MARÇO 01 MARÇO 02 MARÇO 03 CVE-2022-24921 - regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply nested expression. MARÇO 04 MARÇO 05 Malware now using stolen NVIDIA code signing certificates - Threat actors are using stolen NVIDIA code signing certificates to sign malware to appear trustworthy and allow malicious drivers to be loaded in Windows. This week, NVIDIA confirmed that they suffered a cyberattack that allowed threat actors to steal employee credentials and proprietary data. The extortion group, known as Lapsus$, states that they stole 1TB of data during the attack and began leaking the data online after NVIDIA refused to negotiate with them. MARÇO 06 MARÇO 07 MARÇO 08 MARÇO 09