An Iranian APT is actively targeting unpatched VMWare Horizon systems to exploit Log4j vulnerabilities. The APT is destructive and these attacks often lead to full Ransomware deployment in the victim’s environment.
See the full Sentinel One synopsis here:
Chinese hackers use SparroWocky malware in govt espionage attacks Article Link: https://www.bleepingcomputer.com/news/security/chinese-hackers-use-sparrowocky-malware-in-govt-espionage-attacks/ What does this mean for me? CISA decides weekly vulnerability bulletin isn’t necessary
Passkey-Themed Phishing Attacks Lead to Microsoft 365 Data Theft Article Link: https://www.bleepingcomputer.com/news/security/passkey-themed-phishing-attacks-lead-to-microsoft-365-data-theft/ What does this mean for me? Florida DMV Database Breached Through Stolen Police
