免责声明：以下内容原文来自互联网的公共方式，仅用于有限分享，译文内容不代表蚁景网安实验室观点，因此第三方对以下内容进行分享、传播等行为，以及所带来的一切后果与译者和蚁景网安实验室无关。以下内容亦不得用于任何商业目的，若产生法律责任，译者与蚁景网安实验室一律不予承担。

1、WordPress 5.7.1修补了PHP 8中的XXE漏洞

https://www.securityweek.com/wordpress-571-patches-xxe-flaw-php-8

2、XCSSET恶意软件重新设计后可感染苹果M1芯片的Mac

https://securityaffairs.co/wordpress/116983/malware/xcsset-malware-apple-m1.html

3、FireEye研究人员演示了接管智能电表的过程

https://securityaffairs.co/wordpress/117001/ics-scada/ot-network-hack-smart-meters.html

4、NitroRansomware勒索用户Discord Nitro礼物码

https://securityaffairs.co/wordpress/116975/malware/nitroransomware-discord-gift-code.html

5、软件公司Codecov遭供应链攻击

https://securityaffairs.co/wordpress/116967/hacking/codecov-supply-chain-attack.html

6、卡巴斯基报告称越来越多ICS系统面临勒索软件攻击

https://cyware.com/news/ics-computers-face-increased-ransomware-attacks-kaspersky-report-a50e9ab5

7、西班牙Phone House遭遇Babuk勒索软件攻击

https://www.suspectfile.com/phone-house-spagna-colpita-da-babuk-ransomware-3-milioni-gli-utenti-colpiti/

8、清洁和餐饮公司Spotless遭数据泄露

https://www.stuff.co.nz/business/124859495/major-data-breach-at-cleaning-and-catering-company-spotless

9、黑客通过群聊传播WhatsApp Pink恶意软件

https://www.hackread.com/whatsapp-pink-malware-spreads-group-chats/

10、100W印度Domino's Pizza用户信用卡详细信息在暗网出售

https://ciso.economictimes.indiatimes.com/news/dominos-india-hacked-credit-data-of-10l-users-on-sale-for-rs-4-cr/82137529