While attackers and researchers shift their attention to the next new vulnerability, security teams make sure they finish patching vulnerable Log4j versions in their applications and services.

Policymakers move forward with new data privacy legislation

This sort of approach would enable cross-company and cross-sector threat information sharing, an effort that would allow companies to easily turn data into actionable insights.

Both vulnerabilities are use-after-free issues in Mozilla's popular web browser.

Next-level account takeover

NVIDIA certificates are being used to sign malware, enabling malicious programs to pose as legitimate and slide past security safeguards on Windows machines.

The makers of operational technology and connected devices saw reported vulnerabilities grow by half in 2021, but other trends may be more disturbing.

The move comes just a week after GPU-maker NVIDIA was hit by Lapsus$ and every employee credential was leaked.