Securing Your Legacy: Identities, Data, and Processes

Legacy systems of all kinds pose significant cybersecurity risks. Here's how to mitigate them.

https://www.darkreading.com/vulnerabilit...-processes

Google's Souped-up Chrome Store Review Process Foiled by Data-Stealer

Researchers have discovered that despite Google's adoption of the Manifest V3 security standard to protect against malicious plug-ins, attackers can still get bad extensions past its review process.

https://www.darkreading.com/application-...ta-stealer

Russia's 'Fancy Bear' APT Targets Ukrainian Energy Facility

The group, best known for 2016 US election interference and other attacks on Ukraine, used phishing emails offering pictures of women to lure its victim into opening a malicious attachment.

https://www.darkreading.com/attacks-brea...y-facility

MinIO Cyberattack Showcases Fresh Corporate Cloud Vector

The open source object storage service was the target of a never-before-seen attack on corporate cloud services, which researchers said should put DevOps in particular on notice.

https://www.darkreading.com/cloud/minio-...ack-vector

AtlasVPN Linux Zero-Day Disconnects Users, Reveals IP Addresses

All it takes is a simple copy-paste to undo a VPN service used by millions worldwide.

https://www.darkreading.com/application-...-addresses

CISA warns govt agencies to secure iPhones against spyware attacks


The U.S. Cybersecurity and Infrastructure Security Agency (CISA) ordered federal agencies today to patch security vulnerabilities abused as part of a zero-click iMessage exploit chain to infect iPhones with NSO Group's Pegasus spyware. [...]


https://www.bleepingcomputer.com/news/se...e-attacks/

MGM Resorts shuts down IT systems after cyberattack


MGM Resorts International disclosed today that it is dealing with a cybersecurity issue that impacted some of its systems, including its main website, online reservations, and in-casino services, like ATMs, slot machines, and credit card machines. [...]


https://www.bleepingcomputer.com/news/se...berattack/

Microsoft will block 3rd-party printer drivers in Windows Update


Microsoft will block third-party printer driver delivery in Windows Update as part of a substantial and gradual shift in its printer driver strategy over the next 4 years. [...]


https://www.bleepingcomputer.com/news/mi...ws-update/

Google fixes another Chrome zero-day bug exploited in attacks


Google released emergency security updates to fix the fourth Chrome zero-day vulnerability exploited in attacks since the start of the year. [...]


https://www.bleepingcomputer.com/news/go...n-attacks/

New WiKI-Eve attack can steal numerical passwords over WiFi

A new attack dubbed 'WiKI-Eve' can intercept the cleartext transmissions of smartphones connected to modern WiFi routers and deduce individual numeric keystrokes at an accuracy rate of up to 90%, allowing numerical passwords to be stolen. [...]


https://www.bleepingcomputer.com/news/se...over-wifi/