In this week’s cybersecurity news roundup, we see a range of alarming developments from sophisticated malware campaigns to vulnerabilities in major cloud services. As threat actors continue to adapt and evolve their tactics, staying informed is crucial for both individuals and organizations.<\/p>\n
<\/p>\n
Threat actors associated with North Korea have launched a sophisticated malvertising campaign targeting macOS users. This attack involves redirecting victims to fake update screens to deliver crypto-stealing malware, marking a new phase in the long-running Contagious Interview campaign. Read more<\/a>.<\/p>\n A recently patched vulnerability in Azure Cosmos DB could have allowed attackers to escape the service’s Gremlin query sandbox, gaining full read and write access to databases across customer tenants. This exploit chain, labeled CosmosEscape by Wiz, highlights serious security concerns for cloud-based services. Read more<\/a>.<\/p>\n Microsoft 365 Copilot for Word has been found to copy hidden instructions embedded within documents, potentially leading to unintended content alterations in final reports. The issue was disclosed by security researcher H\u00e5kon M\u00e5l\u00f8y, raising questions about the implications for document integrity. Read more<\/a>.<\/p>\n Russian threat actors have exploited a vulnerability in Microsoft Outlook Web Access (OWA) to target various sectors, including government and telecommunications. This exploitation allows attackers to maintain mailbox access even after credentials are rotated, posing significant risks to affected organizations. Read more<\/a>.<\/p>\nAzure Cosmos DB Vulnerability Exposed<\/strong><\/h3>\n
Microsoft Copilot Can Copy Hidden Prompts<\/strong><\/h3>\n
Russian Hackers Exploit Microsoft OWA Vulnerability<\/strong><\/h3>\n
FCC Blocks Foreign Robots and Power Inverters<\/strong><\/h3>\n