CISA updates its bulletin (AA22-057A) on destructive malware targeting orgs in Ukraine

https://www.cisa.gov/uscert/ncas/alerts/aa22-057a

Microsoft releases a Special Report detailing that the cyber component of Russia’s war on Ukraine has been destructive and relentless.

https://query.prod.cms.rt.microsoft.com/cms/api/am/binary/RE4Vwwd

Breach of Horizon Actuarial Services exposes data for Teamsters Local 812 Retirement Fund

Click to access 20220329-horizon-cyber-security-breach.pdf

Atlassian discloses authentication by pass in Jira/Jira Service Management

https://confluence.atlassian.com/jira/jira-security-advisory-2022-04-20-1115127899.html

Unit42: AWS’s implementation of Log4shell contains vulnerabilities to privilege escalation and container escape

https://unit42.paloaltonetworks.com/aws-log4shell-hot-patch-vulnerabilities/

Lenovo UEFI vulnerability affects over 100 models of laptops

https://www.bleepingcomputer.com/news/security/lenovo-uefi-firmware-driver-bugs-affect-over-100-laptop-models/

CISA warns about impacts to liquified natural gas and electrical power facilities in the US

https://www.msn.com/en-us/news/politics/threat-of-cyberattack-on-u-s-infrastructure-takes-more-serious-turn/vi-AAWcY93

Apache finishes fix for Struts RCE vulnerability from 2021

https://securityaffairs.co/wordpress/130173/security/critical-apache-struts-rce-flaw.html

CISA: Juniper releases updates for vulnerabilities in multiple products

https://www.cisa.gov/uscert/ncas/current-activity/2022/04/14/juniper-networks-releases-security-updates-multiple-products

CISA: Patch actively exploited local privilege escalation vulnerability in Windows

https://www.bleepingcomputer.com/news/security/cisa-warns-orgs-to-patch-actively-exploited-windows-lpe-bug/