Weekly Cyber Security News 13/05/2022

A selection of this week’s more interesting vulnerability disclosures and cyber security news. For a daily selection see our twitter feed at #ionCube24. Quite a weird bunch this week.  First is a sub domain of a well known brand being taken over to host a scam. Luckily didn’t get away with a huge amount, but even so something to watch for with other brands:

• Ferrari subdomain hijacked to push fake Ferrari NFT collection

A sudden shift of hosting away from the NPM for a major player due to some quite reasonable reasons. Will others do similar?

• SheetJS ditches npm registry over 2FA requirement and “legal matters”

A first it seems… Novel.

• Hackers are now hiding malware in Windows Event Logs