A week in security (March 7 – March 13)

Last week on Malwarebytes Labs:

• The struggle to reduce bug-fixing time is real
• Update now! Mozilla patches two actively exploited vulnerabilities
• Google takes on Docs notification spammers
• When fake dating profiles try the military approach
• Azure AutoWarp brings automation headaches
• RagnarLocker ransomware gang breached 52 critical infrastructure organizations
• FormBook spam campaign targets citizens of Ukraine
• Update now! Microsoft patches three zero-day vulnerabilities on Patch Tuesday
• Twitter makes the leap to Tor
• Brave browser goes the extra mile to block third-party cookies
• Extortion scheme impersonates government officials, law enforcement
• Ransomware: February 2022 review
• Linux “Dirty Pipe” vulnerability gives unprivileged users root access
• HBO sued for sharing subscriber data with Facebook
• Blunting RDP brute-force attacks with rate limiting

Stay safe!