North Korean Hackers Spread AppleJeus Malware Disguised as Cryptocurrency Apps

The Lazarus Group threat actor has been observed leveraging fake cryptocurrency apps as a lure to deliver a previously undocumented version of the AppleJeus malware, according to new findings from Volexity. "This activity notably involves a campaign likely targeting cryptocurrency users and organizations with a variant of the AppleJeus malware by way of malicious Microsoft Office documents,"
http://dlvr.it/SdvwQN

Critical Ping Vulnerability Allows Remote Attackers to Take Over FreeBSD Systems

The maintainers of the FreeBSD operating system have released updates to remediate a security vulnerability impacting the ping module that could be potentially exploited to crash the program or trigger remote code execution. The issue, assigned the identifier CVE-2022-23093, impacts all supported versions of FreeBSD and concerns a stack-based buffer overflow vulnerability in the ping service. "
http://dlvr.it/SdvwL8

Space CyberSecurity Resilience: Cyber Risk Meetups with the South Australian Space Sector - Australia Cyber Security Magazine

Space CyberSecurity Resilience: Cyber Risk Meetups with the South Australian Space Sector  Australia Cyber Security Magazine
http://dlvr.it/SdrtVp

Briefcase: REDW practice names new IT, cybersecurity director - Albuquerque Journal

Briefcase: REDW practice names new IT, cybersecurity director  Albuquerque Journal
http://dlvr.it/SdpjQF

Google Accuses Spanish Spyware Vendor of Exploiting Chrome, Firefox, & Windows Zero-Days

A Barcelona-based surveillanceware vendor named Variston IT is said to have surreptitiously planted spyware on targeted devices by exploiting several zero-day flaws in Google Chrome, Mozilla Firefox, and Windows, some of which date back to December 2018. "Their Heliconia framework exploits n-day vulnerabilities in Chrome, Firefox, and Microsoft Defender, and provides all the tools necessary to
http://dlvr.it/SdmchG

LastPass Suffers Another Security Breach; Exposed Some Customers Information

Popular password management service LastPass said it's investigating a second security incident that involved attackers accessing some of its customer information. "We recently detected unusual activity within a third-party cloud storage service, which is currently shared by both LastPass and its a...
http://dlvr.it/Sdjm8k

CITE 2022: Overcome Common Cybersecurity Challenges and Prepare for 2023's Growing Threats - EdTech Magazine: Focus on K-12

CITE 2022: Overcome Common Cybersecurity Challenges and Prepare for 2023's Growing Threats  EdTech Magazine: Focus on K-12
http://dlvr.it/SdfhFS