今年4月底，360安全大脑监控到有黑客通过Weblogic漏洞为主的各类Web组件漏洞攻击服务器，植入sodinokibi勒索病毒（小蓝屏勒索病毒）。在这之后的几天内，黑客开始使用更多方式传播sodinokibi勒索病毒，扩大传播范围。该病毒还利用了cve-2018-8453 Windows内核提权漏洞，使病毒威力进一步加强。根据360安全大脑的监控，这一病毒近期在持续发起攻击，管理员和企业用户应该做好防范。
author: redrain@360CERT && attacker2001@360CERT
BlackHat 2016 saw the report on vulnerabilities in video services. The authors continued researching this area, and are going to tell about new vulnerabilities (logical and binary) and curious ways to exploit them. Look forward to hearing real stories about exploiting these vulnerabilities in bug bounty programs!
– via
在6月27日 hackerone 公开了一个关于FFmpeg本地文件泄漏的报告(https://hackerone.com/reports/243470) 该报告中描述为25日公开的另一个FFmpeg本地文件泄漏相关(https://hackerone.com/reports/242831)。该漏洞@Emil Lerner和@Pavel Cheremushkin在今年的phdays conference中已经披露(https://www.slideshare.net/phdays/ss-76515896)。
360CERT团队第一时间对该安全问题跟进并将简单预警一个未公开的FFmpeg命令执行漏洞。
On Pwn2own 2017, macOS Sierra and Safari 10 from Apple were two of the platforms that have taken the highest number of hits. Though several other teams also successfully compromised or almost compromised the target macOS + Safari, 360Vulcan Team is the very one that exploited the least number of vulnerabilities. It is also the only team that realized sandbox escape through kernel exploit and obtained the system privilege to gain complete control over macOS kernel. In this article, we will share the exploitation techniques of how we successfully found and made use of the kernel vulnerability of macOS.
