ZDNet

• Log4J: BlackBerry finds Prophet Spider access broker exploiting VMware Horizon
• The Log4j flaw hasn't led to massive hacking attacks. But that doesn't mean the threat is over
• DazzleSpy: Pro-democracy org hijacked to become macOS spyware distributor
• Trickbot will now try to crash researcher PCs to stop reverse engineering attempts
• UK government security center, i100 publish NMAP scripts for vulnerability scanning

Threatpost

• Threat Actors Blanket Androids with Flubot, Teabot Campaigns
• Cyberattacks on Squid Game Minecraft Tourney Take Down Andorra’s Internet
• Ozzy Osbourne NFTs Used to Bite Off Chunk of Crypto Coin
• Segway Hit by Magecart Attack Hiding in a Favicon
• MacOS Malware ‘DazzleSpy’ Used in Watering-Hole Attacks

Darkreading

• Why It's Time to Rethink Incident Response
• Fighting Supply Chain Email Attacks With AI
• Revelstoke Launches With SOAR Platform to Automate SOCs
• Threat Actors Use Microsoft OneDrive for Command-and-Control in Attack Campaign
• How Does Threat Modeling Work in Software Development?