March 2022 – Page 3

Windows 11 22H2: Everything we know so far

Windows 11 version 22H2 aka Sun Valley 2 is set to launch later this year. Unlike the original Windows 11 release, it won’t be a massive update with radical design changes. Instead, Sun Valley 2 will be similar to Windows 10 Anniversary Update, so you can expect minor improvements and a few new features. […]

27 Mar

Hive ransomware ports its Linux VMware ESXi encryptor to Rust

The Hive ransomware operation has converted their VMware ESXi Linux encryptor to the Rust programming language and added new features to make it harder for security researchers to snoop on victim’s ransom negotiations. […]

27 Mar

Critical Sophos Firewall vulnerability allows remote code execution

Sophos has fixed a critical vulnerability in its Sophos Firewall product that allows remote code execution. Tracked as CVE-2022-1040, the authentication bypass vulnerability exists in the User Portal and Webadmin areas of Sophos Firewall. […]

27 Mar

Okta: “We made a mistake” delaying the Lapsus$ hack disclosure

Okta has admitted that it made a mistake delaying the disclosure of hack from the Lapsus$ data extortion group that took place in January. Additionally, the company has provided a detailed timeline of the incident and its investigation activities. […]

26 Mar

CISA adds 66 vulnerabilities to list of bugs exploited in attacks

The Cybersecurity and Infrastructure Security Agency (CISA) has added a massive set of 66 actively exploited vulnerabilities to its catalog of ‘Known Exploited Vulnerabilities.’ […]

26 Mar

Western Digital fixes critical bug giving root on My Cloud NAS devices

Western Digital has fixed a critical severity vulnerability in the Samba vfs_fruit VFS module that enabled attackers to gain remote code execution with root privileges on unpatched My Cloud OS 5 devices. […]

25 Mar

US says Kaspersky poses unacceptable risk to national security

The Federal Communications Commission (FCC) added Russian cybersecurity firm Kaspersky to its Covered List, saying it poses unacceptable risks to U.S. national security. […]

25 Mar

The Week in Ransomware – March 25th 2022 – Critical infrastructure

With the US providing military aid to Ukraine and its sanctions damaging the Russian economy, the US government disclosed this week that there is intelligence that Russia is preparing for potential cyberattacks against US interests. […]

25 Mar

Emergency Google Chrome update fixes zero-day used in attacks

Google has released Chrome 99.0.4844.84 for Windows, Mac, and Linux users to address a high-severity zero-day bug exploited in the wild. […]

25 Mar

Public Redis exploit used by malware gang to grow botnet

Threat analysts report having spotted a change in the operations of the Muhstik threat group, which has now switched to actively exploiting a Lua sandbox escape flaw in Redis. […]

Month: March 2022

Windows 11 22H2: Everything we know so far

Hive ransomware ports its Linux VMware ESXi encryptor to Rust

Critical Sophos Firewall vulnerability allows remote code execution

Okta: “We made a mistake” delaying the Lapsus$ hack disclosure

CISA adds 66 vulnerabilities to list of bugs exploited in attacks

Western Digital fixes critical bug giving root on My Cloud NAS devices

US says Kaspersky poses unacceptable risk to national security

The Week in Ransomware – March 25th 2022 – Critical infrastructure

Emergency Google Chrome update fixes zero-day used in attacks

Public Redis exploit used by malware gang to grow botnet