If 2021 was the Year of Supply Chain Pain, 2022 will be the Year of Supply Chain Chronic Pain (or something worse than pain). This past year, the pain was felt in two significant ways: through the supply chain disruptions caused by COVID-19, and through the many security breaches that we saw in our key […]

https://threatpost.com/supply-chain-pain-and-changing-security-roles/177058/

It took just 15 seconds to hack the latest, greatest, shiniest iPhone 13 Pro on stage at the Tianfu Cup in October, using a now-fixed iOS kernel bug.

https://threatpost.com/apple-ios-updates-iphone-13-jailbreak-exploit/177051/

December’s Patch Tuesday updates address six publicly known bugs and seven critical security vulnerabilities.

https://threatpost.com/exploited-microsoft-zero-day-spoofing-malware/177045/

An exclusive roundtable of security researchers discuss the specific implications of CVE-2021-44228 for smaller businesses, including what’s vulnerable, what an attack looks like and to how to remediate.

https://threatpost.com/log4shell-bug-smbs-experts/177021/

Podcast: Cybereason shares details about its vaccine: a fast shot in the arm released within hours of the Apache Log4j zero-day horror show being disclosed.

https://threatpost.com/patching-time-log4j-exploits-vaccine/177017/

Analysts find at least 10 Linux botnets actively exploiting Log4Shell flaw.

https://threatpost.com/log4shell-attacks-origin-botnet/176977/

The cybersecurity Hiroshima of the year – the Apache Log4j logging library exploit – has spun off 60 bigger mutations in less than a day, researchers said.

https://threatpost.com/apache-log4j-log4shell-mutations/176962/

Malicious email attachments with macros are one of the most common ways hackers get in through the door. Huntress security researcher John Hammond discusses how threat hunters can fight back.

https://threatpost.com/maldocs-malicious-office-documents-human-vulnerability/176916/

The Log4Shell vulnerability critically threatens anybody using the popular open-source Apache Struts framework and could lead to a “Mini internet meltdown soonish.”

https://threatpost.com/zero-day-in-ubiquitous-apache-log4j-tool-under-active-attack/176937/

Cyberattackers are targeting security vulnerabilities in four plugins plus Epsilon themes, to assign themselves administrative accounts.

https://threatpost.com/active-attack-takeover-wordpress/176933/

The threat group, first identified in June, focuses solely on data exfiltration and subsequent extortion, and has already targeted 40 victims since September.

https://threatpost.com/extortion-karakurt-threat-ransomware/176911/

The powerful devices leveraged by the Meris botnet have weaknesses that make them easy to exploit, yet complex for organizations to track and secure, researchers said.

https://threatpost.com/mikrotik-routers-cybercriminal-target/176894/

Attackers are milking unpatched Hikvision video systems to drop a DDoS botnet, researchers warned.

https://threatpost.com/moobot-botnet-hikvision-surveillance-systems/176879/

DoH! Nate Warfield, CTO of Prevailion, discusses new stealth tactics threat actors are using for C2, including Malleable C2 from Cobalt Strike’s arsenal.

https://threatpost.com/tactics-attackers-stealthy-c2/176853/

Unauthenticated, remote attackers can achieve root-level RCE on SMA 100-series appliances.

https://threatpost.com/critical-sonicwall-vpn-bugs-appliance-takeover/176869/

Researchers have found a number of high-security vulnerabilities in third-party driver software – bugs that originated in a library created by network virtualization firm Eltima – that leave about a dozen cloud services used by millions of users worldwide open to privilege-escalation attacks. That includes Amazon WorkSpaces, Accops and NoMachine, among others: all apps that […]

https://threatpost.com/aws-cloud-services-flaws-eltima/176852/

There’s an argument injection weakness in the Windows 10/11 default handler, researchers said: an issue that Microsoft has only partially fixed.

https://threatpost.com/windows-10-rce-url-handler/176830/

The gang is using a variety of tools and malware to carry out attacks in volume on critical sectors, the FBI warned.

https://threatpost.com/cuba-ransomware-gang-44m-payouts/176790/

It’s unknown who’s behind the cyberattacks against at least nine employees’ iPhones, who are all involved in Ugandan diplomacy.

https://threatpost.com/pegasus-spyware-state-department-iphones/176779/

We want to know what your biggest cloud security concerns and challenges are, and how your company is dealing with them. Weigh in with our exclusive poll!

https://threatpost.com/cloud-security-challenges-poll/176702/