漏洞 Vulnerability CVE-2022-0218：WordPress电子邮件模板设计器-高严重性跨站点脚本 https://threatpost.com/wordpress-insecure-plugin-rest-api/177866/ CVE-2021-39683：Google Android越界写入漏洞（CNVD-2022-06154） http://vulhub.org.cn/vuln/VHN-401107 安全事件 Security Incident WordPress插件漏洞使20000个站点的用户面临钓鱼风险 https://www.bleepingcomputer.com/news/security/wordpress-plugin-flaw-puts-users-of-20-000-sites-at-phishing-risk/ APT41在目标攻击中使用的New MoonBounce UEFI恶意软件 https://www.bleepingcomputer.com/news/security/new-moonbounce-uefi-malware-used-by-apt41-in-targeted-attacks/ 印尼央行在Conti泄露数据后确认勒索软件攻击 https://www.bleepingcomputer.com/news/security/indonesias-central-bank-confirms-ransomware-attack-conti-leaks-data/ FBI将Diavol勒索软件与TrickBot网络犯罪集团联系起来 https://www.bleepingcomputer.com/news/security/fbi-links-diavol-ransomware-to-the-trickbot-cybercrime-group/ Crypto.com 证实483个账户被黑客入侵，3400万美元被撤回 https://www.bleepingcomputer.com/news/security/cryptocom-confirms-483-accounts-hacked-34-million-withdrawn/ “异常”间谍软件窃取工业企业的凭据 https://www.bleepingcomputer.com/news/security/anomalous-spyware-stealing-credentials-in-industrial-firms/ MeleRATS针对中东用户的新间谍攻击活动分析 https://www.zscaler.com/blogs/security-research/new-espionage-attack-molerats-apt-targeting-users-middle-east Prometheus组织使用TDS向目标提供恶意软件二进制文件分析 https://gbhackers.com/prometheus-hacker-group/ Emotet垃圾邮件滥用非传统IP地址格式传播恶意软件活动分析 https://www.trendmicro.com/en_us/research/22/a/emotet-spam-abuses-unconventional-ip-address-formats-spread-malware.html Xloader的C2网络加密分析 https://www.zscaler.com/blogs/security-research/analysis-xloaders-c2-network-encryption 网络钓鱼冒充航运巨头马士基推动STRRAT恶意软件 https://www.bleepingcomputer.com/news/security/phishing-impersonates-shipping-giant-maersk-to-push-strrat-malware/ 超过90个WordPress主题，供应链攻击中的插件后门 https://www.bleepingcomputer.com/news/security/over-90-wordpress-themes-plugins-backdoored-in-supply-chain-attack/ Log4J：攻击者继续以VMware Horizon服务器为目标 https://www.zdnet.com/article/log4j-attackers-continue-targeting-vmware-horizon-servers/ 针对WhisperGate恶意软件的分析 https://blog.talosintelligence.com/2022/01/ukraine-campaign-delivers-defacement.html