Cyber Threat Intelligence Weekly Newsletter Apr 25th 2022

 

Cyber Threat Intelligence Weekly Newsletter

This week's most mentioned cybersecurity topics have been covered in this newsletter for you — the latest developments, cyberattacks, data breaches, recent vulnerabilities, threat intelligence insights, and more.

Dark Web Insights

Fraud as a service: Scammers are using encrypted messaging to undercut BNPL revenue Criminals abuse Apple Pay in spending sprees Industrial Spy, a new stolen data market, is advertised via Adware and Cracks Florida woman gets jail time for trying to hire a hitman on the dark web.

Critical Vulnerabilities

Researchers detail bugs that could paralyze Snort Intrusion Detection System CVE-2022-20685 Java crypto bug allows forging of signatures, certificates CVE-2022-21449 Hackers exploiting recently reported Windows Print Spooler Vulnerability in the Wild CVE-2022-22718 Organizations warned of attacks exploiting recently patched Windows vulnerability CVE-2022-22718 and CVE-2021-34527 Google fixes Chrome zero-day being used in exploits in the wild CVE-2022-1364 Oracle releases 520 new security patches with April 2022 CPU CVE-2022-22965 7-zip vulnerability gives hackers the keys to the kingdom CVE-2022-29072 QNAP advises users to update NAS Firmware to patch Apache HTTP vulnerabilities CVE-2022-22721 and CVE-2022-23943

Trending Threat Actors

Since declaring cyberwar on Russia, Anonymous leaked 5.8 TB of Russian data Lapsus$ hackers targeted T-Mobile source code in the latest data breach Panasonic admits suffering a second cyber attack in six months with Conti ransomware gang claiming responsibility Free decryptor released for Yanluowang ransomware victims Russian Gamaredon APT continues to target Ukraine

Important Cybersecurity News

The attacker steals $182 Million from Ethereum-based Beanstalk Stablecoin Protocol New SolarMarker malware variant using updated techniques to stay under the radar New BotenaGo variant infects Lilin Security Cameras With Mirai Cybercriminals deliver IRS Tax Scams & phishing campaigns By mimicking government vendors Crypto-mining botnet goes after misconfigured Docker APIs Phishing attacks using the topic “Azovstal” targets entities in Ukraine The US, allies warn of Russian cyber threats to critical infrastructure

SOCRadar Blog

The Ultimate Guide to Brand Protection   As technology advances toward innovation, many firms seize the opportunity to thrive on the digital network. On the other side, even criminal entities enter the domain to use legitimate advances produced by corporations to bolster their destructive objectives. Indeed, these illegal companies leverage the internet to enhance their e-commerce reach to market their counterfeit or bogus goods. Fortunately, brand protection may assist in such a case.   Brand protection is the process of preventing counterfeiters, copycats, and other bad actors from illegally infringing your brand through the use of your intellectual property (IP), your brand name, and brand identity and by violating your trademarks, copyrights, patents, designs, and other types of IP.   With SOCRadar RiskPrime, monitor social media platforms such as Twitter, Facebook, and Instagram and instantly intervene in the activities of threat actors that will adversely affect your brand’s reputation.

Click here to read the full blog post