Weekly Top Ten Cybersecurity Stories – 4.22.2022

WEEKLY TOP TEN | APRIL 22, 2022 12:15 GMT

1. Vulnerability CVE-2022-20685 Disclosed That Can Render Snort Ineffective
   https://securityaffairs.co/wordpress/130436/security/snort-bug-makes-it-unusable.html
   
2. Lenovo Discloses UEFI Firmware Vulnerabilities Affecting 100+ Laptop Models
   https://www.bleepingcomputer.com/news/security/lenovo-uefi-firmware-driver-bugs-affect-over-100-laptop-models/
   
3. Fortinet Tracks New DDoS Botnet EnemyBot Abusing Dozens of Vulnerabilities To Infect Routers and IoT Devices
   https://securityaffairs.co/wordpress/130291/cyber-crime/enemybot-botnet-ddos.html
   
4. REvil Infrastructure Reactivates, Lists Old and New Victims on Leak Website
   https://www.computing.co.uk/news/4048545/revil-ransomware-infrastructure-appears-restarted-months-inactivity
   
5. Fake Windows 11 Download Page Installing InnoStealer Credential Stealer
   https://www.windowscentral.com/windows-11-download-page-imitator-spreading-malware-pcs
   
6. CISA Adds Print Spooler, 2 Other Vulnerabilities To Known Exploited Vulnerabilities Catalog
   https://securityaffairs.co/wordpress/130401/hacking/win-print-spooler-known-exploited-vulnerabilities-catalog.html
   
7. QNAP Advises Customers to Disable UPnP Port Forwarding to Protect NAS Devices
   https://securityaffairs.co/wordpress/130393/security/qnap-nas-disable-upnp-port-forwarding.html
   
8. Oracle Releases Critical Patch Update for April 2022, Addressing 520 Vulnerabilities
   https://www.cisa.gov/uscert/ncas/current-activity/2022/04/19/oracle-releases-april-2022-critical-patch-update
   
9. CISA Warns of Potential Russian State-Sponsored Cyber Operations In Response to Ukraine War Developments
   https://www.cisa.gov/uscert/ncas/alerts/aa22-110a
   
10. AdvIntel Provides Technical Analysis of Conti Ransomware Group Infrastructure
    https://www.advintel.io/post/enter-karakurt-data-extortion-arm-of-prolific-ransomware-group