安全日报（2021.04.19）

GitLab修复两个严重漏洞

https://about.gitlab.com/releases/2021/04/14/security-release-gitlab-13-10-3-released/

CVE-2021-30245：Apache OpenOffice代码执行漏洞

https://www.mail-archive.com/[email protected]/msg06491.html

DarkSide发布更新

https://twitter.com/3xp0rtblog/status/1382608070833016834

美国因太阳风网络攻击制裁俄罗斯并驱逐10名外交官

https://thehackernews.com/2021/04/us-sanctions-russia-and-expels-10.html

研究人员发布Chrome，Edge，Brave，Opera的0day POC

https://www.hackread.com/poc-exploit-for-0-day-chrome-edge-brave-opera/

美国和英国指责俄罗斯情报部门黑客发动重大网络攻击

https://www.zdnet.com/article/solarwinds-us-and-uk-blame-russian-intelligence-service-hackers-for-major-cyber-attack/

Chrome安全问题可能导致Windows版微信任意代码执行

https://mp.weixin.qq.com/s/nEpTW6ROQFRq-oV0jklCTA

APT SideWinder针对南亚某区域的最新攻击活动

https://mp.weixin.qq.com/s/uIuYqWxN73jdPcfEUWJt7Q

Malware Analysis Report (AR21-105A) MAR-10327841-1.v1 – SUNSHUTTLE

https://us-cert.cisa.gov/ncas/analysis-reports/ar21-105a

Lazarus BTC Changer

https://www.group-ib.com/blog/btc_changer