Risk Assessments/Management

Cybercriminals have been leveraging the simple KurayStealer password-stealing malware builder to launch attacks targeted at Discord users, Threatpost reports.

BleepingComputer reports that systems running on Linux and Solaris have been targeted by the BPFdoor backdoor malware for over five years without being detected.

Managed service providers have been facing the increasing threat of organized cybercrime operations with complex structures and capabilities, reports CRN.

CyberScoop reports that reducing the Defense Department's cyber authorities under the National Security Presidential Memorandum by allowing the State Department to engage in cyber operations decision-making process will slow down the U.S. Cyber Command's response to increasingly sophisticated cybersecurity threats, according to Cyberspace Solarium Commission Co-Chair Rep. Mike Gallagher, R-Wis.

Portland-based Ruby Receptionists, which offers phone-answering services to over 10,000 small businesses, had its systems affected by a cyberattack against service provider Opus Interactive, The Oregonian reports.

SecurityWeek reports that healthcare technology provider Omnicell had some of its systems and services impacted by a ransomware attack last Wednesday.

SAP has addressed the Spring4Shell vulnerability, tracked as CVE-2022-22965, impacting its Customer Profitability Analytics, Business One Cloud, and Commerce offerings, as part of this month's Security Patch Day, reports SecurityWeek.