免责声明：以下内容原文来自互联网的公共方式，仅用于有限分享，译文内容不代表蚁景网安实验室观点，因此第三方对以下内容进行分享、传播等行为，以及所带来的一切后果与译者和蚁景网安实验室无关。以下内容亦不得用于任何商业目的，若产生法律责任，译者与蚁景网安实验室一律不予承担。

1、T-Mobile 证实 Lapsus$ 获得了对其内部工具和源码的访问权限

https://thehackernews.com/2022/04/t-mobile-admits-lapsus-hackers-gained.html

2、Atlassian 发布漏洞补丁修复了高危Jira身份验证绕过漏洞

https://thehackernews.com/2022/04/atlassian-drops-patches-for-critical.html

3、研究人员发布了高危Java数字签名绕过漏洞PoC

https://thehackernews.com/2022/04/researcher-releases-poc-for-recent-java.html

4、Conti 勒索软件声称对哥斯达黎加的勒索攻击负责

https://securityaffairs.co/wordpress/130505/cyber-crime/costa-rica-conti-ransomware.html

5、Lemon_Duck 挖矿僵尸网络以 Docker 服务器为目标

https://securityaffairs.co/wordpress/130470/cyber-crime/lemon_duck-cryptomining-botnet-targets-docker.html

6、多个严重漏洞影响 SmartPTT、SmartICS 工业产品

https://www.securityweek.com/several-critical-vulnerabilities-affect-smartppt-smartics-industrial-products

7、在被关闭一年多后Emotet恶意软件正在卷土重来

https://www.theregister.com/2022/04/21/emotet-resurgence-email/

8、网络犯罪分子冒充政府供应商进行IRS税务诈骗

https://securityaffairs.co/wordpress/130451/cyber-crime/cybercriminals-deliver-irs-tax-scams-phishing.html

9、里约热内卢财政部门遭到LockBit勒索软件攻击

https://therecord.media/rio-de-janeiro-finance-department-hit-with-lockbit-ransomware/

10、Killnet黑客组织对捷克多个实体发起DDoS攻击

https://www.govinfosecurity.com/conti-ransomware-targets-costa-rican-government-entities-a-18939