The FBI and CISA say an Iranian-backed threat group hacked a US Federal Civilian Executive Branch and deployed XMRig cryptomining malware via the Log4Shell flaw (Sergiu Gatlan/BleepingComputer)

Sergiu Gatlan / BleepingComputer:
2K, owned by Take Two Interactive and publisher of Bioshock, Xcom, and popular sports games, says its help desk was hacked and sent customers links to malware  —  American video game publisher 2K has confirmed that its help desk platform was hacked and used to target customers …

Sergiu Gatlan / BleepingComputer:
The FBI says the Hive ransomware gang has extorted ~$100M from 1,300+ organizations, including government facilities and public health entities, since June 2021  —  The Federal Bureau of Investigation (FBI) said today that the notorious Hive ransomware gang has successfully extorted roughly $100 million …

Sergiu Gatlan / BleepingComputer:
Alongside iOS 16, Apple releases iOS and iPadOS 15.7, macOS Monterey 12.6, and macOS Big Sur 11.7 to fix the eighth actively exploited 0-day since January 2022  —  Apple has released security updates to address the eighth zero-day vulnerability used in attacks against iPhones and Macs since the start of the year.

Sergiu Gatlan / BleepingComputer:
Signal will start phasing out SMS and MMS support from its Android app; users have a few months to transition away from SMS and export messages to another app  —  Signal says it will start to phase out SMS and MMS message support from its Android app to streamline the user experience and prioritize security and privacy.

Sergiu Gatlan / BleepingComputer:
Windows Subsystem for Linux is now generally available for Windows 10 and 11 via the Microsoft Store, as Microsoft makes the Store version of WSL the default  —  Microsoft announced today that the Store version of Windows Subsystem for Linux (WSL) is generally available for Windows 10 and 11 customers.

Sergiu Gatlan / BleepingComputer:
Dropbox says hackers stole code and some API keys from 130 GitHub repositories via a phishing campaign, but its core apps and infrastructure were unaffected  —  Dropbox disclosed a security breach after threat actors stole 130 code repositories after gaining access to one of its GitHub …