漏洞 Vulnerability QNAP NAS Multimedia Console 远程代码执行漏洞安全更新 https://www.qnap.com/en/security-advisory/qsa-21-45 Adobe RoboHelp Server 路径穿越漏洞安全更新 https://helpx.adobe.com/security/products/robohelp-server/apsb21-87.html Apache Traffic Control LDAP注入漏洞安全更新 http://trafficcontrol.apache.org/security/ 安全事件 Security Incident Kimsuky组织的Light Shell行动 https://asec.ahnlab.com/ko/28619/ 黑客在昆士兰水供应商的服务器上隐藏九个月未被发现 https://www.bleepingcomputer.com/news/security/hackers-undetected-on-queensland-water-supplier-server-for-9-months/ Magniber 勒索软件团伙正利用IE漏洞进行攻击 https://www.bleepingcomputer.com/news/security/magniber-ransomware-gang-now-exploits-internet-explorer-flaws-in-attacks/ macOS 0Day在香港被利用在水坑攻击用户 https://securityaffairs.co/wordpress/124513/malware/macos-zero-day-watering-hole-hong-kong.html 理解 .htaccess 恶意软件 https://blog.sucuri.net/2021/11/understanding-htaccess-malware.html Costco 在发现信用卡欺诈后披露数据泄露 https://www.bleepingcomputer.com/news/security/costco-discloses-data-breach-after-finding-credit-card-skimmer/ Windows 10应用程序安装程序被BazarLoader恶意软件滥用 https://www.bleepingcomputer.com/news/security/windows-10-app-installer-abused-in-bazarloader-malware-attacks/ BotenaGo僵尸网络以数百万物联网设备为目标，利用33个漏洞攻击 https://www.bleepingcomputer.com/news/security/botenago-botnet-targets-millions-of-iot-devices-with-33-exploits/ 伪造的端到端加密聊天应用程序分发Android Spyware https://www.bleepingcomputer.com/news/security/fake-end-to-end-encrypted-chat-app-distributes-android-spyware/ 美国联邦调查局(FBI)系统被黑客入侵，发送“紧急”邮件警告虚假网络攻击 https://www.bleepingcomputer.com/news/security/fbi-system-hacked-to-email-urgent-warning-about-fake-cyberattacks/ 俄亥俄州医院因遭受网络攻击转移救护车，取消预约 https://www.scmagazine.com/analysis/breach/ohio-hospital-diverting-ambulances-canceling-appointments-amid-cyberattack Abcbot：一种针对Linux的新型蠕虫僵尸网络恶意软件 https://blog.netlab.360.com/abcbot_an_evolving_botnet_en/ TeamTNT黑客组织再次盯上Docker主机服务器 https://www.trendmicro.com/en_us/research/21/k/compromised-docker-hub-accounts-abused-for-cryptomining-linked-t.html