Updates
- Nvidia patches 29 GPU driver bugs
- Apple pushes out iOS security update that’s more tight-lipped than ever
- Number Nine! Chrome fixes another 2022 zero-day, Edge not patched yet
- Acer fixes UEFI bugs that can be used to disable Secure Boot
Vulnerabilities
- Critical Ping bug potentially allows remote hack of FreeBSD systems
- 3 New Vulnerabilities Affect OT Products from German Companies Festo and CODESYS
Incidents
- Ransomware: Hackerangriff legt Uni Duisburg-Essen lahm
- Rackspace: Ongoing Exchange outage caused by security incident
- LastPass admits to customer data breach caused by previous breach
Threats
- Hyundai app bugs allowed hackers to remotely unlock, start cars
- Watch Out! These Android Keyboard Apps With 2 Million Installs Can be Hacked Remotely
- TikTok “Invisible Challenge” porn malware puts us all at risk
- InfoSec Handlers Diary Blog - SANS Internet Storm Center
- CISA Warns of Actively Exploited Critical Oracle Fusion Middleware Vulnerability
Cyber Crime
- Chinese Cyber Espionage Hackers Using USB Devices to Target Entities in Philippines
- Police arrest 55 members of 'Black Panthers' SIM Swap gang
- New CryWiper data wiper targets Russian courts, mayor’s offices
- Hackers Exploiting Abandoned Boa Web Servers to Target Critical Industries
Malware
- New Go-based Redigo malware targets Redis servers
- New Windows malware also steals data from victims’ mobile phones
Misc.
- San Francisco Votes to Give Cop Robots Explosives—and License to Kill
- strongAttack of drones: airborne cybersecurity nightmare/strong
- Microsoft Defender boosts default protection for all enterprise users
- Researchers 'Accidentally’ Crash KmsdBot Cryptocurrency Mining Botnet Network
- New PowerShell History Defense Evasion Technique - Black Hills Information Security
- FCC bans equipment authorization for Chinese hardware, adopts new rules for communications networks, supply chains - Industrial Cyber
- EU Parliament approves new rules to protect essential infrastructure, bring about consistency among member states - Industrial Cyber