Weekly Tip 65

Cybercriminals Exploit Google Sheets for Advanced Malware Operations Overview Cybersecurity researchers have taken over a highly-intricate malware. It is using Google Sheets as a command-and-control infrastructure. This operation dates back to August 5, 2024. There were

Attackers Exploit Public .env Files to Compromise Cloud & Social Media Overview A large-scale extortion campaign targets cloud and social media accounts. Palo Alto Networks reports that attackers exploited publicly accessible .env files containing sensitive credentials

GhostWrite Vulnerability in T-Head CPUs Exposes Devices to Unrestricted Access Overview A critical architectural flaw in T-Head’s XuanTie C910 and C920 RISC-V CPUs was uncovered by recent research from the CISPA Helmholtz Center for Information Security. Dubbed GhostWrite, the vulnerability