Malwarebytes

A list of topics we covered in the week of December 18 to December 24 of 2023

Xfinity has notified customers that due to exploitation of the Citrix Bleed vulnerability, attackers were able to access personal data of almost 36 million customers.

Dive into the inner workings of ThreatDown Vulnerability Assessment and Patch Management

A researcher found two Microsoft vulnerabilities which could be combined to achieve zero-click remote code execution.

Google has issued an emergency update for Chrome that fixes an actively exploited zero-day vulnerability in the WebRTC component.

Pharmacy chain Rite Aid has been denied the right to run facial recognition systems in its stores for five years, by the FTC.

Learn how RaaS gangs use LOTL tactics in their attacks on organizations.

The FBI, CSA, and ACSC have released a joint cybersecurity advisory about the Play ransomware group and their MO.

In recent malvertising campaigns, threat actors dropped the MetaStealer information stealer, more or less coinciding with a new version release.

Loan and mortgage giant Mr. Cooper reported a data breach in which the personal data of 14.7 million homeowners were stolen.