Russian actors “all up in” Microsoft’s business; accesses source code. Is this anything new?

https://www.independent.co.uk/news/world/americas/microsoft-russia-hackers-b2510319.html

Having problems with WiFi after updates at school or work? Try uninstalling Windows 11 KB5033375

https://www.bleepingcomputer.com/news/microsoft/decembers-windows-11-kb5033375-update-breaks-wi-fi-connectivity/

Internet outlets across the web were packed with complaints and reports of wireless connectivity issues after applying the December updates. Universities across the U.S. are recommending users uninstall the update and even mention how to do that. HERE are the steps that Microsoft recommends to uninstall an update. Search in the updates for KB5033375. It is worthy to note that not all updates are uninstallable (yes it’s a word).

There are no reports of these problems with Windows 10

U.S. Federal Agencies and other countries release advisory that Russian Foreign Intelligence Service (SVR) is exploiting vulnerability in Jetbrains TeamCity globally

According to CISA, FBI, NSA, Polish Military Counterintelligence, CERT Polska, and UK’s National Cyber Security Centre, Russian actors known by names including APT 29 are and have been exploiting servers hosting JetBrains TeamCity software since at least September, 2023. This software is used for software compilations, including building, testing and releasing software. The potential impact is pretty large, including supply chain operations (think Solarwinds). The article details IOCs

https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-347a

Click to access aa23-347a-russian-foreign-intelligence-service-svr-exploiting-jetbrains-teamcity-cve-globally_0.pdf

Joint advisory

https://nvd.nist.gov/vuln/detail/cve-2023-42793

Pharmaceutical supply chain affected after cyberattack on a leading Spanish pharmaceutical company. PII not impacted.

https://www.scmagazine.com/news/incident-response/cyberattack-hits-spanish-pharmaceutical-company-alliance-healthcare

https://cybernews.com/news/cyberattack-alliance-healthcare/

Vulnerabilities discovered in electrical vehicle chargers can cause DoS or ability change settings (i.e., charge for free)

Vulnerabilities could let hackers remotely shut down EV chargers, steal electricity

Malwarebytes details and experience with an T95 Android TV from Amazon riddled with malware

https://www.malwarebytes.com/blog/news/2023/01/preinstalled-malware-infested-t95-tv-box-from-amazon

Microsoft November patches appear to be breaking Kerberos

https://www.bleepingcomputer.com/news/microsoft/windows-kerberos-authentication-breaks-after-november-updates/

Research finds a spike registrations for semiconductors and baby formula domains

https://www.businesswire.com/news/home/20220713005060/en/CSC%E2%80%99s-Research-Uncovers-Suspicious-Domain-Registration-Surge-Amid-Baby-Formula-Supply-Chain-Crisis

https://www.cscdbs.com/en/resources-news/supply-chain-report/

June 2022 Windows patch release may break Wi-Fi hotspot connections, says Microsoft

https://www.bleepingcomputer.com/news/microsoft/microsoft-june-windows-updates-may-break-wi-fi-hotspots/

FCC adds Kaspersky to the “Covered List”; citing unacceptable risks to U.S. national security

https://www.bleepingcomputer.com/news/security/us-says-kaspersky-poses-unacceptable-risk-to-national-security/