This isn’t Optimus Prime’s Bumblebee but it’s Still Transforming
https://www.proofpoint.com/us/blog/threat-insight/bumblebee-is-still-transforming

Package Planting: Are You [Unknowingly] Maintaining Poisoned Packages?
https://blog.aquasec.com/npm-package-planting

Facing reality? Law enforcement and the challenge of deepfakes
https://www.europol.europa.eu/publications-events/publications/facing-reality-law-enforcement-and-challenge-of-deepfakes
https://www.europol.europa.eu/cms/sites/default/files/documents/Europol_Innovation_Lab_Facing_Reality_Law_Enforcement_And_The_Challenge_Of_Deepfakes.pdf

Trello From the Other Side: Tracking APT29 Phishing Campaigns
https://www.mandiant.com/resources/tracking-apt29-phishing-campaigns

India Orders VPN Companies to Collect and Hand Over User Data
https://www.cnet.com/news/privacy/india-orders-vpn-companies-to-collect-and-hand-over-user-data/

Moshen Dragon’s Triad-and-Error Approach | Abusing Security Software to Sideload PlugX and ShadowPad
https://www.sentinelone.com/labs/moshen-dragons-triad-and-error-approach-abusing-security-software-to-sideload-plugx-and-shadowpad/

Conti, REvil, LockBit ransomware bugs exploited to block encryption
https://www.bleepingcomputer.com/news/security/conti-revil-lockbit-ransomware-bugs-exploited-to-block-encryption/

Avast Q1/2022 Threat Report
https://decoded.avast.io/threatresearch/avast-q1-2022-threat-report/

Augury - Using Data Memory-Dependent Prefetchers to Leak Data at Rest
https://www.prefetchers.info/
https://www.prefetchers.info/augury.pdf

Thanks for sharing.

Update on cyber activity in Eastern Europe
https://blog.google/threat-analysis-group/update-on-cyber-activity-in-eastern-europe/

UNC3524: Eye Spy on Your Email
https://www.mandiant.com/resources/unc3524-eye-spy-email

The Hermit Kingdom’s Ransomware play
https://www.trellix.com/en-us/about/newsroom/stories/threat-labs/the-hermit-kingdoms-ransomware-play.html

Nozomi Networks Discovers Unpatched DNS Bug in Popular C Standard Library Putting IoT at Risk
https://www.nozominetworks.com/blog/nozomi-networks-discovers-unpatched-dns-bug-in-popular-c-standard-library-putting-iot-at-risk/

VPN Providers Threaten to Quit India Over New Data Law
https://www.wired.com/story/india-vpn-data-law/

Operation CuckooBees: Cybereason Uncovers Massive Chinese Intellectual Property Theft Operation
https://www.cybereason.com/blog/operation-cuckoobees-cybereason-uncovers-massive-chinese-intellectual-property-theft-operation

TLStorm 2 – NanoSSL TLS library misuse leads to vulnerabilities in common switches
https://www.armis.com/blog/tlstorm-2-nanossl-tls-library-misuse-leads-to-vulnerabilities-in-common-switches/

How your location is being tracked — and what to do about it
https://blog.avast.com/en/secure-browser/how-your-location-is-being-tracked-and-what-to-do-about-it

Raspberry Robin gets the worm early
https://redcanary.com/blog/raspberry-robin/

Which phishing scams are trending in 2022?
https://blog.avast.com/trending-phishing-scams-2022