3 Flaws, 1 War Dominated Cyber-Threat Landscape in 2022

Attackers continued to favor software exploits, phishing, and stolen credentials as initial-access methods last year, as Log4j and the Russia-Ukraine cyber conflict changed the threat landscape.

https://www.darkreading.com/ics-ot/three...scape-2022

Popular Fitness Apps Leak Location Data Even When Users Set Privacy Zones

Unsophisticated attackers can pinpoint where a person lives by lifting metadata from Strava and other apps, even if they're using a feature specifically aimed at protecting their location information.

https://www.darkreading.com/application-...vacy-zones

Gary Bowser, Former Nintendo Hacker, Released From Prison

Originally sentenced to 40 months in prison, the former Nintendo Switch hacker is being released early due to good behavior but still owes millions.

https://www.darkreading.com/endpoint/gar...rom-prison

Google patches another actively exploited Chrome zero-day


Google has released a security update for the Chrome web browser to fix the second zero-day vulnerability found to be exploited in attacks this year. [...]


https://www.bleepingcomputer.com/news/se...-zero-day/

Hackers actively exploit critical RCE bug in PaperCut servers


Print management software developer PaperCut is warning customers to update their software immediately, as hackers are actively exploiting flaws to gain access to vulnerable servers. [...]


https://www.bleepingcomputer.com/news/se...t-servers/

UK cyber-argency warns of a new ‘class’ of Russian hackers


The United Kingdom's NCSC (National Cyber Security Centre) is warning of a heightened risk from attacks by state-aligned Russian hacktivists, urging all organizations in the country to apply recommended security measures. [...]


https://www.bleepingcomputer.com/news/se...n-hackers/

Ransomware gangs abuse Process Explorer driver to kill security software


Threat actors use a new hacking tool dubbed AuKill to disable Endpoint Detection & Response (EDR) Software on targets' systems before deploying backdoors and ransomware in Bring Your Own Vulnerable Driver (BYOVD) attacks. [...]


https://www.bleepingcomputer.com/news/se...-software/

Fortra shares findings on GoAnywhere MFT zero-day attacks


Fortra has completed its investigation into the exploitation of CVE-2023-0669, a zero-day flaw in the GoAnywhere MFT solution that the Clop ransomware gang exploited to steal data from over a hundred companies. [...]


https://www.bleepingcomputer.com/news/se...y-attacks/

Microsoft SQL servers hacked to deploy Trigona ransomware

Attackers are hacking into poorly secured and Interned-exposed Microsoft SQL (MS-SQL) servers to deploy Trigona ransomware payloads and encrypt all files. [...]


https://www.bleepingcomputer.com/news/se...ansomware/

Mini could bring EV production to North America

<p>Mini could begin building an electric crossover in BMW's Mexico factory in the second half of the decade.</p>

https://www.autonews.com/manufacturing/m...th-america