News & Notes: July 28, 2021

• Twitter will soon let you log in with your Google account.
  • “Twitter has started testing a new feature that allows users to sign up for an account using their existing Google account.” via Bleeping Computer

• eScan’s Mobile Security Application Capable of Detecting and Blocking Pegasus Spyware.
  • The Global Spyware Market Index Report from Top10VPN.com revealed some startling statistics:
    • 74 countries have bought and/or used invasive spyware technology since 2015.
    • Spyware firms: 86% are based in countries considered full or flawed democracies by the EIU.
    • Suspected customers: 55% are authoritarian or hybrid regimes, with only 7% considered full democracies.
    • FinFisher has the most reported state customers (34), followed by Circles (25), and NSO Group (23).

• FBI reveals top targeted vulnerabilities of the last two years.

• Critical Microsoft Hyper-V bug could haunt orgs for a long time

• New Windows 10 KB5005394 emergency update fixes printing issues.

• Two Critical Vulnerabilities Identified in Zimbra Webmail Solution.
  • CVE-2021-35208
    • Cross-Site Scripting (XSS) flaw “that triggers in a victim browser via a malicious email with a specially crafted JavaScript payload. If exploited successfully, the flaw enables an attacker to obtain illicit access to the victims’ email accounts and their webmail sessions”.
  • CVE-2021-35209
    • Server-Side Request Forgery (SSRF) flaw “that can be exploited by a remote attacker by combining it with the XSS vulnerability. The flaw allows unauthorized access to Zimbra’s HTTP client and pilfer private information like access tokens and credentials from Google Cloud and Amazon Web Services”.

• UC San Diego Health discloses data breach after phishing attack.

• Florida DEO Suffers Data Breach, Over 57K Accounts Affected.

• LockBit ransomware now encrypts Windows domains using group policies.

• Northern Ireland’s Department of Health (DoH) has temporarily halted its COVID-19 vaccine certification online service following a data exposure incident.

• New BlackMatter ransomware group claims to be Darkside and REvil succesor.