Infosec bits for 2023 week 8

Write your post here.

1. Security news
   • WhatsApp, Grindr, and Facebook used to entrap and persecute LGBT citizens, says report [Damien Black, Cybernews]
   • Google Paid Over $12 Million As Bug Bounty Rewards In 2022 [Guru, Cyber Security News]
   • Microsoft urges Exchange admins to remove some antivirus exclusions [Sergiu Gatlan, BleepingComputer]
   • GoDaddy says a multi-year breach hijacked customer websites and accounts | Ars Technica [Dan Goodin, Ars Technica]
2. Malware
   • Beware! Fake ChatGPT Windows & Android Apps Deliver Dangerous Malware [Balaji N, Cyber Security News]
   • Hackers Using Trojanized macOS Apps to Deploy Evasive Cryptocurrency Mining Malware [Ravie Lakshmanan, The Hacker News]
   • New RambleOn Android Malware Used Against Journalist [Cyware, Cyware]
   • Ransomware Attack Forces Produce Giant Dole to Shut Down Plants [Eduard Kovacs, Security Week]
   • LockBit gives up on Royal Mail ransom, leaks data and private chats [Damien Black, Cybernews]
   • Washington State city allegedly hit by ransomware [Jurgita Lapienytė, Cybernews]
   • MyloBot Botnet Spreading Rapidly Worldwide: Infecting Over 50,000 Devices Daily [Ravie Lakshmanan, The Hacker News]
3. Vulnerabilities and Patches
   • A New Kind of Bug Spells Trouble for iOS and macOS Security [Matt Burgerss, Wired]
   • Apple Patches Multiple Vulnerabilities In Latest Security Updates – Spiceworks [Anuj Mudaliar, Spiceworks]
   • Cisco Patches High-Severity Vulnerabilities in ACI Components [Eduard Kovacs, Security Week]
   • Exploit released for critical Fortinet RCE flaw, patch now [Bill Toulas, BleepingComputer]