Office 365 Zero-Day is being exploited by new version of FormBook says Trend Micro

https://blueteam.news/formbook-adds-latest-office-365-0-day-vulnerability-cve-2021-40444-to-its-arsenal/

Visa charges possible via Apple Pay on locked iPhone

https://securityaffairs.co/wordpress/122781/hacking/apple-pay-visa-iphone-attack.html

Bad actors are taking advantage of Atlassian Confluence vulnerability disclosed earlier this month

https://thehackernews.com/2021/09/atlassian-confluence-rce-flaw-abused-in.html

New Microsoft Exchange service intends to mitigate high-risk vulnerabilities… automatically, including disabling services for on-premise servers

https://www.bleepingcomputer.com/news/microsoft/new-microsoft-exchange-service-mitigates-high-risk-bugs-automatically/

Zix credential phishing campaign underway… sent as fake Zix message

https://cybernews.com/news/watch-out-this-new-phishing-attack-might-be-targeting-your-business-mailbox/

Source: Armorblox via https://media.cybernews.com/2021/09/zix%20phishing%20attack%20picture%201.png

Patch for Trend Micro vulnerability in ServerProtec is out!

https://securityaffairs.co/wordpress/122694/security/trend-micro-serverprotec-solution-flaw.html

If you talked to someone today (or recently) at a call center, and it sounded horrible, know that VOIP providers still being hit by DDoS attacks

https://www.bleepingcomputer.com/news/security/bandwidthcom-is-latest-victim-of-ddos-attacks-against-voip-providers/

From the desk of “Things you shouldn’t have to worry about”; Shares a desk with “Things you should worry about”

Unauthenticated Remote Code Execution in Motorola Baby Monitors

This is dirty: Newly discovered malware for sale on dark web steals credentials and other data (like bank cards) from targeted platforms like Steam, EA Origin, Epic Games and GOG Galaxy and others

https://www.bleepingcomputer.com/news/security/new-malware-steals-steam-epic-games-store-and-ea-origin-accounts/

Following recent vulnerabilities in on-prem Basic Authentication, Microsoft Exchange online will have Basic Auth disabled in October, 2021

https://www.bleepingcomputer.com/news/microsoft/microsoft-will-disable-basic-auth-in-exchange-online-in-october-2022/