漏洞 Vulnerability Adobe Illustrator 多个漏洞安全更新 https://helpx.adobe.com/security/products/illustrator/apsb21-98.html Apple tvOS 安全更新 https://support.apple.com/en-us/HT212876 Apple iOS 安全更新 https://support.apple.com/en-us/HT212866 安全事件 Security Incident Donot组织的恶意软件新变种 https://isarc.tachyonlab.com/4592 Thallium发起网络钓鱼攻击活动 https://blog.alyac.co.kr/4227?category=957259 攻击者劫持Craigslist电子邮件以绕过安全，发送恶意软件 https://threatpost.com/attackers-hijack-craigslist-email-malware/175754/ 大规模网络攻击后，伊朗加油站无运营 https://heimdalsecurity.com/blog/iranian-gas-stations-unable-to-operate-after-massive-cyberattack/ Lazarus黑客组织目前专注于IT供应链攻击 https://heimdalsecurity.com/blog/lazarus-hacking-group-now-focusing-on-it-supply-chain-attacks/ Wslink：作为服务器运行的唯一且未记录的恶意加载程序 https://www.welivesecurity.com/2021/10/27/wslink-unique-undocumented-malicious-loader-runs-server/ WordPress插件漏洞允许订阅者删除站点 https://www.bleepingcomputer.com/news/security/brutal-wordpress-plugin-bug-allows-subscribers-to-wipe-sites/ 垃圾邮件发送者使用SquirreWaffle恶意软件进行攻击 https://www.bleepingcomputer.com/news/security/spammers-use-squirrelwaffle-malware-to-drop-cobalt-strike/