Threat Source newsletter (Nov. 10, 2022): Vulnerability research, movies in class, and Emotet once again
Summary: Cisco Talos reported that Emotet returned the same week as the US elections and Microsoft's regular Tuesday patch release, and noted that more than two dozen Lenovo notebook models are vulnerable to exploitation that disables UEFI secure boot, with ESET disclosing the flaws as Lenovo shipped updates for 25 models. The newsletter also cited Zimperium zLabs' finding of Cloud9, a malicious Chrome extension delivered through fake Adobe Flash Player update sites that can steal browser session data, install malware, and take control of the device.
Key Takeaway: Emotet has been disrupted by law enforcement only to return over and over again, so history shows the operators are not going away. A UEFI secure-boot flaw that lets attackers install firmware surviving multiple operating system re-installations means a standard wipe-and-reimage may not clear an infected Lenovo notebook.
Read the original at Cisco Talos ↗
- Topics
- Zero-Days & Exploits
- Related
- New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026November Patch Tuesday: An Overflowing Cornucopia of CVEs Cyber Risks · Nov 10, 2026