A week in security (April 4 – 10)

Last week on Malwarebytes Labs:

• Why data protection and privacy are not the same, and why that matters: Lock and Code S03E09
• YouTube channels of Taylor Swift, Justin Bieber, Harry Styles, and other musicians compromised
• Successful operations against Russian Sandworm and Strontium groups targeting Ukraine revealed
• Don’t enter your recovery phrase! Phishers target Ledger crypto-wallet users
• Watch out for fake WhatsApp “New Incoming Voicemessage” emails
• Cash App breached by a former employee could affect millions
• Beware Ukraine-themed fundraising scams
• Colibri Loader combines Task Scheduler and PowerShell in clever persistence technique
• CISA advises D-Link users to take vulnerable routers offline
• GitLab issues security updates; watch out for hard coded passwords
• 5 ways to spring clean your security
• “Free easter chocolate basket” is a social media scam after your personal details
• Update now! Zyxel patches critical firewall bypass vulnerability

Stay safe!

The post A week in security (April 4 – 10) appeared first on Malwarebytes Labs.