Data breach at GoDaddy impacts resellers of WordPress hosting services

https://www.bleepingcomputer.com/news/security/godaddy-data-breach-hits-wordpress-hosting-services-resellers/

Two Iranian hackers charged by the US Department of Justice for emails pretending to be “Proud Boys” by sending threatening emails to US voters

https://therecord.media/us-charges-iranian-hackers-for-spoofed-proud-boys-emails-threatening-us-voters/

CISA/FBI/ACSC/NCSC release joint advisory concerning vulnerabilities in Fortinet and Microsoft Exchange products. These are not new vulnerabilities but remain exploited

https://www.bleepingcomputer.com/news/security/us-uk-warn-of-iranian-hackers-exploiting-microsoft-exchange-fortinet/

FBI advised that it is aware an APT exploited a Zero-day in FatPipe MPVPN servers for 6 months but don’t name the actor. Patch released.

https://therecord.media/fbi-an-apt-abused-a-zero-day-in-fatpipe-vpns-for-six-months/

SentinelOne details a recent report of attacks on Apple Mac users visiting Hong Kong website supporting “pro-democracy” activism, and the backdoor those attacks create

https://www.sentinelone.com/labs/infect-if-needed-a-deeper-dive-into-targeted-backdoor-macos-macma/

Exploit for kernel vulnerabilities in Sony PS5 disclosed publicly, same day as a Google researcher claim to have access to “Debug Settings” via kernel exploit

https://securityaffairs.co/wordpress/124596/hacking/sony-ps5-exploits.html

Microsoft releases emergency patch to address a problem in the November patch cycle that broke Windows Server authentication using SSO or hybrid Azure AD. But you can’t get the fix from Windows update

https://www.bleepingcomputer.com/news/microsoft/new-microsoft-emergency-updates-fix-windows-server-auth-issues/

Attackers breach FBI email server and use it to send out fake messages to organizations claiming to be a warning from DHS/FBI about data exfiltration in their environment

https://therecord.media/official-fbi-email-server-hacked-used-to-send-fake-threat/

Costco Store suffers potential leak via credit card skimmer

https://www.bleepingcomputer.com/news/security/costco-discloses-data-breach-after-finding-credit-card-skimmer/

Dallas based email encryption giant ZIX to be acquired by OpenText

https://investor.zixcorp.com/news-releases/news-release-details/zix-be-acquired-opentexttm-850-share-cash