漏洞 Vulnerability RedHat 安全更新 https://access.redhat.com/security/security-updates/ Linux kernel TIPC漏洞安全更新 https://github.com/torvalds/linux/commit/fa40d9734a57bcbfa79a280189799f76c88f7bb0 安全事件 Security Incident 针对中东知名网站的战略网络入侵攻击 https://www.welivesecurity.com/2021/11/16/strategic-web-compromises-middle-east-pinch-candiru/ 成人cam网站StripChat公开了数百万用户和cam模型的数据 https://securityaffairs.co/wordpress/124665/data-breach/adult-cam-site-stripchat-exposes-the-data-of-millions-of-users-and-cam-models.html 针对中东的ProxyShell相关攻击事件激增 https://www.trendmicro.com/en_us/research/21/k/analyzing-proxyshell-related-incidents-via-trend-micro-managed-x.html 以下是新的Emotet垃圾邮件活动，它们在全球范围内打击邮箱 https://www.bleepingcomputer.com/news/security/here-are-the-new-emotet-spam-campaigns-hitting-mailboxes-worldwide/ 伊朗政府支持的APT组织利用Microsoft Exchange和Fortinet漏洞进行恶意活动 https://us-cert.cisa.gov/ncas/alerts/aa21-321a 未知APT组织正在利用FatPipe WARP、MPVPN和IPVPN软件中的0 day漏洞 https://www.ic3.gov/Media/News/2021/211117-2.pdf