WEEKLY TOP TEN | MARCH 17, 2023 15:42 GMT
Happy Saint Patrick’s Day! Our Threat Operations and Intelligence team compiles a daily digest of new cybersecurity threats from around the Internet. This top 10 11 has been culled from the 40+ unique stories we found relevant over the week, ranked by highest risk:
- Microsoft Fixes Two Zero-Days Actively Exploited By State-Sponsored Threat Actors
https://innovatecybersecurity.com/security-threat-advisory/march-2023-patch-tuesday-closes-two-zero-days-actively-exploited-by-state-sponsored-actors/ - CISA Issues Urgent Warning: Adobe ColdFusion Vulnerability Exploited in the Wild
https://thehackernews.com2023/03/cisa-issues-urgent-warning-adobe.html - Multiple Hacker Groups Exploit 3-Year-Old Vulnerability to Breach U.S. Federal Agency
https://thehackernews.com/2023/03/multiple-hacker-groups-exploit-3-year.html - SAP releases security updates fixing five critical vulnerabilities
https://www.bleepingcomputer.com/news/security/sap-releases-security-updates-fixing-five-critical-vulnerabilities/ - GoBruteforcer: New Golang-Based Malware Breaches Web Servers Via Brute-Force Attacks
https://thehackernews.com/2023/03/gobruteforcer-new-golang-based-malware.html - BATLOADER Malware Uses Google Ads to Deliver Vidar Stealer and Ursnif Payloads
https://thehackernews.com/2023/03/batloader-malware-uses-google-ads-to.html - First-known Dero cryptojacking operation seen targeting Kubernetes
https://www.bleepingcomputer.com/news/security/first-known-dero-cryptojacking-operation-seen-targeting-kubernetes/ - BianLian Ransomware Pivots From Encryption to Pure Data-Theft Extortion
https://www.darkreading.com/risk/bianlian-ransomware-pivots-encryption-pure-data-theft-extortion - Chinese and Russian Hackers Using SILKLOADER Malware to Evade Detection
https://thehackernews.com/2023/03/chinese-and-russian-hackers-using.html - GoatRAT Android Banking Trojan Targets Mobile Automated Payment System
https://www.darkreading.com/attacks-breaches/goatrat-android-trojan-targets-mobile-banking-automated-payment-system - Analysts Spot a Wave of SVB-Related Cyber Fraud Striking the Business Sector
https://www.darkreading.com/threat-intelligence/analysts-wave-svb-cyber-fraud-striking-business-sector