Weekly Security Roundup - Jan 21, 2024

This Week’s Updates

Atlassian warns their Confluence Data Center and Confluence Server software have a critical vulnerability

The X account of Peterborough, Ontario, had been taken over by an attacker, and posting cryptocurrency scams

Google has released software updates to Chrome to address a zero-day vulnerability

Citrix is warning of active exploitation of two zero-day vulnerabilities in its Netscaler ADC and Gateway appliances

GitHub rotated keys after fixing a vulnerability in December

CISA and FBI are warning of Androxgh0st botnet stealing AWS, Microsoft and other credentials

71 million emails added to Have I Been Pwned breach notification service

VMware has confirmed patched vCenter flaw has been exploited in attacks

City of Toronto to integrate IT systems of Toronto Zoo and Toronto Public Library

VF Corporation has revealed personal information of 35 million customers have been stolen

Microsoft has revealed some of their corporate email accounts had been breached