免责声明：以下内容原文来自互联网的公共方式，仅用于有限分享，译文内容不代表蚁景网安实验室观点，因此第三方对以下内容进行分享、传播等行为，以及所带来的一切后果与译者和蚁景网安实验室无关。以下内容亦不得用于任何商业目的，若产生法律责任，译者与蚁景网安实验室一律不予承担。

1、新型"PseudoManuscrypt"间谍软件针对数千计的工业系统

https://www.securityweek.com/thousands-industrial-systems-targeted-new-pseudomanuscrypt-spyware

2、MuddyWater组织利用Aclip后门攻击航空公司

https://www.securityweek.com/iran-linked-apt-abuses-slack-attacks-asian-airline

3、联想笔记本电脑ImControllerService服务存在漏洞可用于提权

https://securityaffairs.co/wordpress/125711/hacking/lenovo-laptops-privileges-escalation-flaws.html

4、丙烷气体分销商Superior Plus遭到勒索软件攻击

https://www.darkreading.com/attacks-breaches/propane-distributor-hit-with-ransomware

5、研究表明对抗性攻击会使人工智能和医生作出错误诊断

https://www.govinfosecurity.com/study-attacks-manipulate-medical-imaging-ai-outcomes-a-18131

6、攻击者利用网络钓鱼活动分发Agent Tesla恶意程序

https://www.bleepingcomputer.com/news/security/phishing-campaign-uses-powerpoint-macros-to-drop-agent-tesla/

7、FBI 意外发现HelloKitty 勒索软件团伙疑似在乌克兰境外活动

https://securityaffairs.co/wordpress/125675/cyber-crime/hellokitty-ransomware-ukraine.html

8、黑客利用 Log4J 漏洞发动大规模网络攻击

https://arstechnica.com/information-technology/2021/12/hackers-launch-over-840000-attacks-through-log4j-flaw/

9、攻击者通过击溃Ubuntu 的AccountsService 获得 root

https://www.bleepingcomputer.com/news/security/grafana-fixes-zero-day-vulnerability-after-exploits-spread-over-twitter/

10、Ascendex加密货币交易所遭到黑客攻击-7700万美元被盗

https://www.hackread.com/ascendex-cryptocurrency-exchange-hacked/