西方企業駭客和間諜掛勾
https://news.ltn.com.tw/news/world/breakingnews/2846864

美網安公司再揭華為：漏洞遍及整個產品線
https://www.ntdtv.com/b5/2019/07/08/a102617683.html

川普只是口頭放過華為？美司法部要求法院駁回華為控告美政府訴訟案
https://www.cmmedia.com.tw/home/articles/16390

美反間諜官員﹕華為5G反映中共野心
http://bit.ly/2RZYONI

華為駐外代表前妻 揭華為與中共政府關係
http://www.epochtimes.com/b5/19/6/24/n11343615.htm

因應華為間諜風險 歐盟年底前將採取集體措施
https://ec.ltn.com.tw/article/breakingnews/2849859

加拿大國會議員被警告：不要使用微信
http://www.secretchina.com/news/b5/2019/07/09/899703.html?code=b5

美國會瞄準中國製無人機 擬禁軍方購買
https://ec.ltn.com.tw/article/breakingnews/2845216

巴西成為國際駭客攻擊的目標
http://bit.ly/2XtaFoN

還以顏色？伊朗疑似升高對美網攻
https://www.ydn.com.tw/News/343122

德國工業區網速慢 經濟被「拖後腿」
http://bit.ly/2YCuxHm

防洩密 印度陸軍禁加入社群平台大型群組
https://www.cna.com.tw/news/aopl/201907090129.aspx

「敵國」圖分裂友邦 英外相令徹查密電洩露案
https://udn.com/news/story/6809/3918505

美國網路犯罪手段猖獗 各地政府損失逾1.4兆
http://bit.ly/2YM3Dg2

大疆無人機 罕見通過美審核
https://www.chinatimes.com/newspapers/20190711000100-260309?chdtv

葡國駭客揚言為公義　要搞死C朗
https://hk.on.cc/hk/bkn/cnt/sport/20190707/bkn-20190707110255519-0707_00882_001.html

美軍「網路旗」演習 強化網戰攻防
https://www.ydn.com.tw/News/343688

JPL探測火星資料遭駭 一年後才發現
https://udn.com/news/story/6812/3889560

網攻猖獗 全球2018年損失逾1.4兆
http://www.ksnews.com.tw/index.php/news/contents_page/0001282780

上萬億美元！這就是網路攻擊惹的禍
https://news.sina.com.tw/article/20190701/31815902.html

想癱瘓飛彈系統 美網攻伊朗失敗
https://udn.com/news/story/11314/3890732

美國網戰司令部發布警告，指有網軍透過 Outlook 老舊漏洞進行駭侵
https://www.twcert.org.tw/subpages/securityInfo/securitypolicy_details.aspx?id=888

伊朗暗示若美國解除制裁 願意協商新的讓步措施
https://udn.com/news/story/6811/3890416

避免台灣人被中國信用評分 先從禁用中國監控系統開始
https://talk.ltn.com.tw/article/breakingnews/2850480

Magento Killer
https://blog.sucuri.net/2019/07/magento-killer.html

Hackers breach Canonical GitHub account, create repositories, leave source code untouched
http://bit.ly/2G9FJnI

Wipe Away the Threat of Wiper Attacks
https://www.bankinfosecurity.com/wipe-away-threat-wiper-attacks-a-12727

NHS warned to act now to keep hackers at bay
https://www.welivesecurity.com/2019/07/03/nhs-warning-avoid-wannacryptor/

Pentagon losing recruiting battle for cybersecurity expertise
https://www.stripes.com/news/us/pentagon-losing-recruiting-battle-for-cybersecurity-expertise-1.589708

OpenPGP experts targeted by long-feared ‘poisoning’ attack
https://nakedsecurity.sophos.com/2019/07/05/openpgp-experts-targeted-by-long-feared-poisoning-attack/

Canonical GitHub account hacked, Ubuntu source code safe
https://www.zdnet.com/article/canonical-github-account-hacked-ubuntu-source-code-safe/#ftag=RSSbaffb68

Croatian government targeted by mysterious hackers
https://www.zdnet.com/article/croatian-government-targeted-by-mysterious-hackers/#ftag=RSSbaffb68

Ubuntu-Maker Canonical’s GitHub Account Gets Hacked
https://thehackernews.com/2019/07/canonical-ubuntu-github-hacked.html

Brazilians report lack of cybersecurity skills
https://www.zdnet.com/article/brazilians-report-lack-of-cybersecurity-skills/#ftag=RSSbaffb68

Dropbox: Fedora installation instructions fetch repo and validation key from insecure source, allowing mitm attack
https://vulners.com/hackerone/H1:638250?utm_source=rss&utm_medium=rss&utm_campaign=rss

Inside the NIST team working to make cybersecurity more user-friendly
https://www.helpnetsecurity.com/2019/07/11/nist-cybersecurity/

A Simple Configuration Mistake Caused GE Aviation Server To Leak Passwords and Sensitive Files
http://bit.ly/2XI4xcr

Magecart駭客集團新手法，專找配置錯誤的Amazon S3儲存貯體植入惡意程式
https://www.ithome.com.tw/news/131816

Magecart Hackers Infect 17,000 Sites Through Misconfigured Amazon S3 Buckets
https://thehackernews.com/2019/07/magecart-amazon-s3-hacking.html

Spray and Pray: Magecart Campaign Breaches Websites En Masse Via Misconfigured Amazon S3 Buckets
https://www.riskiq.com/blog/labs/magecart-amazon-s3-buckets/

Magecart group compromises 17,000 domains by overwriting Amazon S3 buckets
https://www.scmagazine.com/home/security-news/magecart-group-compromises-17000-domains-by-overwriting-amazon-s3-buckets/

資深系統工程師-資安產品
https://www.104.com.tw/job/6o0q9

前端設計師
https://www.104.com.tw/job/6o02g

資安經理
https://www.104.com.tw/job/6nbzr

資安工程師
https://www.104.com.tw/job/3fanf

兆豐銀招大數據人員暨資訊人員 薪含午膳費上看48K
https://www.1111.com.tw/news/jobns/124519/

供應鏈業務管理師
https://www.104.com.tw/job/6o6qi

數據分析師
https://www.liepin.com/job/1920264507.shtml

D.資料外洩/個資法/GDPR/網路詐騙/網路釣魚/盜刷/假新聞
Virgil Abloh 本人 Instagram 帳號遭駭客入侵
https://hypebeast.com/zh/2019/7/virgil-abloh-instagram-hacked

約會應用程式 Jack’d 因隱私問題遭罰 24 萬;《財星 100 大》企業資料外洩,皆因安全措施不當的 AWS S3 伺服器導致
https://blog.trendmicro.com.tw/?p=61125

5大網路業者發布防制不實訊息自律準則
http://bit.ly/2YKCJW9
https://www.tahr.org.tw/sites/default/files/u87/190621_disinformation_code_of_practice_taiwan.pdf

資安研究單位指出，Email 仍是最主要的駭侵攻擊目標
https://blog.twnic.net.tw/2019/07/11/4219/

Google證實　雇用專人聽取裝置錄下的內容
https://www.cw.com.tw/article/article.action?id=5095970

詐騙新手法！簽支票才能借錢 一毛未得就欠債
https://news.ltn.com.tw/news/society/breakingnews/2837018

冒充聯邦法警「你未出席陪審團，繳錢消災」 詐財電話出新招
http://bit.ly/2XETLsh

卑詩商譽局提醒公眾留意冒稱銀行調查員的行騙手法
http://bit.ly/2XCt6ra

假鈔詐騙猖獗 苑裡人當心
http://bit.ly/2XBOOjG

「鑽線上服務漏洞」每次只騙1.99元 信用卡盜刷新手法
http://bit.ly/2JoFoyh

四川警方打掉一特大網路詐騙團伙
https://news.sina.com.tw/article/20190705/31859834.html

樂山打掉兩個網路賭博團伙 涉案賭資流水過億元
https://news.sina.com.tw/article/20190630/31799480.html

廣州工行協助警方堵截198萬涉案資金
https://news.sina.com.tw/article/20190705/31859244.html

電信詐騙「降魔之困」：高科技作案 老手段破案
https://news.sina.com.tw/article/20190704/31845990.html

提供人頭帳戶給詐騙集團使用 兩女吃官司
https://udn.com/news/story/7321/3915833

特大網路賭博平台滲透國內：年賭額為彩票收入兩倍
https://news.sina.com.tw/article/20190708/31885070.html

「最大罌粟花」侵入 特大國際網路賭博平台滲透國內
https://news.sina.com.tw/article/20190708/31883588.html

身分竊盜招數多 須常查看帳戶明細防詐
https://udn.com/news/story/6813/3920753

兩岸網路地下匯兌13億 警扣嫌資產
http://bit.ly/2Lfyi2u

台網站換匯人民幣 6年13億台幣流中國大陸
https://udn.com/news/story/7315/3918436

刑事局南打破獲網路地下匯兌 逮3嫌扣押3千多萬資產
https://news.ltn.com.tw/news/society/breakingnews/2846899

河南衛輝警方打掉一倒賣個人信息犯罪團伙
https://news.sina.com.tw/article/20190629/31796588.html

曾雅蘭、藍心湄遭盜圖賣商品 刑事局揭典型詐騙廣告
http://bit.ly/2xFvrqN

趁亂偷包！2男買點數　半小時盜刷1萬5千
https://news.tvbs.com.tw/local/1157033

我們常見信用卡詐騙主要是類型
https://read01.com/mzQyyDP.html#.XSat3ugzbIU

身分竊盜招數多 須常查看帳戶明細防詐
https://udn.com/news/story/6813/3920753

黑客侵香港私營醫療中心 7000病人資料恐外泄
http://bit.ly/2NOlh1N

社群網路一頁式廣告有詐 警公布6大破解訣竅防詐
https://news.ltn.com.tw/news/society/breakingnews/2844166

陸人力銀行員工盜賣16萬用戶個資 每份23元
https://money.udn.com/money/story/5603/3917960

英航38萬客戶個資被駭 遭判罰近3億美元
https://www.rti.org.tw/news/view/id/2026639

五十萬旅客個資遭駭客竊取 英航遭重罰2.3億美元
http://bit.ly/2xN2h9j

英國GDPR重罰再出手，萬豪國際因資料外洩遭罰9900萬英鎊
https://www.ithome.com.tw/news/131759

想靠網戀結束單身？你可能落入了「殺豬盤」陷阱
https://news.sina.com.tw/article/20190706/31877242.html

收到了微信支付關於XXE漏洞的郵件
https://developers.weixin.qq.com/community/develop/doc/0006e428458a38452cd84d40856000

EA遊戲平台漏洞恐洩用戶資料　股價挫逾
https://hk.on.cc/hk/bkn/cnt/finance/20190705/bkn-20190705231921625-0705_00842_001.html

峇厘島超商ATM盜領氾濫！專家傳授2點避免被詐
https://news.ebc.net.tw/News/business/169217

165反詐騙專線與Whoscall整合詐騙來電大數據 警民合作當反詐門神
https://times.hinet.net/news/22447130

美英5眼聯盟示警 8大情治系統個資遭中國掌控
http://bit.ly/2L5cXZl

59萬公務人員個資外洩 監委申請調查
https://udn.com/news/story/6656/3920942

59萬筆公務員個資外洩 台專家：問題嚴重
http://www.epochtimes.com/b5/19/7/5/n11365860.htm

59萬筆公務個資外洩 政院：媒體相關臆測非事實
https://udn.com/news/story/6656/3910761

銓敘部公務員個資外洩 政院資安處：立案偵辦中
https://cn.rti.tw/news/view/id/2026269

文官個資外洩因境外攻擊 手法近似中國特定網軍
https://www.cna.com.tw/news/firstnews/201907030101.aspx

政院：文官個資外洩已立案偵辦 外界臆測非事實
https://taronews.tw/2019/07/05/392231/

點開網頁瞬間被竊取隱私！訪客手機號碼被賣1元1條
https://reurl.cc/vRy2j

英國航空洩露個資，遭ICO開罰2.3億美元
https://reurl.cc/yVy06

奇異航空的Jenkins伺服器沒鎖，原始碼及密碼都曝光
https://www.ithome.com.tw/news/131740

男子被同事冒名辦信用卡欠款11萬筆跡鑑定還原真相
http://m.ce.cn/sh/sgg/201907/08/t20190708_32554857.shtml

萬豪酒店3億客戶個資外洩 衰吞9920萬英鎊重罰
https://newtalk.tw/news/view/2019-07-10/270640

中國大陸教育部發佈預警：警惕電信和「校園貸」詐騙
https://news.sina.com.tw/article/20190711/31926686.html

抽iPhone誘導填個資 警：趕快到銀行換卡
https://udn.com/news/story/7321/3908054?from=udn-ch1_breaknews-1-cate2-news

個資被駭被重罰！英國開鍘英航71億元、萬豪39億元
http://www.limedia.tw/tech/7360/

MongoDB Database Exposed 188 Million Records: Researchers
https://www.bankinfosecurity.com/mongodb-database-exposed-188-million-records-researchers-a-12769

Report: Detailed personal records of 188 million people found exposed on the web
https://www.comparitech.com/blog/vpn-privacy/188-million-data-breach/

Data leak costs £183 million
https://www.kaspersky.com/blog/british-airways-fined/27580/

Facebook transfer of data from EU to US shores argued in European high court
https://www.zdnet.com/article/legal-battle-challenging-facebook-transfer-of-eu-data-to-us-shores-reaches-european-high-court/#ftag=RSSbaffb68

GE Aviation exposed internal configs via open Jenkins instance
https://securitydiscovery.com/ge-aviation-exposed/

Vulnerabilities Found in Yet Another Government Website
https://www.bankinfosecurity.asia/vulnerabilities-found-in-yet-another-government-website-a-12724

Summer Scam Alerts: Don’t Let Crooks Wreck Your Family Travel Plans
https://securingtomorrow.mcafee.com/consumer/family-safety/summer-scam-alerts-dont-let-crooks-wreck-your-family-travel-plans/

British Airways Faces Record-Setting $230 Million GDPR Fine
https://www.bankinfosecurity.com/british-airways-faces-record-setting-230-million-gdpr-fine-a-12743

Over 90 Million Records Leaked by Chinese Public Security Department
https://www.bleepingcomputer.com/news/security/over-90-million-records-leaked-by-chinese-public-security-department/

Report: Fieldwork Software Leaks Sensitive Customer Data
https://www.vpnmentor.com/blog/report-fieldwork-leak/

Fieldwork Software database leak exposed sensitive SMB records, customer credit card details
https://www.zdnet.com/article/fieldwork-software-database-exposed-full-credit-card-details-of-business-customers/#ftag=RSSbaffb68

FBI, ICE plunder DMV driver database ‘gold mine’ for facial recognition scans
https://www.zdnet.com/article/fbi-and-ice-are-using-dmv-gold-mine-for-facial-recognition-scans/#ftag=RSSbaffb68

British Airways Fined £183 Million Under GDPR Over 2018 Data Breach
https://thehackernews.com/2019/07/british-airways-breach-gdpr-fine.html

Estonia's new e-residency security focus: 'You can't launder money with a digital ID'
https://www.zdnet.com/article/estonias-new-e-residency-security-focus-you-cant-launder-money-with-a-digital-id/#ftag=RSSbaffb68

Hackers breached Greece's top-level domain registrar
https://www.zdnet.com/article/hackers-breached-greeces-top-level-domain-registrar/#ftag=RSSbaffb68

UK’s data watchdog hands out two mega-fines for breaches
https://www.welivesecurity.com/2019/07/09/ico-fines-breaches-british-marriott/

Gone phishing: Why summer brings increased security threats to the enterprise
https://www.techrepublic.com/article/gone-phishing-why-summer-brings-increased-security-threats-to-the-enterprise/

Premera Signs $10 Million Breach Settlement With 30 States
https://www.bankinfosecurity.com/premera-signs-10-million-breach-settlement-30-states-a-12772

E.研究報告
善用Apache MPM工作模式　徹底發揮主機硬體效能 開源httperf壓力測試　調出伺服器最佳服務效能
https://www.netadmin.com.tw/netadmin/zh-tw/technology/79EE785099FF4659A813C710D92834D8

提升 WordPress 安全性，防止駭客入侵網站的 12 個方法（2019）
https://networker.tw/wordpress-security/

手動挖掘漏洞(一)輸入框未加過濾引發漏洞利用
https://www.cnblogs.com/Tempt/p/11147499.html

Mozilla火狐瀏覽器中的一個Use-After-Free漏洞分析
https://xz.aliyun.com/t/5569

CVE-2019-0863漏洞分析
https://xz.aliyun.com/t/5571

分析：HackerOne的安全漏洞報告導致門羅幣價格大跌
https://xcong.com/lives/1547167

阿里“內核漏洞檢測方法”入選國際學術頂會，尚不開源
http://tech.ifeng.com/a/20190705/45609730_0.shtml

CVE-2019-9041: 從CSRF到Getshell漏洞分析
http://www.sohu.com/a/325432735_354899

使用Adidnsdump轉儲Active Directory DNS
https://www.freebuf.com/articles/network/206897.html

WebLogic XMLDecoder 漏洞分析
https://www.freebuf.com/column/207849.html

Jenkins任意文件讀取（CVE-2018-1999002）漏洞分析
https://www.freebuf.com/column/207844.html

CVE-2017-12615漏洞復現
https://xz.aliyun.com/t/5610

淺談: 建立安全成熟度模型
https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=8737

一款輕量級Web漏洞教學演示系統（DSVW）
http://www.wu45.com/post/4382.html

Bypassing Web Application Firewalls with HTTP Parameter Pollution
https://www.exploit-db.com/docs/47082

Coding a remote screenshot sending malware
https://medium.com/@gnsrikanth/coding-a-remote-screenshot-sending-malware-feea50b8bf8

Whonix : Privacy Protection, Anonymity Online, Anonymous Operating System
https://kalilinuxtutorials.com/whonix-privacy-protection/

Remote tech support, yet another risk factor for business
https://www.kaspersky.com/blog/dangerous-remote-access/27538/

Windows zero‑day CVE‑2019‑1132 exploited in targeted attacks
https://www.welivesecurity.com/2019/07/10/windows-zero-day-cve-2019-1132-exploit/

Meet the ‘Gift Cardsharks’ Behind the Massive Campaign Targeting Victims with Commercially Available Tools
https://www.riskiq.com/blog/external-threat-management/giftcard-sharks/

Using Whitelisting to Remediate an RCE Vulnerability (CVE-2019-2729) in Oracle WebLogic
http://bit.ly/2xtl3lQ

See the Unseen in AWS Mirrored Traffic With the VM-Series
https://blog.paloaltonetworks.com/cloud-see-unseen-aws-mirrored-traffic-vm-series/

Getting Started with Cloud Governance
https://securingtomorrow.mcafee.com/business/cloud-security/getting-started-with-cloud-governance/

Fake jquery campaign leads to malvertising and ad fraud schemes
https://blog.malwarebytes.com/threat-analysis/2019/06/fake-jquery-campaign-leads-to-malvertising-and-ad-fraud-schemes/

GreenFlash Sundown exploit kit expands via large malvertising campaign
https://blog.malwarebytes.com/threat-analysis/2019/06/greenflash-sundown-exploit-kit-expands-via-large-malvertising-campaign/

Recipe for success: tech support scammers zero in via paid search
https://blog.malwarebytes.com/tech-support-scams/2019/06/recipe-for-success-tech-support-scammers-zero-in-via-paid-search/

HACKER LEXICON: WHAT IS CREDENTIAL DUMPING
https://www.wired.com/story/hacker-lexicon-credential-dumping/

How to enable DNS-over-HTTPS (DoH) in Firefox
https://www.zdnet.com/article/how-to-enable-dns-over-https-doh-in-firefox/#ftag=RSSbaffb68

Mozilla: No plans to enable DNS-over-HTTPS by default in the UK
https://www.zdnet.com/article/mozilla-no-plans-to-enable-dns-over-https-by-default-in-the-uk/#ftag=RSSbaffb68

Coding a remote screenshot sending malware
https://medium.com/@gnsrikanth/coding-a-remote-screenshot-sending-malware-feea50b8bf8

F.商業
亞利安攜手原廠夥伴，助用戶落實資安法、提升威脅防禦能量
https://ithome.com.tw/pr/131679

數位媒體偷渡機密資訊　資安鑑識把守最後關卡 破解資訊隱藏伎倆　力阻數位影像藏密外流
https://www.netadmin.com.tw/netadmin/zh-tw/technology/C97145B13825464CB1F293223D009A7B

奧義智慧研發資安人工智慧引擎，從端點到全球網路快速防護
https://technews.tw/2019/07/08/cycarrier-developed-an-ai-engine-with-forensic-platform-to-provide-security-from-endpoints-to-global-networks/

微軟：如果你兩年內沒有登入微軟帳號，帳號將會自動刪除並且不會發送提醒郵件
https://www.techbang.com/posts/71371-microsoft-says-that-if-you-dont-log-in-to-your-microsoft-account-in-two-years-the-account-will-be-automatically-deleted-and-no-reminder-emails-will-be-sent

解析惡意郵件威脅指標　提升資安防護 眾至自建團隊　累積在地化情資
https://www.netadmin.com.tw/netadmin/zh-tw/market/9C3E2EA5EA2944F69FFD7494B09B3F4A

穆迪公司和Team8成立合資公司以制定全球網路風險標準
https://times.hinet.net/topic/22438194

趨勢科技率先利用 AWS Transit Gateway，提供高效能在線式網路資安防護，協助簡化並有效率解決企業在應用程式移轉至雲端時的網路資安需求
http://www.pcdiy.com.tw/detail/13470

McAfee準備重新上市
https://www.ithome.com.tw/news/131791

McAfee plots return to public markets with IPO
https://www.zdnet.com/article/mcafee-plots-return-to-public-markets-with-ipo/

Dashboards to Use on Palo Alto Networks for Effective Management
https://thehackernews.com/2019/07/log-management-analysis.html

Cynet Launches Free Offering For Incident Response Service Providers
https://thehackernews.com/2019/07/cynet-incident-response.html

Microsoft enhances OneDrive to secure your sensitive files
https://www.welivesecurity.com/2019/06/27/microsoft-onedrive-personal-vault-files/

Review: XM Cyber HaXM makes automated penetration testing more accessible, reliable
https://www.csoonline.com/article/3406464/review-xm-cyber-haxm-makes-automated-penetration-testing-more-accessible-reliable.html

Hackers' Operating System Kali Linux Released for Raspberry Pi 4
https://thehackernews.com/2019/07/kali-linux-raspberry-pi-4.html

Microsoft adds new 'passwordless' sign-in option with latest Windows 10 20H1 test build
https://www.zdnet.com/article/microsoft-adds-new-passwordless-sign-in-option-with-latest-windows-10-20h1-test-build/#ftag=RSSbaffb68

Microsoft is closing its Remix3D.com site early next year
https://www.zdnet.com/article/microsoft-is-closing-its-remix3d-com-site-early-next-year/#ftag=RSSbaffb68

Microsoft is reorging its field sales team, laying off some 'Modern Desktop' salespeople
https://www.zdnet.com/article/microsoft-is-reorging-its-field-sales-team-laying-off-some-modern-desktop-salespeople/#ftag=RSSbaffb68

Microsoft stirs suspicions by adding telemetry files to security-only update
https://www.zdnet.com/article/microsoft-stirs-suspicions-by-adding-telemetry-files-to-security-only-update/#ftag=RSSbaffb68

G.政府
不信任公部門？打假…為何越打越反感
https://udn.com/news/story/11311/3912764

傳鎖定網站清查假訊息影響大選 調查局澄清
https://udn.com/news/story/7321/3912934

內政部：數位身分證將結合自然人憑證，明年10月換發
https://www.ithome.com.tw/news/131711

晶片身分證明年十月將發行，上路倒數前3大疑慮待解
https://www.techbang.com/posts/71385-chip-id-will-be-released-in-october-top-3-doubts-to-be-resolved

「國安五法」完成 蔡英文:續拚「中共代理人」修法
http://bit.ly/32cwxZ4

台月底公布危害資安產品清單　華為中興料被禁
https://hk.on.cc/hk/bkn/cnt/cnnews/20190707/bkn-20190707154016375-0707_00952_001.html

誤送開山里登革熱警示傳損千萬 疾管署：免費發送
https://www.cna.com.tw/news/firstnews/201907095006.aspx

危害國家資安產品清單 擬7月底公布
https://www.cna.com.tw/news/aipl/201907070033.aspx

發布核定具證券性質之虛擬通貨為證券交易法所稱之有價證券之令。(金管證發字第1080321164號)
https://reurl.cc/j0M3p

金管會公布系統性銀行名單，上榜銀行面臨增資壓力
https://finance.technews.tw/2019/07/08/the-fsc-announces-a-list-of-systemic-banks-and-the-listed-banks-are-facing-pressure-to-increase-capital/

銀行資料上雲端哪些新規定？實地查核怎麼做？金管會雲端委外8大重點一次看
https://www.ithome.com.tw/news/131678

開發App，請依「行政院及所屬各機關行動化服務發展作業原則」進行
https://inc.ntub.edu.tw/p/405-1011-69591,c4009.php?Lang=zh-tw

5G頻譜戰／清除路障 NCC有方案
https://reurl.cc/XnXgM

中共代理人修法為選舉？綠委反擊藍：中共滲透讓民眾產生亡國感
http://bit.ly/2Jln0HI

電子支付機構業務管理規則
http://www.rootlaw.com.tw/LawArticle.aspx?LawID=A040390040026700-1080702&ShowType=Ref&FLNO=20000

科技賄選？ 警方布線偵查行動支付、虛擬貨幣買票
https://news.ltn.com.tw/news/politics/breakingnews/2848979

大選查賄起跑 嚴查假消息、境外資金
https://news.ltn.com.tw/news/politics/paper/1302139

智慧巴士資通訊系統資安標準上路，產業防護再升級
http://www.ttia-tw.org/news.php?wshop=ttia&Opt=detailed&tp=News&lang=zh-tw&news_id=22654

亞矽執行中心參訪美NIST 強化雙邊連結
https://money.udn.com/money/story/5612/3923038

韓才稱不考量！高雄亞洲好玩卡爆中資
http://bit.ly/2LhkuVc

修正「南投縣政府資通安全處理小組設置及作業要點」第二點、第四點、第五點及第七點，並自即日生效
http://link.nantou.gov.tw/glrsout/NewsContent.aspx?id=967

前陸軍副司令劉湘濱：做好資訊戰 攻台戰爭就打不起來
https://news.ltn.com.tw/news/politics/breakingnews/2850206

H.ICS/SCADA 工控系統
研究人員發現醫療軟件漏洞將導致診斷結果有誤
http://bit.ly/2Jo9naI

美國醫院麻醉機、呼吸機現安全漏洞：極易遭遠程篡改
https://news.sina.com.tw/article/20190710/31919198.html

Researchers Disclose Vulnerability in Siemens' ICS Software
https://www.bankinfosecurity.in/researchers-disclose-vulnerability-in-siemens-ics-software-a-12765

Vulnerabilities found in GE anesthesia machines
https://www.zdnet.com/article/vulnerabilities-found-in-ge-anesthesia-machines/#ftag=RSSbaffb68

advantech -- webaccess CVE-2019-10989
https://nvd.nist.gov/nvd.cfm?cvename=CVE-2019-10989

advantech -- webaccess CVE-2019-10991
https://nvd.nist.gov/nvd.cfm?cvename=CVE-2019-10991

advantech -- webaccess CVE-2019-10993
https://nvd.nist.gov/nvd.cfm?cvename=CVE-2019-10993

I.教育訓練
駭客的 Linux 基礎入門必修課 (Linux Basics for Hackers: Getting Started with Networking, Scripting, and Security in Kali)
https://www.tenlong.com.tw/products/9789865021993?list_name=c-linux

教你 使用 Windows 10 Sandbox 沙箱 功能，降低電腦中毒的機率
http://bit.ly/2XAN1vy

XXE漏洞學習
https://www.cnblogs.com/liqik/p/11167019.html

J.物聯網/IOT/人工智慧/車聯網/光聯網/深度學習/機器學習/無人機/人臉辨識
物聯網中自由、便利與安全的恐怖三角關係，您選擇了誰
https://www.allion.com.tw/article-cybersecurity-2/

機器學習：現代網路安全英雄
https://www.symantec.com/blogs/chinese-traditional/tw-machine-learning-modern-day-cyber-security-hero

2019台灣資安產業與IoT發展現況大公開
http://m.ccs-cbm.org.cn/kexue/7914.html

航拍機投射假路牌資訊 黑客爆自動駕駛系統漏洞
https://unwire.hk/2019/07/08/flickering-car-ghosts/life-tech/auto/

強化資安及深度學習，安控網路攝影機 AI 應用更上層樓
https://technews.tw/2019/07/08/strengthen-ai-application-of-ip-camera-by-cyber-security-and-deep-learning/

知名動畫，IOT資安恐攻議題
http://www.digorlon.com/home/post/928

暗網潛航——物聯網、勿聯網（中）
http://bit.ly/2LfOxg2

又是弱密碼惹的禍!Silex 一天就癱瘓數千台物聯網設備
https://blog.trendmicro.com.tw/?p=61131

Smart waste management system highlights potential for narrowband IoT deployments
https://www.zdnet.com/article/smart-waste-management-system-highlights-potential-for-narrowband-iot-deployments/#ftag=RSSbaffb68

Automated Peril: Researchers Hack 'Smart Home' Hubs
https://www.bankinfosecurity.com/automated-peril-researchers-hack-smart-home-hubs-a-12723

Two billion user logs leaked by smart home vendor
https://www.welivesecurity.com/2019/07/02/two-billion-logs-leaked-smart-home/

Israel warns of AI cyber-attacks by voice impersonating of senior executives
http://www.xinhuanet.com/english/2019-07/10/c_138212768.htm

Forescout Positioned For Growth In Burgeoning IoT/OT Security Market
https://www.forbes.com/sites/robertdefrancesco/2019/07/11/forescout-positioned-for-growth-in-burgeoning-iotot-security-market/

Hacked surveillance firm pitches NYC with invasive camera tech to track driver journeys
https://www.zdnet.com/article/hacked-surveillance-firm-pitches-nyc-with-ml-cameras-to-track-driver-journeys/

6.近期資安活動及研討會
HITCON HackDoor 駭入辦公室 7/2 ~ 9/28
https://www.accupass.com/event/1906050355291064968019

智慧金屬與物聯網資安座談會 7/15
https://seminars.tca.org.tw/D15e02242.aspx

【資安講座】企業電子郵件資安，釣魚郵件與郵件詐騙解析、最新防護技術發展，更新大家的資安知識 7/16
https://www.techbang.com/posts/70854-lecture-corporate-email-security

HackingThursday 固定聚會 7/18
https://www.meetup.com/hackingthursday/events/vkhnnqyzkbxb/

資安產學高峰論壇 7/18
https://www.accupass.com/event/1906140709596176666390

資安趨勢研討會 7/18
https://www.accupass.com/event/1906110041444881410360

第12屆台盧(森堡)經濟合作會議 7/19
http://registration.cieca.org.tw/visit/?d=74

5G+IoT美麗新世界的資安挑戰與機會研討會 7/18
http://iekweb2.iek.org.tw/IEKConf/Client/confinfo.aspx?mode=confinfo&conf_no=384953433

HackingThursday 固定聚會 7/25
https://www.meetup.com/hackingthursday/events/vkhnnqyzkbhc/

新加坡資安市場解密講座: 台灣資安浴血東南亞叢林戰鬥之起點-獅城站​ 7/26
https://ievents.iii.org.tw/eventS.aspx?t=0&id=547

2019扭轉資安營運研討會 7/26
https://www.netfos.com.tw/event/2019event/20190726netfos/20190726-NETFOS-seminar-reg.html

CDX2.0推廣活動 - 台南場次 7/26
https://nchc-cdx.kktix.cc/events/cdxactivity-0726

Agile Hsinchu 七月聚會: 當領域驅動上了雲 7/27
https://agilecommtw.kktix.cc/events/dddcloud

The Virus Bulletin Conference 2019 8/1
https://www.virusbulletin.com/blog/2019/06/free-vb2019-tickets-students/

資安事故處理實務課程 8/7 ~ 8/8
http://bit.ly/2VW0Lv9

DEF CON 27 2019/8/8–8/11
https://www.defcon.org/

大數據軟體開發平台與AI(人工智慧)開發應用案例 8/9
https://edu.nchc.org.tw/course/one_course_introduction.asp?lms_auto_course_id=3805&from_course_list_url=homepage

數位鑑識處理實務 8/14 ~ 8/15
http://bit.ly/2VW0Lv9

108 年度臺灣學術網路危機處理中心資安巡迴研討會 -資安趨勢暨網路安全概要 8/19 ~ 8/27
http://www.hssh.tp.edu.tw/ezfiles/1/1001/attach/42/pta_17520_7551835_06329.pdf

台灣駭客年會 HITCON Summer Training 2019 - 學生報名 2019-08-19 ~ 2019-08-22
https://www.accupass.com/event/1906050919271598677460

ￜYahoo奇摩電商專題講座ￜ 我們與詐騙的距離_電商不可承受的資安之重 8/21
https://www.accupass.com/event/1906120307261445013215

WEB應用滲透測試 8/21 ~ 8/23
https://www.accupass.com/event/1904080221358963463590

台灣駭客年會 HITCON Community 2019 2019-08-23(五) 09:00 ~ 2019-08-24(六) 17:00 (GMT+8)
https://www.accupass.com/event/1906040921594609934250

數位政府高峰會 2019 8/28
https://egov.ithome.com.tw/

ModernWeb 19 8/28 ~ 8/29
https://modernweb.tw/

資安法規與制度研析課程－108年度「資安人才培訓及國際推展計畫－資安專業人才培育深化課程」 8/29 ~ 8/30
http://www.cisanet.org.tw/News/activity_more?id=MTQzMw==

108年資安職能訓練-行動裝置安全(8/29-8/30)
https://cee.ksu.edu.tw/recruitinfo/1443.html

2019 NGO 資安種子講師訓練 8/29
https://ocftw.kktix.cc/events/cscs2019tot

交通大學亥克書院-B022:基礎網頁安全與滲透測試<新竹場次> 9/7
https://hackercollege.nctu.edu.tw/?p=1079

【AWS資安】Security Engineering on AWS​高級課程 9/9 ~ 9/11
https://www.accupass.com/event/1905150854571147685105

CDX2.0推廣活動 - 台北場次 9/10
https://nchc-cdx.kktix.cc/events/cdxactivity-0910

Kubernetes Sumｍit 9/11
https://summit.ithome.com.tw/kubernetes/

交通大學亥克書院-A011:入侵行為發覺與應變指南 9/21
https://hackercollege.nctu.edu.tw/?p=1082

TANET 2019 - 臺灣網際網路研討會 9/25
https://www.twcert.org.tw/subpages/securityInfo/securityactivity_details.aspx?id=310

交通大學亥克書院-B022:基礎網頁安全與滲透測試 9/28
https://hackercollege.nctu.edu.tw/?p=1084

HITB+ CYBER WEEK 2019/10/12 ~17
https://d2p.hitb.org/

交通大學亥克書院-A006:數位足跡追蹤與分析 10/19
https://hackercollege.nctu.edu.tw/?p=1088

Splunk .conf 19 10/21 ~ 10/24
https://conf.splunk.com/

AIoT智能物聯網開發人才就業養成班[免費諮詢] 10/22
https://ittraining.kktix.cc/events/aiot-training-2019

Industrial Control Systems (ICS) Cyber Security Conference USA October 21 – 24, 2019
https://www.icscybersecurityconference.com

交通大學亥克書院-A015:進階網頁滲透測試 10/26
https://hackercollege.nctu.edu.tw/?p=1090

交通大學亥克書院-P006:高階網頁滲透測試 11/16
https://hackercollege.nctu.edu.tw/?p=1092

交通大學亥克書院-B015:惡意程式檢測 11/30
https://hackercollege.nctu.edu.tw/?p=1098

交通大學亥克書院-A018:企業網域控管－Active Directory攻擊與防禦 12/14
https://hackercollege.nctu.edu.tw/?p=1094

Japan Security Analyst Conference
https://jsac.jpcert.or.jp/