Microsoft Plugs Nearly 400 Security Holes

KrebsOnSecurity reporting covers major cybersecurity developments including Microsoft security updates addressing hundreds of vulnerabilities, active exploitation, cloud data theft and extortion involving Snowflake customers, malicious or fraudulent use of generic streaming devices and smart TVs as residential proxies, a CISA credential leak involving AWS GovCloud keys, offensive zero-day acquisition activity, law-enforcement disruption of the NetNut/Popa botnet ecosystem, and prosecutions of Scattered Spider members.