漏洞 Vulnerability CVE-2021-28091: lasso SAML库签名绕过漏洞 https://ubuntu.com/security/notices/USN-4974-1 CVE-2021-28476: Windows Hyper-V 远程代码执行漏洞PoC公开 https://github.com/0vercl0k/CVE-2021-28476 CVE-2021-30465: runc符号链接挂载与容器逃逸漏洞 https://cert.360.cn/warning/detail?id=252b960f278622c2305371363a80a54e 安全事件 Security Incident Kimsuky 组织继续使用 AppleSeed 后门攻击韩国政府 https://blog.malwarebytes.com/threat-analysis/2021/06/kimsuky-apt-continues-to-target-south-korean-government-using-appleseed-backdoor/ NobleBaron | 新型恶意安装程序可用于供应链攻击 https://labs.sentinelone.com/noblebaron-new-poisoned-installers-could-be-used-in-supply-chain-attacks/ Lazarus 近期针对军工等行业的定向攻击活动分析 https://mp.weixin.qq.com/s/MBH8ACSTfC6UGzf2h1BuhA Android木马恶意软件窃取银行信息 https://www.zdnet.com/article/this-android-trojan-malware-is-using-fake-apps-to-infect-smartphones-steal-bank-details/ 美国：JBS勒索软件攻击背后可能是俄罗斯攻击者 https://www.bleepingcomputer.com/news/security/us-worlds-largest-beef-producer-jbs-was-hit-by-ransomware/