Microsoft 365 Defender team released a post detailing several identified vulnerabilities. These vulnerabilities allow adversarial groups to escalate privileges on Linux systems, allowing for deployment of payloads, ransomware, or other attacks.

Provide executive-level details about CVE-2022-22965, a recently-disclosed remote code execution (RCE) vulnerability also known as “Spring4Shell”.

Elastic Security is releasing detection logic for the Dirty Pipe exploit.

Elastic Security discovered PHOREAL malware, which is targeting Southeast Asia financial organizations, particularly those in the Vietnamese financial sector.

Elastic Security verifies new destructive malware targeting Ukraine: Operation Bleeding Bear

Campaign research and analysis of an observed FORMBOOK intrusion attempt.