漏洞 Vulnerability CVE-2021-33707：SAP NetWeaver Knowledge Management远程攻击漏洞 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33707 安全事件 Security Incident Segway商店遭黑客攻击，盗取顾客的信用卡 https://www.bleepingcomputer.com/news/security/segway-store-hacked-to-steal-customers-credit-cards/ Trellix发现OneDrive针对西亚政府官员的恶意软件 https://www.zdnet.com/article/trellix-finds-onedrive-malware-campaign-targeting-govt-officials-in-western-asia/ Tiany恶意间谍软件使用伪装成来自电信公司的消息的诽谤 https://www.trendmicro.com/en_us/research/22/a/tianyspy-malware-uses-smishing-disguised-as-message-from-telco.html 微软警告说：一起网络钓鱼攻击活动旨在阅读你的电子邮件 https://www.zdnet.com/article/microsoft-warns-about-this-phishing-attack-that-wants-to-read-your-emails/ TrickBot现在使研究人员的浏览器崩溃以阻止恶意软件分析 https://www.bleepingcomputer.com/news/security/trickbot-now-crashes-researchers-browsers-to-block-malware-analysis/ 药物检测实验室门户事件暴露了4年的数据 https://www.databreachtoday.com/drug-testing-lab-portal-incident-exposed-data-for-4-years-a-18375 新的 DeadBolt 勒索软件以 QNAP 设备为目标，要求 50 BTC 获取主密钥 https://www.bleepingcomputer.com/news/security/new-deadbolt-ransomware-targets-qnap-devices-asks-50-btc-for-master-key/ 诺贝尔基金会网站在获奖当天遭DDoS攻击 https://www.bleepingcomputer.com/news/security/nobel-foundation-site-hit-by-ddos-attack-on-award-day/ KONNI演化成更隐身的RAT https://blog.malwarebytes.com/threat-intelligence/2022/01/konni-evolves-into-stealthier-rat/ 分析与Molerats组织有关的管理IP地址 https://team-cymru.com/blog/2022/01/26/analysis-of-a-management-ip-address-linked-to-molerats-apt/ APT27使用恶意软件变种HYPERBRO攻击德国企业 https://www.verfassungsschutz.de/SharedDocs/kurzmeldungen/DE/2022/2022-01-26-cyberbrief.html 分析WhisperGate恶意软件 https://www.netskope.com/blog/netskope-threat-coverage-whispergate