By security practitioners, for security practitioners novacoast federal | Pillr | novacoast | about innovate
By security practitioners, for security practitioners

Weekly Top Ten Cybersecurity Stories – 12.16.2022


Our Threat Operations and Intelligence team compiles a daily digest of new cybersecurity threats from around the Internet. This top 10 has been culled from the 40+ unique stories we found relevant over the week, ranked by highest risk:

  1. New SQL Injection Techniques Discovered Capable of Bypassing Web Application Firewalls
  2. SPNEGO CVE-2022-37958 Reclassified to Higher “Critical” Status After Remote Code Execution (RCE) Exploit Discovered
  3. NSA Calls for Companies to Patch CVE-2022-27518 Affecting Citrix ADC and Gateway
  4. Microsoft Hardware Developer Program Signs Several Malicious Drivers Used by Ransomware Actors
  5. Threat Actors Leveraging FIFA World Cup for Multiple Phishing Campaigns
  6. QBot Campaign Using HTML Smuggling via SVG Images to Infect Computers
  7. Typosquatting Campaign Continuing to Target Python & Javascript Developers w/ Ransomware-laced PyPI Packages
  8. Researchers Discover Method to Force Several Popular EDR and AV Software to Wipe Data
  9. Microsoft December Patch Tuesday Can Cause Issues with Hyper-V Virtual Machines
  10. Fortinet Patches CVE-2022-42475 Arbitrary Code Execution Vuln Affecting FortiOS SSL-VPN
Previous Post

A Threat Hunter’s Breakdown Of Magniber Ransomware

Next Post

OpenAI Cybersecurity Research

Innovate uses cookies to give you the best online experience. If you continue to use this site, you agree to the use of cookies. Please see our privacy policy for details.