Breach

Amazon Web Services has been urged by Access Now, Just Futures Law, the Immigration Defense Project, and other digital and human rights activists to cancel a contract with hosting the Department of Homeland Security's new biometric data collection system, which invades privacy and human rights, CyberScoop reports.

The Register reports that fixes have been issued by Zoom for a medium-severity security flaw, tracked as CVE-2022-22787, which could be abused to facilitate malicious code execution.

Trend Micro has addressed a Trend Micro Security DLL hijacking vulnerability, which has been actively exploited by Chinese threat group Moshen Dragon, BleepingComputer reports.

Cybersecurity professionals are being targeted with fake proof-of-concept exploits developed for malware delivery, according to SecurityWeek.

Meta CEO Mark Zuckerberg has been sued by the District of Columbia for his direct involvement in the breach of Facebook data by data analysis firm Cambridge Analytica.

Supply chain threats are a growing part of the landscape. In a year that included Kaseya, Outlook and SolarWinds, that has never been more clear. But the extraordinarily rapid growth makes predicting future events a little more difficult. Is the spike a one-off based on a single massive event or a new normal?

Cisco has warned that malicious actors have been actively exploiting a new medium-severity flaw in its IOS XR software, according to SecurityWeek.