This Week in Cyberspace (12-18 February 2022)
What happened in the cyber world this week? The prominent cyber security news of the week is with you...
Google Project Zero: Vendors Are Now Quicker at Fixing Zero-Days
Google’s Project Zero has published a report showing that organizations took less time to address the zero-day vulnerabilities that the team reported last year.
NFL's San Francisco 49ers Hit by Blackbyte Ransomware Attack
The NFL's San Francisco 49ers team is recovering from a cyberattack by the BlackByte ransomware gang who claims to have stolen data from the American football organization.
New Chrome 0-Day Bug Under Active Attack – Update Your Browser ASAP!
Google on Monday rolled out fixes for eight security issues in the Chrome web browser, including a high-severity vulnerability that's being actively exploited in real-world attacks, marking the first zero-day patched by the internet giant in 2022.
Windows 10 KB5010415 Update Released With 35 Bug Fixes, Improvements
Microsoft has released the optional KB5010415 Preview cumulative update for Windows 10 20H2, Windows 10 21H1, and Windows 10 21H2.
Ukrainian Military Agencies, Banks Hit by DDoS Attacks, Defacements
The Ministry of Defense and the Armed Forces of Ukraine and two of the country's state-owned banks, Privatbank (Ukraine's largest bank) and Oschadbank (the State Savings Bank), are being hammered by Distributed Denial-of-Service (DDoS) attacks.
Google Almost Doubles Linux Kernel, Kubernetes Zero-Day Rewards
Google says it bumped up rewards for reports of Linux Kernel, Kubernetes, Google Kubernetes Engine (GKE), or kCTF vulnerabilities by adding bigger bonuses for zero-day bugs and exploits using unique exploitation techniques.
FBI Warns of BEC Attackers Impersonating CEOs in Virtual Meetings
The Federal Bureau of Investigation (FBI) warned today that US organizations and individuals are being increasingly targeted in BEC (business email compromise) attacks on virtual meeting platforms.
Researchers Warn of a New Golang-based Botnet Under Continuous Development
Cybersecurity researchers have unpacked a new Golang-based botnet called Kraken that's under active development and features an array of backdoor capabilities to siphon sensitive information from compromised Windows hosts.
Trickbot Malware Targeted Customers of 60 High-Profile Companies Since 2020
The notorious TrickBot malware is targeting customers of 60 financial and technology companies, including cryptocurrency firms, primarily located in the U.S., even as its operators have updated the botnet with new anti-analysis features.
Hackers Can Crash Cisco Secure Email Gateways Using Malicious Emails
Cisco has addressed a high severity vulnerability that could allow remote attackers to crash Cisco Secure Email appliances using maliciously crafted email messages.
Hackers Slip Into Microsoft Teams Chats to Distribute Malware
Security researchers warn that some attackers are compromising Microsoft Teams accounts to slip into chats and spread malicious executables to participants in the conversation.
Sign up for the e-mail list to be informed about the developments in the cyber world and to be informed about the weekly newsletter.