For individuals

Numerous Android and Java apps leveraging abandoned open-source libraries, including all technologies based on Apache Maven, could be compromised through the novel MavenGate software supply chain attack technique, reports The Hacker News.

Cryptowallet-targeting macOS backdoor spread via cracked software BleepingComputer reports that threat actors have leveraged cracked macOS software to facilitate the distribution of information-stealing malware targeting cryptocurrency wallets on devices running on at least macOS Ventura.

Significant enhancements to bolster stealth have been added to the latest variant of the Chaes malware identified as "Chae$ 4.1," Hackread reports.

Major Irish global aircraft leasing firm AerCap has been impacted by a ransomware attack on Jan. 17, which the newly emergent Slug ransomware gang has since claimed, reports The Register.

U.S. multinational fast food chain Subway had its internal system claimed to be compromised by the LockBit ransomware operation, resulting in the theft of a trove of sensitive financial information, The Register reports.

Hackread reports that hardware cryptocurrency wallet Trezor had almost 66,000 users' contact information possibly exfiltrated following a breach of its third-party support portal.

Major Ukrainian online bank Monobank faced a distributed denial-of-service attack over the weekend that involved 580 million service requests, marking the bank's largest DDoS attack yet amid the spate of such incidents against financial organizations across the country, reports The Record, a news site by cybersecurity firm Recorded Future.

The new bug is Apple's 12th WebKit zero-day in the last year, highlighting the increasing enterprise exposure to browser-borne threats.

While the challenges and risks associated with securing cloud-native environments are significant, with the right security measures and a focus on cybersecurity basics, organizations can effectively secure their cloud-native systems and development pipelines.