Researchers find 80,000 unpatched Hikvision cameras still on the internet

https://www.theregister.com/2022/08/24/hikvision_camera_patch/

Iranian based bad actors exploited Log4j vulnerabilities to access SysAid app

https://www.securityweek.com/iranian-government-hackers-exploit-log4shell-sysaid-apps-initial-access

Microsoft: Bad actors exploiting log4j vulnerabilities against Israeli organizations

https://www.microsoft.com/security/blog/2022/08/25/mercury-leveraging-log4j-2-vulnerabilities-in-unpatched-systems-to-target-israeli-organizations/

Geek Squad email scams are back

They’re back, so the effort has to bear some fruit for someone. There’s a lot of good advice out there about them so I won’t rehash them all. It’s best to know that they’re fake. Just delete them and move on. I would think that all age groups have been a victim of this kind of fraud, but the elderly may be especially susceptible. Educate your parents, grandparents, aunts, uncles and their friends.

Some recent articles about them:

https://www.makeuseof.com/geek-squad-email-scam/

What is Geek Squad Email Scam and How to Avoid It?

If you’ve fallen prey to these, don’t hide that. Tell someone. Report it to your local police and/or file a report online with the FTC here: https://reportfraud.ftc.gov/#/

It might also be a good time to revisit these great tips concerning Online Privacy and Security

https://consumer.ftc.gov/identity-theft-and-online-security/online-privacy-and-security

Group-IB details the attacks on 130+ organizations that were compromised by phishing campaign targeting Okta

https://blog.group-ib.com/0ktapus

Credential stuffing attacks are using residential proxies (hacked devices)

https://www.bleepingcomputer.com/news/security/fbi-warns-of-residential-proxies-used-in-credential-stuffing-attacks/

Apple Mac and mobile users encouraged to patch now for the Zero-Days mentioned yesterday. Full access/control possible.

iPhone Users Urged to Update to Patch 2 Zero-Days

FYI, my phone didn’t present this as an option yet until I refreshed.

Apple patches Zero-Day vulnerabilities in iOS, iPadOS and macOS that may be being exploited

Google easily ate the largest DDoS attack (to date)

https://www.bleepingcomputer.com/news/security/google-blocks-largest-https-ddos-attack-reported-to-date/

Google via Bleepingcomputer.com

Apple patches Zero-Day vulnerabilities in iOS, iPadOS and macOS that may be being exploited

https://thehackernews.com/2022/08/apple-releases-security-updates-to.html

Fortinet sees a sizeable increase in ransomware variants and wiper malware in the last 6 months

Fortinet Reports Massive Increase in Ransomware Variants