YouTube used to distribute malware and steal data

https://blog.cyble.com/2022/06/30/infostealer/

IIS and Exchange Servers backdoored by SessionManager malware

https://www.bleepingcomputer.com/news/security/microsoft-exchange-servers-worldwide-backdoored-with-new-malware/

The SessionManager IIS backdoor

https://securelist.com/the-sessionmanager-iis-backdoor/106868/

https://www.darkreading.com/attacks-breaches/new-sessionmanager-exchange-server-backdoor-globally

RCE vulnerability in ManageEngine ADAudit Plus allows for data exfiltration and network “takeover”

https://www.darkreading.com/vulnerabilities-threats/manageengine-adaudit-plus-vulnerability-network-takeover-data-exfiltration

Flagstar Bank provides Breach Notification to Maine Attorney General six months after a breach. 1.5 million affected.

https://www.msn.com/en-us/money/personalfinance/bank-data-breach-exposes-1-5-million-social-security-numbers/ar-AAYQVwp

CISA releases advisory on bad actors exploiting Log4Shell on VMware Horizon systems

https://www.cisa.gov/uscert/ncas/alerts/aa22-174a

Zero-Day in Mitel VoIP appliance leads to RCE/ Ransomware attack

Hackers Exploit Mitel VoIP Zero-Day in Likely Ransomware Attack (thehackernews.com)

Cisco: Upgrade (replace) EoL VPN devices

Cisco tells customers to upgrade VPN routers or risk attack (msn.com)

Cloudflare: Largest yet HTTPS DDoS mitigated

https://therecord.media/cloudflare-says-it-stopped-largest-https-ddos-attack-on-record-last-week/

June 2022 Windows patch release may break Wi-Fi hotspot connections, says Microsoft

https://www.bleepingcomputer.com/news/microsoft/microsoft-june-windows-updates-may-break-wi-fi-hotspots/

FIXED: Authentication Bypass vulnerability in Cisco ESA, Secure Email and Web Manager

https://securityaffairs.co/wordpress/132327/hacking/cisco-esa-critical-flaw.html