Advisory about BIND vulnerabilities released

This shouldn’t be available by default but it’s worth checking
https://www.zdnet.com/article/isc-urges-updates-of-dns-servers-to-wipe-out-new-bind-vulnerabilities/

Nagios vulnerability used for crypto mining

https://unit42.paloaltonetworks.com/nagios-xi-vulnerability-cryptomining/

It was simple Social Engineering. QR code lead to fake COVID checking site (illegal in South Australia)

Anti-Vaxxer Hijacks QR Codes at COVID-19 Check-In Sites

Ready for Windows 10 May update?

Nothing big planned…other than it’s a MS update
https://www.bleepingcomputer.com/news/microsoft/microsoft-is-preparing-to-release-the-windows-10-may-2021-update/

Scary statistics about exposed database servers in the “cloud”.

https://therecord.media/two-million-database-servers-are-currently-exposed-across-cloud-providers/

Chrome 90: More bugs addressed. Patch now. You should be at 90.0.4430.93 (patch again if you patched yesterday).

Google Chrome V8 Bug Allows Remote Code-Execution

Why you can’t trust email: Fake Chase Bank phishing slips past Exchange Online protections.

Chase Bank Phish Swims Past Exchange Email Protections

Android malware via SMS spreading via texts claiming to be about missed package deliveries #flubot

Flubot Spyware Spreading Through Android Devices

Emotet botnet harvested 4.3 million email addresses and the FBI turned them over to the Have I been Pwned website

https://www.zdnet.com/article/emotet-botnet-harvested-4-3-million-email-addresses-now-the-fbi-is-using-have-i-been-pwned-to-alert-the-victims/

More on the Apple Gatekeeper problem

Apple Patches Zero-Day MacOS Bug That Can Bypass Anti-Malware Defenses