Attackers exploiting bugs in the “link preview” feature in Microsoft Teams could abuse the flaws to spoof links, leak an Android user’s IP address and launch a DoS attack.

https://threatpost.com/microsoft-teams-bugs-vulnerable-march/177225/

Yaron Kassner, CTO and co-founder of Silverfort, discusses why using all-seeing privileged accounts for monitoring is bad practice.

https://threatpost.com/domain-admin-accounts-scan-network/177194/

There are 17,000npatched Log4j packages in the Maven Central ecosystem, leaving massive supply-chain risk on the table from Log4Shell exploits.

https://threatpost.com/java-supply-chain-log4j-bug/177211/

Microsoft is urging customers to patch two Active Directory domain controller bugs after a PoC tool was publicly released on Dec. 12.

https://threatpost.com/active-directory-bugs-windows-domain-takeover/177185/

APT attackers are using a security vulnerability in ManageEngine Desktop Central to take over servers, deliver malware and establish network persistence.

https://threatpost.com/zoho-zero-day-manageengine-active-attack/177178/

Conti has become the first professional-grade, sophisticated ransomware group to weaponize Log4j2, now with a full attack chain.

https://threatpost.com/conti-ransomware-gang-has-full-log4shell-attack-chain/177173/

The new Log4j vulnerability is similar to Log4Shell in that it also affects the logging library, but this DoS flaw has to do with Context Map lookups, not JNDI.

https://threatpost.com/third-log4j-bug-dos-apache-patch/177159/

Meta, Facebook’s parent company, said that the seven banned actors run fake accounts on its platforms to deceive users and plant malware on targets’ phones.

https://threatpost.com/facebook-bans-spy-hire/177149/

The discovery, which affects services running as localhost that aren’t exposed to any network or the internet, vastly widens the scope of attack possibilities.

https://threatpost.com/new-log4shell-attack-vector-local-hosts/177128/

More than 1.8 million attacks, against half of all corporate networks, have already launched to exploit Log4Shell.

https://threatpost.com/log4j-attacks-state-actors-worm/177088/

SAP’s still feverishly working to patch another 12 apps vulnerable to the Log4Shell flaw, while its Patch Tuesday release includes 21 other fixes, some rated at 9.9 criticality.

https://threatpost.com/sap-log4shell-vulnerability-apps/177069/

Not only is the jaw-dropping flaw in the Apache Log4j logging library ubiquitous; Apache’s blanket of a quickly baked patch for Log4Shell also has holes.

https://threatpost.com/apache-patch-log4shell-log4j-dos-attacks/177064/

If 2021 was the Year of Supply Chain Pain, 2022 will be the Year of Supply Chain Chronic Pain (or something worse than pain). This past year, the pain was felt in two significant ways: through the supply chain disruptions caused by COVID-19, and through the many security breaches that we saw in our key […]

https://threatpost.com/supply-chain-pain-and-changing-security-roles/177058/

It took just 15 seconds to hack the latest, greatest, shiniest iPhone 13 Pro on stage at the Tianfu Cup in October, using a now-fixed iOS kernel bug.

https://threatpost.com/apple-ios-updates-iphone-13-jailbreak-exploit/177051/

December’s Patch Tuesday updates address six publicly known bugs and seven critical security vulnerabilities.

https://threatpost.com/exploited-microsoft-zero-day-spoofing-malware/177045/

An exclusive roundtable of security researchers discuss the specific implications of CVE-2021-44228 for smaller businesses, including what’s vulnerable, what an attack looks like and to how to remediate.

https://threatpost.com/log4shell-bug-smbs-experts/177021/

Podcast: Cybereason shares details about its vaccine: a fast shot in the arm released within hours of the Apache Log4j zero-day horror show being disclosed.

https://threatpost.com/patching-time-log4j-exploits-vaccine/177017/

Analysts find at least 10 Linux botnets actively exploiting Log4Shell flaw.

https://threatpost.com/log4shell-attacks-origin-botnet/176977/

The cybersecurity Hiroshima of the year – the Apache Log4j logging library exploit – has spun off 60 bigger mutations in less than a day, researchers said.

https://threatpost.com/apache-log4j-log4shell-mutations/176962/

Malicious email attachments with macros are one of the most common ways hackers get in through the door. Huntress security researcher John Hammond discusses how threat hunters can fight back.

https://threatpost.com/maldocs-malicious-office-documents-human-vulnerability/176916/