每日安全动态推送(8-1)

正文

请到「今天看啥」查看全文

• Crooks Bypassed Google’s Email Verification to Create Workspace Accounts, Access 3rd-Party Services:
https://krebsonsecurity.com/2024/07/crooks-bypassed-googles-email-verification-to-create-workspace-accounts-access-3rd-party-services/

・ Google最近解决了一个认证漏洞，允许攻击者绕过电子邮件验证步骤创建Google Workspace账户，并利用该漏洞冒充第三方服务的域持有人。 – SecTodayBot

• Unmasking the SMS Stealer: Targeting Several Countries with Deceptive Apps:
https://www.zimperium.com/blog/unmasking-the-sms-stealer-targeting-several-countries-with-deceptive-apps/

・ 研究人员发现的大规模针对安卓手机的短信窃取恶意软件活动 – SecTodayBot

请到「今天看啥」查看全文