WEEKLY TOP TEN | FEBRUARY 3, 2023 20:55 GMT
Our Threat Operations and Intelligence team compiles a daily digest of new cybersecurity threats from around the Internet. This top 10 has been culled from the 40+ unique stories we found relevant over the week, ranked by highest risk:
- Security Researchers Release Proof-of-Concept Code for VMWare vRealize CVE-2022-31706 Vulnerability
https://securityaffairs.com/141628/hacking/vmware-vrealize-log-rce-poc-resealed.html - Lexmark Releases Patch for 100+ Printer Models Affected by CVE-2023-23560 Remote Code Execution Vulnerability
https://securityaffairs.com/141428/hacking/lexmark-cve-2023-23560-rce.html - In Wake of Microsoft Security Updates, Threat Actors Turn to OneNote to Deliver Initial Malware
https://www.proofpoint.com/us/blog/threat-insight/onenote-documents-increasingly-used-to-deliver-malware - Threat Actors Target Popular Password Managers Following LastPass Breach in Latest Wave of Google Malvertising
https://www.malwarebytes.com/blog/threat-intelligence/2023/01/google-sponsored-ads-malvertising-targets-password-manager - North Korean Lazarus Group APT “No Pineapple” Campaign Discovered Targeting Unpatched Zimbra Email Servers
https://thehackernews.com/2023/02/north-korean-hackers-exploit-unpatched.html - HeadCrab Botnet Compromises 1200+ Redis Servers Worldwide via Bespoke Malware
https://thehackernews.com/2023/02/new-threat-stealthy-headcrab-malware.html - Google Fi Discloses Breach of Customer Data and Possibility of SIM Swapping on Affected Accounts
https://www.bleepingcomputer.com/news/security/google-fi-data-breach-let-hackers-carry-out-sim-swap-attacks/ - GitHub Revokes Code Signing Certificate for GitHub Desktop and Atom Following Compromise
https://thehackernews.com/2023/01/github-breach-hackers-stole-code.html - Abused Microsoft Partner Network Accounts Used to Deploy Shadow SaaS Rootkits
https://thehackernews.com/2023/02/hackers-abused-microsofts-verified.html - Additional Vulnerabilities Discovered in AMI MegaRAC BMC Software
https://thehackernews.com/2023/02/additional-supply-chain-vulnerabilities.html
