Two separate campaigns from different threat actors targeted users with the same exploit kit for more than a month before the company fixed an RCE flaw found in February.

https://threatpost.com/google-chrome-zero-day-bugs-exploited-weeks-ahead-of-patch/179103/

A patch fixes exploit hidden in Elden Ring that traps PC players in a ‘death loop.’

https://threatpost.com/dark-souls-game-elden-ring-killer-bug/179090/

“Evolving intelligence” shows Russia amping up for cyber-war in response to Ukraine-related sanctions, the White House said – but researchers warn that many orgs are not prepared.

https://threatpost.com/russia-cyberattacks-us-infrastructure/179037/

The Russian-speaking APT behind the NotPetya attacks and the Ukrainian power grid takedown could be setting up for additional sinister attacks, researchers said.

https://threatpost.com/sandworm-asus-routers-cyclops-blink-botnet/178986/

In the latest software supply-chain attack, the code maintainer added malicious code to the hugely popular node-ipc library to replace files with a heart emoji and a peacenotwar module.

https://threatpost.com/dev-sabotages-popular-npm-package-protest-russian-invasion/178972/

Five percent of the databases are vulnerable to threat actors: It’s a gold mine of exploit opportunity in thousands of mobile apps, researchers say.

https://threatpost.com/misconfigured-firebase-databases-exposing-data-mobile-apps/178965/

It’s about time, AttackIQ’s Jonathan Reiber said about 24H/72H report deadlines mandated in the new spending bill. As it is, visibility into adversary behavior has been muck.

https://threatpost.com/reporting-mandates-to-clear-up-feds-hazy-look-into-threat-landscape-podcast/178947/

The “Dirty Pipe” Linux kernel flaw – a high-severity vulnerability in all major distros that grants root access to unprivileged users who have local access – affects most of QNAP’s network-attached storage (NAS) appliances, the Taiwanese manufacturer warned on Monday. Dirty Pipe, a recently reported local privilege escalation vulnerability, affects the Linux kernel on QNAP […]

https://threatpost.com/most-qnap-nas-devices-affected-by-dirty-pipe-linux-flaw/178920/

A new survey suggests that security is becoming more important for enterprises, but they’re still falling back on old “security by obscurity” ways.

https://threatpost.com/orgs-security-bugs-ethical-hacking-help/178862/

The China-affiliated state-sponsored threat actor used Log4j and zero-day bugs in the USAHerds animal-tracking software to hack into multiple government networks.

https://threatpost.com/apt41-spies-broke-into-6-us-state-networks-via-livestock-app/178838/

The computing giant patched 71 security vulnerabilities in an uncharacteristically light scheduled update, including its first Xbox bug.

https://threatpost.com/microsoft-zero-days-critical-bugsmarch-patch-tuesday/178817/

While IT automation is growing, big challenges remain. Chris Hass, director of information security and research at Automox, discusses how the future looks.

https://threatpost.com/uncertain-future-it-automation/178709/

The ‘TLStorm’ vulnerabilities, found in APC Smart-UPS products, could allow attackers to cause both cyber and physical damage by taking down critical infrastructure.

https://threatpost.com/zero-click-flaws-ups-critical-infratructure/178810/

A missing check allows unprivileged attackers to escape containers and execute arbitrary commands in the kernel.

https://threatpost.com/bug-linux-kernel-privilege-escalation-container-escape/178808/

Researchers have discovered how to remotely manipulate the Amazon Echo through its own speakers.

https://threatpost.com/attack-amazon-devices-against-themselves/178797/

Both vulnerabilities are use-after-free issues in Mozilla’s popular web browser.

https://threatpost.com/firefox-zero-day-bugs-rce-sandbox-escape/178779/

Malicious Google Play apps have circumvented censorship by hiding trojans in software updates.

https://threatpost.com/teabot-trojan-haunts-google-play-store/178738/

The flaws are in the ubiquitous open-source PJSIP multimedia communication library, used by the Asterisk PBX toolkit that’s found in a massive number of VoIP implementations.

https://threatpost.com/rce-bugs-whatsapp-popular-voip-apps-patch-now/178719/

The ransomware gang known as Cuba is increasingly shifting to exploiting Exchange bugs – including crooks’ favorites, ProxyShell and ProxyLogon – as initial infection vectors.

https://threatpost.com/microsoft-exchange-exploited-cuba-ransomware/178665/

A pair of bugs in the Snap-owned tracking app reveal phone numbers and allow account hijacking.

https://threatpost.com/zenly-bugs-account-takeover/178646/