On the plus side, only instances with non-standard not recommended configurations are vulnerable. On the downside, those configurations aren’t easy to track down, and it’s easy as pie to exploit. High-Severity RCE Bug Found in Popular Apache Cassandra Database
A group of five security vulnerabilities could lead to a range of bad outcomes for virtual-machine enthusiasts, including command execution and DoS. Critical VMware Bugs Open ESXi, Fusion & Workstation to Attackers
SquirrelWaffle attackers now use typosquatting to keep sending spam, even after Exchange servers are patched for ProxyLogon/ProxyShell. SquirrelWaffle Adds a Twist of Fraud to Exchange Server Malspamming
The year’s 1st Chrome zero-day can lead to all sorts of misery, ranging from data corruption to the execution of arbitrary code on vulnerable systems. Chrome Zero-Day Under Active Attack: Patch ASAP
The vendor issued an emergency fix on Sunday, and eCommerce websites should update ASAP to avoid Magecart card-skimming attacks and other problems. Adobe: Zero-Day Magento 2 RCE Bug Under Active Attack
A collection of five security vulnerabilities with a collective CVSS score of 10 out of 10 threaten critical infrastructure environments that use Moxa MXview. Critical MQTT-Related Bugs Open Industrial Networks to RCE Via Moxa
“Siloscape”, the first malware to target Windows containers, breaks out of Kubernetes clusters to plant backdoors and raid nodes for credentials. Windows Container Malware Targets Kubernetes Clusters
Unprotected server exposes AMT Games user data containing user emails and purchase information. ‘Battle for the Galaxy’ Mobile Game Leaks 6M Gamer Profiles
REvil threat actors may be behind a set of PowerShell scripts developed for encryption and weaponized to exploit vulnerabilities in corporate networks, the ransom note suggests. Exchange Servers Targeted by ‘Epsilon Red’ Malware
Joseph Carson, chief security scientist and advisory CISO at ThycoticCentrify, discusses best practices for securing healthcare data against the modern threat landscape. Then and Now: Securing Privileged Access Within Healthcare Orgs