Subj : Sophos Virus News
To   : All
From : Daryl Stout
Date : Tue Oct 18 2022 15:48:15

Here is the latest information from the Naked Security Blog from Sophos.
You can go to nakedsecurity.sophos.com to read these. You can also sign
up to have these delivered to your email during the week.

***

Dangerous hole in Apache Commons Text - like Log4Shell all over again

Third time unlucky. Time to put your patching boots on again...

***
	
Zoom for Mac patches sneaky "spy-on-me" bug - update now!

Hey! That back door isn't supposed to be there at all, let alone 
propped open...

***

Fashion brand SHEIN fined $1.9m for lying about data breach.

Is "pay a small fine and keep on trading" a sufficient penalty for
letting a breach happen, impeding an investigation, and hiding the
truth??

***

Serious Security: Microsoft Office 365 attacked over feeble encryption

How 2022 is your encryption?

***

S3 Ep104: Should hospital ransomware attackers be locked up for life?
[Audio + Text]

Have your say on three deep questions posed by this week's podcast. 
Read or listen as suits you best...

***

Patch Tuesday in brief - one 0-day fixed, but no patches for Exchange!

There's a zero-day patch, but it's not for the zero-day you thought.
	
***
--- SBBSecho 3.15-Win32
 * Origin: The Thunderbolt BBS - Little Rock, Arkansas (454:1/33)

.