VMware Horizon & Log4Shell, Patching Woes and USB Ransomware

 

Cybersecurity News

CyberHub Podcast

January 10th, 2021

 

Today's Headlines and the latest #cybernews from the desk of the #CISO:

Threat actor targets VMware Horizon servers using Log4Shell exploits

SonicWall Patches Y2K22 Bug in Email Security, Firewall Products

QNAP Urges Users to Secure NAS Devices as Attacks Surge

Eight New macOS Malware Families Emerged in 2021

FIN7 hackers target US companies with BadUSB devices to install ransomware

WordPress 5.8.3 Patches Several Injection Vulnerabilities

 

Story Links:

https://therecord.media/uk-nhs-threat-actor-targets-vmware-horizon-servers-using-log4shell-exploits/ (https://therecord.media/uk-nhs-threat-actor-targets-vmware-horizon-servers-using-log4shell-exploits/)

https://www.securityweek.com/sonicwall-patches-y2k22-bug-email-security-firewall-products (https://www.securityweek.com/sonicwall-patches-y2k22-bug-email-security-firewall-products)

https://www.securityweek.com/qnap-urges-users-secure-nas-devices-attacks-surge (https://www.securityweek.com/qnap-urges-users-secure-nas-devices-attacks-surge)

https://www.securityweek.com/eight-new-macos-malware-families-emerged-2021 (https://www.securityweek.com/eight-new-macos-malware-families-emerged-2021)

https://therecord.media/fbi-fin7-hackers-target-us-companies-with-badusb-devices-to-install-ransomware/ (https://therecord.media/fbi-fin7-hackers-target-us-companies-with-badusb-devices-to-install-ransomware/)

https://www.securityweek.com/wordpress-583-patches-several-injection-vulnerabilities (https://www.securityweek.com/wordpress-583-patches-several-injection-vulnerabilities)

 

“The Microsoft Doctrine” by James Azar now on Substack https://jamesazar.substack.com/p/the-microsoft-doctrine (https://jamesazar.substack.com/p/the-microsoft-doctrine)

 

The Practitioner Brief is sponsored by:

KnowBe4: https://info.knowbe4.com/phishing-security-test-cyberhub (https://info.knowbe4.com/phishing-security-test-cyberhub) 

******

Find James Azar Host of CyberHub Podcast, CISO Talk, Goodbye Privacy, Digital Debate, and Other Side of Cyber

James on Linkedin: https://www.linkedin.com/in/james-azar-a1655316/ (https://www.linkedin.com/in/james-azar-a1655316/)

Telegram: CyberHub Podcast

Gettr: @Jamesazar

******

Sign up for our newsletter with the best of CyberHub Podcast delivered to your inbox once a month: http://bit.ly/cyberhubengage-newsletter (https://www.youtube.com/redirect?v=64OtAZsDEeo&event=video_description&redir_token=7clfSb1AyXDXZa4GVIPiUJ3h9LB8MTU5MDU5MjczOUAxNTkwNTA2MzM5&q=http%3A%2F%2Fbit.ly%2Fcyberhubengage-newsletter)

******

Website: https://www.cyberhubpodcast.com (https://www.youtube.com/redirect?v=64OtAZsDEeo&event=video_description&redir_token=7clfSb1AyXDXZa4GVIPiUJ3h9LB8MTU5MDU5MjczOUAxNTkwNTA2MzM5&q=https%3A%2F%2Fwww.cyberhubpodcast.com)

Youtube: https://www.youtube.com/channel/UCPoU8iZfKFIsJ1gk0UrvGFw (https://www.youtube.com/channel/UCPoU8iZfKFIsJ1gk0UrvGFw)

Facebook: https://www.facebook.com/CyberHubpodcast/ (https://www.facebook.com/CyberHubpodcast/)

Linkedin: https://www.linkedin.com/company/cyberhubpodcast/

Twitter: https://twitter.com/cyberhubpodcast (http://www.twitter.com/cyberhubpodcast)

Instagram: https://www.instagram.com/cyberhubpodcast

Listen here: https://linktr.ee/cyberhubpodcast (https://linktr.ee/cyberhubpodcast)

 

The Hub of the Infosec Community.

Our mission is to provide substantive and quality content that’s more than headlines or sales pitches. We want to be a valuable source to assist those cybersecurity practitioners in their mission to keep their organizations secure.

 

#cybernews #infosec #cybersecurity #cyberhubpodcast #practitionerbrief