Updates
- NETGEAR fixes a severe bug in its routers. Patch it asap!
- Thousands of Citrix servers vulnerable to patched critical flaws
- CVE-2022-47939: Critical RCE Vulnerability in Linux Kernel
Incidents
- Canadian mining firm shuts down mill after ransomware attack
- LockBit ransomware claims attack on Port of Lisbon in Portugal
- Data of 400 Million Twitter Users for Sale as Irish Privacy Watchdog Announces Probe | SecurityWeek.Com
- Ransomware attack at Louisiana hospital impacts 270,000 patients
- Google to Pay $29.5 Million to Settle Lawsuits Over User Location Tracking
- Facebook to Pay $725 Million to settle Lawsuit Over Cambridge Analytica Data Leak
- French data agency fines Microsoft $63 million for Bing cookie violations
Threats
- Malvertising campaign MasquerAds abuses Google Ads
- New Linux malware uses 30 plugin exploits to backdoor WordPress sites
- PyTorch discloses malicious dependency chain compromise over holidays
- APT Hackers Turn to Malicious Excel Add-ins as Initial Intrusion Vector
- EarSpy attack eavesdrops on Android phones via motion sensors
- Healthcare Providers and Hospitals Under Ransomware's Siege
- BlueNoroff APT Hackers Using New Ways to Bypass Windows MotW Protection
Cyber Crime
- Ukrainian police bust call center that scammed about 18,000 foreigners
- Ransomware gang apologizes, gives SickKids hospital free decryptor
- North Korean hacking outfit impersonating venture capital firms
- 4 Most Prolific Ransomware Gangs of 2022
- Ransomware gang cloned victim’s website to leak stolen data
- Cybersecurity firm links Piers Morgan Twitter hack to leak of 400m records