免责声明：以下内容原文来自互联网的公共方式，仅用于有限分享，译文内容不代表蚁景网安实验室观点，因此第三方对以下内容进行分享、传播等行为，以及所带来的一切后果与译者和蚁景网安实验室无关。以下内容亦不得用于任何商业目的，若产生法律责任，译者与蚁景网安实验室一律不予承担。

1、联合国环境规划署泄露了100,000条员工记录

https://www.securityweek.com/united-nations-environment-programme-exposed-100000-employee-records

2、卡巴斯基将SolarWinds攻击代码与俄罗斯知名APT集团关联

https://www.securityweek.com/malware-used-solarwinds-attack-linked-backdoor-attributed-turla-cyberspies

3、SocialArks泄露来自Facebook，Instagram和LinkedIn的3.18亿条记录

https://threatpost.com/social-profiles-leaked-chinese-data-scrapers/162936/

4、Typeform修复了Zendesk Sell form数据劫持漏洞

https://www.bleepingcomputer.com/news/security/typeform-fixes-zendesk-sell-form-data-hijacking-vulnerability

5、Bitdefender发布了Darkside勒索软件免费解密器

https://www.zdnet.com/article/free-decrypter-released-for-victims-of-darkside-ransomware/

6、70TB Parler用户数据遭泄露

https://cybernews.com/news/70tb-of-parler-users-messages-videos-and-posts-leaked-by-security-researchers

7、Ubiquiti Networks披露数据泄露

https://securityaffairs.co/wordpress/113296/data-breach/ubiquiti-discloses-data-breach.html

8、针对Qiui Cellmate设备的ChastityLock勒索软件源代码已在线泄漏

https://securityaffairs.co/wordpress/113251/hacking/qiui-cellmate-ransomware.html

9、勒索软件团伙优先针对高管以迫使公司付款

https://www.zdnet.com/article/some-ransomware-gangs-are-going-after-top-execs-to-pressure-companies-into-paying/

10、xHunt活动使用BumbleBee webshell横向移动

https://unit42.paloaltonetworks.com/bumblebee-webshell-xhunt-campaign/