Microsoft releases Windows 10 KB5071546 extended security update https://www.bleepingcomputer.com/news/microsoft/microsoft-releases-windows-10-kb5071546-extended-security-update/

CISA KEV Alert: WinRAR Zero-Day Used for Malware Injection and Windows UAF RCE Under Active Attack https://securityonline.info/cisa-kev-alert-winrar-zero-day-used-for-malware-injection-and-windows-uaf-rce-under-active-attack/

Microsoft Fixes Exploited Zero Day in Light Patch Tuesday https://www.darkreading.com/application-security/microsoft-fixes-exploited-zero-day-light-patch-tuesday

SAP fixes three critical vulnerabilities across multiple products https://www.bleepingcomputer.com/news/security/sap-fixes-three-critical-vulnerabilities-across-multiple-products/

Shanya Crypter Is the New Ransomware Toolkit: Uses Kernel Driver Abuse to Kill EDR https://securityonline.info/shanya-crypter-is-the-new-ransomware-toolkit-uses-kernel-driver-abuse-to-kill-edr/

The Bug That Won't Die: 10 Years of the Same Mistake https://www.recordedfuture.com/blog/the-bug-that-wont-die

GrayBravo’s CastleLoader Activity Clusters Target Multiple Industries https://www.recordedfuture.com/research/graybravos-castleloader-activity-clusters-target-multiple-industries

JS#SMUGGLER Malware Evades EDR Using “Junk Code” JavaScript and Fileless PowerShell to Deploy NetSupport RAT https://securityonline.info/jssmuggler-malware-evades-edr-using-junk-code-javascript-and-fileless-powershell-to-deploy-netsupport-rat/

AI Uncovers GhostPenguin: Undetectable Linux Backdoor Used RC5-Encrypted UDP for Covert C2 https://securityonline.info/ai-uncovers-ghostpenguin-undetectable-linux-backdoor-used-rc5-encrypted-udp-for-covert-c2/

New FvncBot Android Trojan Targets mBank Users with HVNC and H.264 Screen Streaming https://securityonline.info/new-fvncbot-android-trojan-targets-mbank-users-with-hvnc-and-h-264-screen-streaming/