漏洞 Vulnerability Apache OFBiz发布两个远程代码执行漏洞 https://cert.360.cn/warning/detail?id=ad4d23fbddf88d41c4763c09262a9016 Nacos发布两个认证绕过漏洞 https://securitylab.github.com/advisories/GHSL-2020-325_326-nacos/ 安全事件 Security Incident Lazarus Group Recruitment: Threat Hunters vs Head Hunters https://www.ptsecurity.com/ww-en/analytics/pt-esc-threat-intelligence/lazarus-recruitment/ New ICS Threat Activity Group: TALONITE https://www.dragos.com/blog/industry-news/new-ics-threat-activity-group-talonite/ 32亿个被泄露的密码中包含150万条与政府有关的电子邮件记录 https://thehackernews.com/2021/04/32-billion-leaked-passwords-contain-15.html 现在Windows 10可以利用CPU发现恶意软件 https://www.zdnet.com/article/now-windows-10-can-spot-cryptojacking-malware-using-up-your-cpu-power/ MangaDex披露数据泄露事件 https://www.bleepingcomputer.com/news/security/mangadex-discloses-data-breach-after-stolen-data-gets-shared-online/