Security Architecture

Malicious actors have launched phishing attacks exploiting Microsoft Azure's Static Web Apps service to exfiltrate Microsoft, Outlook, Office365, and OneDrive account credentials.

Security researchers says while Spring4Shell may not be Log4Shell, it’s still a critical vulnerability and security teams need to do the patch and follow the remediation recommendations.

BleepingComputer reports that VMware Horizon servers vulnerable to Log4Shell are being targeted by Chinese advanced persistent threat group Deep Panda to distribute the novel Fire Chili rootkit.

The Hacker News reports that Zyxel has released fixes for a critical security flaw impacting its USG/ZyWALL, USG FLEX, ATP, VPN, and NSG offerings.

Reuters reports that the US government has held private briefings warning critical infrastructure organizations regarding the potential security risks of using Kaspersky software a day after Russia invaded Ukraine.

QNAP has issued a warning that the high-severity OpenSSL vulnerability, tracked as CVE-2022-0778, is affecting most of its network-attached storage devices.

Orca Security's product aims to help security teams conquer alert fatigue, reduce time-to-remediation, and potentially avoid damaging data breaches.

Threat actors have launched ongoing attacks aimed at internet-connected uninterruptible power supply devices, which are being leveraged as emergency power backup solutions in data centers, server rooms, industrial facilities, and hospitals.