免责声明：以下内容原文来自互联网的公共方式，仅用于有限分享，译文内容不代表蚁景网安实验室观点，因此第三方对以下内容进行分享、传播等行为，以及所带来的一切后果与译者和蚁景网安实验室无关。以下内容亦不得用于任何商业目的，若产生法律责任，译者与蚁景网安实验室一律不予承担。

1、FireEye发布新的开源工具以应对SolarWinds Hack

https://www.securityweek.com/fireeye-releases-new-open-source-tool-response-solarwinds-hack

2、研究人员称VPNFilter恶意软件仍然存在于数百个网络

https://www.securityweek.com/hundreds-networks-still-host-devices-infected-vpnfilter-malware

3、发现与SolarWinds 攻击有关的第四种恶意软件-Raindrop

https://www.securityweek.com/solarwinds-hackers-used-raindrop-malware-lateral-movement

4、Malwarebytes称电子邮件系统遭SolarWinds供应链攻击

https://securityaffairs.co/wordpress/113628/hacking/malwarebytes-solarwinds-attack.html

5、FreakOut僵尸网络利用近期3种危害Linux设备的漏洞

https://securityaffairs.co/wordpress/113606/cyber-crime/freakout-botnet.html

6、研究人员发现Dnsmasq中多个漏洞影响数百万设备

https://thehackernews.com/2021/01/a-set-of-severe-flaws-affect-popular.html

7、CoTURN修补VoIP系统访问控制绕过漏洞

https://portswigger.net/daily-swig/voip-vulnerability-coturn-patches-access-control-protection-bypass

8、FBI警告窃取凭据的语音网络钓鱼活动

https://www.bleepingcomputer.com/news/security/fbi-warns-of-vishing-attacks-stealing-corporate-accounts/

9、AnyVan披露数据泄露

https://www.theregister.com/2021/01/19/anyvan_confirms_digital_breakin_says/

10、Microsoft 启用 Defender for Endpoint自动威胁修复

https://www.securityweek.com/microsoft-enables-automatic-remediation-defender-endpoint