It’s been four months since the Log4j issue exploded onto the internet. All the major software vendors affected by it have by now released patches – but even where companies have patched, it would be wrong to relax.
FBI Warns of Ransomware Attacks Targeting Local Governments
The Federal Bureau of Investigation (FBI) this week warned local government entities of ransomware attacks disrupting operational services, causing public safety risks, and causing financial losses.
PCI Data Security Standard v4.0 Released to Address Emerging Threats

The PCI Security Standards Council (SSC), the organization that oversees the Payment Card Industry Data Security Standard (PCI DSS), this week announced the release of PCI DSS v4.0.
New Vulnerabilities Allow Stuxnet-Style Attacks Against Rockwell PLCs
Researchers at industrial cybersecurity firm Claroty have identified two serious vulnerabilities that could allow malicious actors to launch Stuxnet-style attacks against programmable logic controllers (PLCs) made by Rockwell Automation.
Trend Micro Patches Apex Central Zero-Day Exploited in Targeted Attacks
Trend Micro this week announced patches for a high-severity arbitrary file upload vulnerability in Apex Central that has already been exploited in what appear to be targeted attacks.
Spring4Shell Exploitation Attempts Confirmed as Patches Are Released

The Spring zero-day vulnerability named Spring4Shell (SpringShell) has been patched, just as several cybersecurity firms have confirmed seeing exploitation attempts.
Antimatter Emerges From Stealth Mode With $12M to Secure Customer Data
Antimatter, a startup that focuses on data security for SaaS applications, this week emerged from stealth mode with $12 million in Series A funding from NEA, with additional investment from General Catalyst, UNION Labs, and several angel investors.
UK Spy Chief Warns Russia Looking for Cyber Targets
A U.K. intelligence chief warned that the Kremlin is hunting for cyber targets and bringing in mercenaries to shore up its stalled military campaign in Ukraine.
Apple Ships Emergency Patches for ‘Actively Exploited’ macOS, iOS Flaws
Apple’s security response team on Thursday released emergency patches to cover a pair of “actively exploited” vulnerabilities affecting macOS, iOS and iPadOS devices.
New Modem Wiper Malware May be Connected to Viasat Hack
A pair of security researchers at SentinelLabs have intercepted a piece of destructive wiper malware hitting routers and modems and found digital breadcrumbs suggesting a link to the devastating Viasat hack that took down wind turbines in Germany.












