漏洞 Vulnerability WECON PLC Editor安全漏洞 https://us-cert.cisa.gov/ics/advisories/icsa-21-315-01 Siemens Siveillance Video DLNA Server目录穿越漏洞安全更新 https://cert-portal.siemens.com/productcert/pdf/ssa-755517.pdf 安全事件 Security Incident 疑似SideCopy黑客组织利用双平台武器对印度发起网络攻击 https://mp.weixin.qq.com/s/BSfKTlMlOnNlsWKjV1NM8w Meta披露巴基斯坦和叙利亚APT组织的攻击活动 https://about.fb.com/news/2021/11/taking-action-against-hackers-in-pakistan-and-syria/ UNC1151疑似与白俄罗斯政府有关联 https://www.mandiant.com/resources/unc1151-linked-to-belarus-government 微软分析六个伊朗APT组织的演变 https://www.microsoft.com/security/blog/2021/11/16/evolving-trends-in-iranian-threat-actor-activity-mstic-presentation-at-cyberwarcon-2021/ NPM修复了私有包名称泄漏、严重授权错误 https://www.bleepingcomputer.com/news/security/npm-fixes-private-package-names-leak-serious-authorization-bug/ 海姆达尔™ 黑色星期五电子欺诈研究显示加密挖掘领域的热潮 https://heimdalsecurity.com/blog/black-friday-cryptomining/ Emotet恶意软件似乎又重新投入业务 https://heimdalsecurity.com/blog/emotet-malware-appears-to-be-back-in-business/ Mac零日警报：野外水坑攻击 https://www.databreachtoday.com/mac-zero-day-alert-watering-hole-attacks-in-wild-a-17909 Moses Staff黑客对以色列组织造成严重破坏 https://www.bleepingcomputer.com/news/security/moses-staff-hackers-wreak-havoc-on-israeli-orgs-with-ransomless-encryptions/ 阿里云服务器实例被加密挖掘恶意软件主动劫持 https://www.bleepingcomputer.com/news/security/alibaba-ecs-instances-actively-hijacked-by-cryptomining-malware/ Cloudflare缓解了2 Tbps DDoS攻击，这是迄今为止最大的攻击 https://securityaffairs.co/wordpress/124634/security/cloudflare-mitigated-ddos-2-tbps.html 新银行特洛伊木马SharkBot在欧美掀起波澜 https://www.zdnet.com/article/new-banking-trojan-sharkbot-makes-waves-across-europe/