Network Security News Summary for Friday May 20th, 2022
Channel: Internet Storm Center Stormcast
Date: 2022-05-20

Bumblebee via TransferXL; MSFT OOB Update; SonicWall SMA1000; QNAP Deadbolt; DOJ Policy Update; Exposed Kubernetes

Bumblebee Malware from TransferXL URLs
 https://isc.sans.edu/forums/diary/Bumblebee+Malware+from+TransferXL+URLs/28664/

Microsoft Out-of-Band Update fixes Authentication Issues
 https://docs.microsoft.com/en-us/windows/release-health/status-windows-11-21h2#you-might-see-authentication-failures-on-the-server-or-client-for-services

Sonicwall Patch for SMA 1000
 https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0010

QNAP NAS Deadbolt Ransomware
 https://www.qnap.com/en/security-news/2022/take-immediate-actions-to-secure-qnap-nas-and-update-qts-to-the-latest-available-version

380,000 open Kubernetes API Servers
 https://www.shadowserver.org/news/over-380-000-open-kubernetes-api-servers/

Doj Annnounces New Polciy for Charging Cases under the Computer Fraud and Abuse Act
 https://www.justice.gov/opa/pr/department-justice-announces-new-policy-charging-cases-under-computer-fraud-and-abuse-act

keywords: Bumblebee; sonicwall; windows; patch; AD; qnap; deadbolt; kubernetes; doj;