Threat actors have been leveraging the novel FFDroider information stealer to exfiltrate browser-stored credentials and cookies and proceed in compromising targets' social media accounts, according to BleepingComputer.

Ukraine's State Service of Special Communication and Information Protection has issued a warning regarding new cyberattacks from the UAC-0094 threat cluster that have been targeting Telegram accounts, The Hacker News reports.

Intego researchers revealed that while Apple has already released emergency patches to address actively exploited zero-day code execution flaws in macOS Monterey, iPadOS, and iOS, tracked as CVE-2022-22676 and CVE-22674, it has failed to remediate the vulnerabilities in Big Sur, Catalina, and older macOS versions, reports SecurityWeek.

Experts at the Zero Trust Summit called on organizations seeking to implement a zero-trust cybersecurity model to monitor their networks with telemetry systems, FedScoop reports.

SecurityWeek reports that Google has implemented a twofold increase in rewards for eligible Google Nest and Fitbit vulnerability reports under its bug bounty program.

Malicious actors have already targeted nearly one in six organizations around the world that have been affected by the Spring4Shell zero-day remote code execution flaw, tracked as CVE-2022-22965, BleepingComputer reports.

TechCrunch reports that Block's mobile payment service Cash App has been breached after a former employee downloaded reports with sensitive information from U.S. customers.

Ten hacking groups have been launching attacks against North American and European industrial systems, with increasing activity expected within the next year, reports ZDNet.