MSDT RCE vulnerability is actively being exploited in the wild. CISA advises admins to disable the MSDT protocol

https://www.bleepingcomputer.com/news/security/windows-msdt-zero-day-now-exploited-by-chinese-apt-hackers/

Microsoft issued CVE-2022-30190 for Microsoft Support Diagnostic Tool Zero Day Vulnerability. Work around is to disable MSDT URL Protocol

https://msrc-blog.microsoft.com/2022/05/30/guidance-for-cve-2022-30190-microsoft-support-diagnostic-tool-vulnerability/

Red Canary finds malware on USB drives. (Do people really still share USB drives?)

https://www.techradar.com/news/this-dangerous-new-malware-is-attacking-windows-devices-via-infected-usb-drives

Patch F5 BIG-IP immediately says researchers that were able to easily create exploit code

https://www.bleepingcomputer.com/news/security/exploits-created-for-critical-f5-big-ip-flaw-install-patch-immediately/

Are you ready? Internet Explorer is going away and Microsoft doesn’t want you to wait for June 15th, 2022.

https://www.techradar.com/news/microsoft-is-now-practically-begging-you-to-stop-using-internet-explorer

Just in time for the weekend: Xbox is down

https://www.bleepingcomputer.com/news/technology/xbox-is-down-worldwide-with-users-unable-to-play-games/

https://support.xbox.com/en-GB/xbox-live-status

From the desk of How Does Even This Happen?: U.S. DoD tricked into paying $23.5 million to bad actor in phish and fraud domain

https://www.bleepingcomputer.com/news/security/us-dod-tricked-into-paying-235-million-to-phishing-actor/