Weekly roundup: employees targeted in AnyDesk phishing, Microsoft patches zero-days

TLDR:

Key Points:

• AnyDesk phishing campaign targets employees
• Microsoft fixes exploited zero-days

Here’s an overview of some of last week’s most interesting news:

Corporate users are being targeted in a phishing campaign using the AnyDesk remote desktop application. Microsoft has patched two zero-day vulnerabilities that were being actively exploited by attackers. German battery manufacturer Varta had to halt production after a cyberattack. A new decryptor for Rhysida ransomware is now available. QNAP Systems has fixed OS command injection flaws in its NAS devices. Hackers are exploiting a vulnerability in Ivanti devices to inject a backdoor. Gmail and Yahoo have implemented DMARC protocols for improved cyber compliance. And various new infosec products were released, including Appdome, Cyberhaven, and CompliancePro Solutions.

These developments highlight the ongoing challenges in cybersecurity and the importance of staying vigilant against evolving threats.