Chrome high severity Zero-Day vulnerability forces new patch

https://thehackernews.com/2023/06/zero-day-alert-google-issues-patch-for.html

Luxury brands targeted through a data leak from the Dorben Group, a partner for Valentino, Creed and Michael Kors.

https://cybernews.com/news/hackers-target-valentino-michael-kors-creed/

Remote controller boards (baseboard management controller, aka BMC) used for lights-out technologies might be coming to an end

https://www.darkreading.com/vulnerabilities-threats/firmware-flaws-could-spell-lights-out-for-servers

Specops releases the top passwords being sprayed in RDP attacks

Top passwords used in RDP brute-force attacks

Microsoft: Russian-aligned bad actors phishing disrupted (for now)

https://thehackernews.com/2022/08/microsoft-warns-about-phishing-attacks.html

VNC: Not only is it still used, there are still ~9,000 instances exposed to the public internet without authentication

https://www.bleepingcomputer.com/news/security/over-9-000-vnc-servers-exposed-online-without-a-password/

Cyble via Bleepingcomputer.com

FFIEC looks for feedback on the Cybersecurity Assessment Tool (CAT)

https://www.govinfosecurity.com/ffiec-solicits-comments-on-cybersecurity-assessment-tool-a-19730

VMware: Patch authentication bypass and other vulnerabilities ASAP

https://www.bleepingcomputer.com/news/security/vmware-urges-admins-to-patch-critical-auth-bypass-bug-immediately/

Cloudflare: Largest yet HTTPS DDoS mitigated

https://therecord.media/cloudflare-says-it-stopped-largest-https-ddos-attack-on-record-last-week/

Barracuda Networks to be acquired by investment firm KKR

https://www.barracuda.com/news/article/847