漏洞 Vulnerability CVE-2021-43858：MinIO权限提升漏洞 https://nvd.nist.gov/vuln/detail/CVE-2021-43858 CVE-2021-45232: Apache APISIX Dashboard 未授权访问漏洞 https://lists.apache.org/thread/979qbl6vlm8269fopfyygnxofgqyn6k5 安全事件 Security Incident “蜘蛛侠：无路可归”盗版下载包含加密采矿恶意软件 https://thehackernews.com/2021/12/spider-man-no-way-home-pirated.html Dridex Omicron网络钓鱼者嘲讽covid-19葬礼援助热线号码 https://www.bleepingcomputer.com/news/security/dridex-omicron-phishing-taunts-with-funeral-helpline-number/ 盖瑞特无人值守金属探测器可以被远程黑客入侵 https://thehackernews.com/2021/12/garrett-walk-through-metal-detectors.html 来自深渊的招手——伪造为洛克希德·马丁工作机会的攻击活动剖析 https://mp.weixin.qq.com/s/834tMVCCH6UQe8zW0eEMSA