漏洞 Vulnerability CVE-2021-4034：Linux Polkit 权限提升漏洞通告 https://cert.360.cn/warning/detail?id=25d7a6ec96c91ca4e4238fd10da2c778 安全事件 Security Incident Log4j:Mirai僵尸网络被发现针对ZyXEL网络设备 https://www.zdnet.com/article/log4j-mirai-ddos-botnet-targeting-zyxel-networking-devices/ 黑客称他们加密了白俄罗斯铁路服务器以示抗议 https://www.bleepingcomputer.com/news/security/hackers-say-they-encrypted-belarusian-railway-servers-in-protest/ Android恶意软件BRATA在窃取数据后会擦拭你的设备 https://www.bleepingcomputer.com/news/security/android-malware-brata-wipes-your-device-after-stealing-data/ 攻击者现在积极攻击关键的SonicWall RCE漏洞 https://www.bleepingcomputer.com/news/security/attackers-now-actively-targeting-critical-sonicwall-rce-bug/ 加拿大外交部遭到黑客攻击，一些服务被关闭 https://www.bleepingcomputer.com/news/security/canadas-foreign-affairs-ministry-hacked-some-services-down/ 黑客使用新的恶意软件打包器DTPacker来避免分析、检测 https://thehackernews.com/2022/01/hackers-using-new-malware-packer.html 一项新的间谍软件活动攻击工业企业窃取企业证书 https://gbhackers.com/a-new-spyware-campaign-targeting-industrial-enterprises/ 黑客利用MSHTML漏洞监视政府和国防目标 https://thehackernews.com/2022/01/hackers-exploited-mshtml-flaw-to-spy-on.html Watching hole在亚洲部署了新的macOS恶意软件DazzleSpy https://www.welivesecurity.com/2022/01/25/watering-hole-deploys-new-macos-malware-dazzlespy-asia/ 针对亚洲的水坑攻击活动部署macOS恶意软件DazzleSpy https://www.welivesecurity.com/2022/01/25/watering-hole-deploys-new-macos-malware-dazzlespy-asia/ APT28针对政府官员和西亚国防工业的网络间谍活动 https://www.trellix.com/en-gb/about/newsroom/stories/threat-labs/prime-ministers-office-compromised.html