LastPass breach update: Are you following their best practices? If not (and possibly if even so), might be time to update passwords

Notice of Recent Security Incident

Okta breach results in source code stolen from their private GitHub repositories

https://www.bleepingcomputer.com/news/security/oktas-source-code-stolen-after-github-repositories-hacked/

HHS warns hospitals about ROYAL Ransomware attacks

Click to access royal-ransomware-analyst-note.pdf

Former Twitter employee found guilty for spying on behalf of Saudi Arabia

https://thehackernews.com/2022/12/ex-twitter-employee-gets-35-years-jail.html

CISA: Vulnerabilities in Veeam Backup and Replication are being exploited

https://thehackernews.com/2022/12/cisa-alert-veeam-backup-and-replication.html

FBI program Infragard hacked and membership data leaked. Hackers are said to be communicating through the portal to members

https://krebsonsecurity.com/2022/12/fbis-vetted-info-sharing-network-infragard-hacked/

SSL-VPN zero-day vulnerability

Anyone else seeing other impacted products? What else is vulnerable to ” heap-based buffer overflow vulnerability [CWE-122]”

Bad actors “actively” exploiting Zero-Day vulnerability in Citrix ADC/Gateway. Citrix releases patch.

https://www.bleepingcomputer.com/news/security/hackers-exploit-critical-citrix-adc-and-gateway-zero-day-patch-now/

PSIRT Advisory: Patch FortiOS SSL-VPN ASAP

https://www.fortiguard.com/psirt/FG-IR-22-398

Microsoft Edge and Webview2 Runtime goes End of Support in January, 2023 for Windows 7 ,Windows 8.x

https://blogs.windows.com/msedgedev/2022/12/09/microsoft-edge-and-webview2-ending-support-for-windows-7-and-windows-8-8-1/