漏洞 Vulnerability CVE-2021-41133: flatpak 安全限制绕过漏洞安全更新 https://github.com/flatpak/flatpak/security/advisories/GHSA-67h7-w3jq-vh4q 2021.10 Jenkins安全更新 https://www.jenkins.io/security/advisory/2021-10-06/ 安全事件 Security Incident Donot组织利用间谍软件攻击多哥的人权活动家 https://www.amnesty.org/en/latest/news/2021/10/togo-activist-targeted-with-spyware-by-notorious-hacker-group/ Lazarus组织的多个攻击活动及关联 https://vblocalhost.com/conference/presentations/multi-universe-of-adversary-multiple-campaigns-of-the-lazarus-group-and-their-connections/ 揭露攻击伊朗铁路的幕后黑手Indra https://vblocalhost.com/conference/presentations/meet-indra-uncovering-the-hackers-behind-attacks-on-iran-railways/ BlackTech最新攻击活动分析 https://vblocalhost.com/conference/presentations/back-to-blacktech-an-analysis-of-recent-blacktech-operations-and-an-open-directory-full-of-exploits/ APT41被起诉后的演变 https://vblocalhost.com/conference/presentations/evolution-after-prosecution-psychedelic-apt41/ LockBit 2.0勒索软件袭击以色列国防公司E.M.I.T.航空咨询公司 https://securityaffairs.co/wordpress/122892/cyber-crime/e-m-i-t-aviation-consulting-ransomware.html 新APT ChamelGang瞄准俄罗斯的能源和航空公司 https://securityaffairs.co/wordpress/122902/apt/chamelgang-apt-targets-russia.html 针对燃料、能源和航空行业的新APT黑客组织 https://thehackernews.com/2021/10/a-new-apt-hacking-group-targeting-fuel.html 电信服务提供商巨头Syniverse自2016年以来未经授权访问 https://securityaffairs.co/wordpress/122986/data-breach/syniverse-security-breach.html 一项新的研究将看似完全不同的恶意软件攻击与中国黑客联系起来 https://thehackernews.com/2021/10/new-study-links-seemingly-disparate.html Apache修补程序—在野外利用的零日漏洞 https://securityaffairs.co/wordpress/122999/hacking/apache-zero-day-flaw.html 香港Fimmik公司遭REvil勒索软件攻击 https://www.zdnet.com/article/hong-kong-firm-becomes-latest-marketing-company-hit-with-revil-ransomware/ 英国报纸《电讯报》披露了一个10TB的数据库，其中包含用户数据 https://securityaffairs.co/wordpress/123020/data-breach/the-telegraph-data-leak.html 伊朗黑客滥用Dropbox攻击航空和电信公司 https://thehackernews.com/2021/10/iranian-hackers-abuse-dropbox-in.html Twitch源代码和支付报告泄露 https://www.bleepingcomputer.com/news/security/massive-twitch-hack-source-code-and-payment-reports-leaked/