By security practitioners, for security practitioners novacoast federal | Pillr | novacoast | about innovate
By security practitioners, for security practitioners

Weekly Top Ten Cybersecurity Stories – 1.27.2023


Our Threat Operations and Intelligence team compiles a daily digest of new cybersecurity threats from around the Internet. This top 10 has been culled from the 40+ unique stories we found relevant over the week, ranked by highest risk:

  1. Threat Actors Pivot Towards OneNote Attachments to Deploy Initial Access Malware, Echoing Former Malicious Document Strategies
  2. CISA Releases Guidelines to Secure Networks Against Remote Management Software Abuse in Wake of Federal Agency Breaches By RMM
  3. Researchers Release Proof of Concept Code Exploiting Windows CryptoAPI CVE-2022-34689 Allowing MD5 Certificate Collision Attacks
  4. Cisco Warns Multiple End-of-Life Routers Vulnerable to CVE-2023-20025 Remote Code Execution Vulnerability
  5. LastPass Parent Company GoTo (Formerly LogMeIn) Discloses Compromise of Encrypted Customer Information, Some Encryption Keys
  6. Zoho ManageEngine CVE-2022-47966 Remote Code Execution Flaw Added to CISA Known Exploited Vulnerabilities Catalog
  7. ZeroBot Botnet Poses Growing Risk to IoT Networks As Nations Struggle to Mandate Security Provisions
  8. Threat Actor Abusing DNS Settings on Wi-Fi Routers as Part of Wroba Malware Campaign
  9. Microsoft Announces Intentions to Increase XLL Protection as Part of Greater Anti-Phishing Security Measures
  10. Cyble Releases Ransomware Trends Report for Q4 2022
Previous Post

Building a Foundational Data Classification Strategy

Next Post

Weekly Top Ten Cybersecurity Stories – 2.3.2023

Innovate uses cookies to give you the best online experience. If you continue to use this site, you agree to the use of cookies. Please see our privacy policy for details.