Cyber Threat Intelligence Weekly Newsletter May 9, 2022

 

Cyber Threat Intelligence Weekly Newsletter

This week's most mentioned cybersecurity topics have been covered in this newsletter for you — the latest developments, cyberattacks, data breaches, recent vulnerabilities, threat intelligence insights, and more.

Dark Web Insights

Bites of Life: Shining light on the dark web The 20 most common passwords leaked on the dark web How the Intellectual Dark Web spawned "Groomer" panic Black market forex sale is a huge loss to the economy

Critical Vulnerabilities

CISA adds 7 vulnerabilities to the list of bugs exploited in attacks CVE-2022-29464, CVE-2022-26904, and more Nimbuspwn bugs allow attackers to gain root privileges on some Linux machines CVE-2022-29799 Microsoft finds Linux desktop flaw that gives root to untrusted users CVE-2022-29800 Organizations warned of attacks exploiting WSO2 vulnerability CVE-2022-29464 ThreatX SOC vulnerability alert: CVE-2022-21449 “Psychic Signatures” CVE-2022-21449 Atlassian fixes critical Jira authentication bypass vulnerability CVE-2022-0540 Cisco Patches 11 high-severity vulnerabilities in security products CVE-2022-20746 Google issues warning for billions Of Chrome users CVE-2022-1477 Experts warn of a surge in zero-day flaws observed and exploited in 2021

Trending Threat Actors

Russia has launched hundreds of cyberattacks against Ukraine Iranian Hacking Group among those exploiting recently disclosed VMware RCE flaw Anonymous hacked Russian PSCB commercial bank and companies in the energy sector Inside a ransomware incident: How a single mistake left a door open for attackers - Blackcat Ransomware North Korean hackers targeting journalists with novel malware Has ‘clown show’ hacking gang Stormous breached Coca-Cola? Cybercriminals using new malware loader 'Bumblebee' in the wild Conti ransomware operations surge despite the recent leak

Important Cybersecurity News

Emotet tests new attack chain in low volume campaigns Hackers steal $80 million From Defi platforms Fei Protocol and Rari Capital Daily Crunch: US dangles reward up to $10M for info on six elite Russian military hackers Critical Vulnerabilities in Azure PostgreSQL exposed user databases Russian hacktivists launch DDoS attacks on Romanian government sites

SOCRadar Blog

Cyber Threats to NGOs Increase: Half of Organizations Targeted   NGOs and humanitarian nonprofits depend on digital communication technologies and software to coordinate their missions worldwide. In particular, organizations working in humanitarian aid need these technologies to perform operations such as data collection, classification, and analysis.   Security threats are not a new issue for NGOs. Delivering aid to those in need is already risky in regions where wars continue or harsh climatic conditions prevail. But reliance on technology has introduced a new threat and security challenge: cyberthreats.

Click here to read the full blog post

SOCRadar Cyber Intelligence Inc., 651 N Broad St, Ste 205, Middletown, DE 19709, USA, +1 (571) 249 4598