Curated Daily News for February 4, 2021

---

Today’s 12 newsworthy articles include: Sudo vulnerability affects macOS and Linux, The mysterious missing NSA malware, Malware hijacks Kubernetes clusters, Protecting S3 buckets, Emotet’s takedown, and Quantum crypto system achieves open-air success.

• ‘Baron Samedit’ Sudo Vulnerability Also Affects macOS; No Patch Available Yet
• The Drovorub Mystery: Malware NSA Warned About Can’t Be Found
• Emotet’s Takedown: Have We Seen the Last of the Malware?
• Concerns Over API Security Grow as Attacks Increase
• A Look at HTTP Parameter Pollution and How To Prevent It
• New Malware Hijacks Kubernetes Clusters to Mine Monero
• Why a modern approach is needed to protect S3 buckets
• How to Audit Password Changes in Active Directory
• Patch Imperfect: Software Fixes Failing to Shut Out Attackers
• Consider the Human Angle in Your Threat Modeling
• Five Critical Android Bugs Patched, Part of Feb. Security Bulletin
• New and Hardened Quantum Crypto System Notches “Milestone” Open-Air Test – IEEE Spectrum

Tool Of The Day
GitLab Watchman – Audit Gitlab For Sensitive Data & Credentials: GitLab Watchman is an application that uses the GitLab API to audit GitLab for sensitive data and credentials exposed internally – this includes code, commits, wiki pages and more.