漏洞 Vulnerability 2021-04 补丁日: 微软多个高危漏洞通告 https://cert.360.cn/warning/detail?id=de378931b0221684b7561eb8a0ad7303 微软修复Exchange 多个蠕虫级远程命令执行漏洞 https://cert.360.cn/warning/detail?id=d9ffba241f99e8f045d2b787334c400f 2021-04 补丁日: Adobe 修复Photoshop组件高危漏洞 https://helpx.adobe.com/security.html/security/security-bulletin.ug.html Name:Wreck 多个 DNS 漏洞 https://www.forescout.com/research-labs/namewreck/ 安全事件 Security Incident 日本大型游戏公司Capcom遭遇勒索事件回顾 https://www.bleepingcomputer.com/news/security/capcom-ransomware-gang-used-old-vpn-device-to-breach-the-network/ Zero-day vulnerability in Desktop Window Manager (CVE-2021-28310) used in the wild https://securelist.com/zero-day-vulnerability-in-desktop-window-manager-cve-2021-28310-used-in-the-wild/101898/ BRATA恶意软件冒充Android安全扫描程序 https://thehackernews.com/2021/04/brata-malware-poses-as-android-security.html 500,000华为用户感染了Joker Android恶意软件 https://gbhackers.com/500000-huawei-users-infected-with-joker-android-malware/ 新的Linux，macOS恶意软件隐藏在假冒的Browserify NPM包中 https://www.bleepingcomputer.com/news/security/new-linux-macos-malware-hidden-in-fake-browserify-npm-package/