NetSpectre greift ohne ausführbaren Schadcode an - zwar fließen nur wenige Bytes pro Stunde, aber ungeschützte Server und Storage-Systeme sind angreifbar.
http://heise.de/-4121831
State Govts. Warned of Malware-Laden CD Sent Via Snail Mail from China
Heres a timely reminder that email isnt the only vector for phishing attacks: Several U.S. state and local government agencies have reported receiving strange letters via snail mail that include malware-laden compact discs (CDs) apparently sent from China, KrebsOnSecurity has learned. This particular ruse, while crude and simplistic, preys on the curiosity ..
https://krebsonsecurity.com/2018/07/state-govts-warned-of-malware-laden-cd-sent-via-snail-mail-from-china/
Vulnerabilities
Bugtraq: [CORE-2018-0009] - SoftNAS Cloud OS Command Injection