New HTTP/2 DOS attack. New Spectre v2 attack. Lastpass hack attempt with deepfake CEO. Quick version.

Hi friends,

It's a quick version today, I simply ran out of time this week :-) Enjoy and have a good weekend!

• Congress sounds alarm on lax dam cybersecurity: link.
• Germany to launch cyber military branch to combat Russian threats: link.
• Hackable Intel and Lenovo hardware that went undetected for 5 years won’t ever be fixed: link.
• Google Workspace rolls out multi-admin approval feature for risky changes: link.
• Chrome Enterprise gets Premium security but you have to pay for it: link.
• Ivanti CEO pledges to “fundamentally transform” its hard-hit security model: link.

• US cancer center data breach exposes info of 827,000 patients: link.
• AT&T: Data breach affects 73 million or 51 million customers. No, we won’t explain.: link.
• Panera Bread week-long IT outage caused by ransomware attack: link.
• Acuity confirms hackers stole non-sensitive govt data from GitHub repos: link.
• Home Depot confirms third-party data breach exposed employee info: link.
• Cyberattack on UK’s CVS Group disrupts veterinary operations: link.
• Optics giant Hoya hit with $10 million ransomware demand: link.
• Universities in New Mexico, Oklahoma respond to ransomware attacks: link.
• After failed ransomware attack, hackers stole data on 533k people from Wisconsin insurance company: link.
• German database company Genios confirms ransomware attack: link.
• Computer accessory giant Targus says cyberattack interrupting business operations: link.
• French football club PSG says ticketing system targeted by cyberattack: link.
• DOJ data on 341,000 people leaked in cyberattack on consulting firm: link.
• Pacific Guardian Life Insurance says 165,000 had financial info stolen in 2023 attack: link.
• Thousands of staff, students have sensitive data stolen in University of Winnipeg hack: link.

• Critical takeover vulnerabilities in 92,000 D-Link devices under active exploitation: link.
• New Ivanti RCE flaw may impact 16,000 exposed VPN gateways: link.
• Palo Alto Networks warns of PAN-OS firewall zero-day used in attacks: link.
• Over 90,000 LG Smart TVs may be exposed to remote attacks: link.
• Microsoft fixes two Windows zero-days exploited in malware attacks: link.
• Critical Rust flaw enables Windows command injection attacks: link.
• New SharePoint flaws help hackers evade detection when stealing files: link.