Google’s Mandiant say it observed four instances of pro-Russian hacktivist groups publishing data within 24 hours of it being stolen by GRU using wiper malware (Wall Street Journal)

Andy Greenberg / Wired:
VMware and Google’s Mandiant say a sophisticated hacker group has been installing backdoors in VMware’s virtualization software on multiple targets’ networks  —  For decades, security researchers warned about techniques for hijacking virtualization software.  Now one group has put them into practice.

Hoakley / The Eclectic Light Company:
Apple quietly updates macOS malware protections to scan more frequently, bringing the OS malware protection on par with many commercial anti-malware products  —  In the last six months macOS malware protection has changed more than it did over the previous seven years.

Along with a rise in ransomware attacks and phishing scams, school districts are facing a new threat: distributed denial of service (DDoS) attacks. These cyberthreats halt districts’ ability to perform functions online by flooding the target systems with a high volume of requests simultaneously. In an age where schools rely on the internet for everything from teaching and attendance taking to managing school lunches, these shutdowns can cause major disruptions.
While in some instances the disruption is perpetrated by professional threat actors, schools are increasingly finding their own …

Todd Spangler / Variety:
Roku reports Q3 revenue up 12% YoY to $761.4M vs. $694M est., 21.9B streaming hours, and 2.3M streaming accounts added; stock drops 17%+ on weak Q4 guidance  —  Roku handily topped Wall Street estimates for the third quarter of 2022, as the streaming platform and media company packed …

Stuart A. Thompson / New York Times:
Pew survey of 24,525 people from 19 countries shows 70% rate misinformation as a “major threat”, compared to 75% for climate change and 67% for cyberattacks  —  New research from the Pew Research Center shows nearly three-quarters of respondents are very concerned about the spread of false information online.

Bill Toulas / BleepingComputer:
Symantec details an ongoing campaign by the Witchetty hacking group, potentially tied to a China-backed threat actor, that hides malware in a Windows logo image  —  Security researchers have discovered a malicious campaign by the ‘Witchetty’ hacking group, which uses steganography to hide a backdoor malware in a Windows logo.