It’s 5:05, on Monday, November 28, 2022. This is Mark Miller, back from a week in London, with your daily update of open source and cybersecurity news. We have contributors calling in from around the world. Today’s reports come from Edwin Kwan in Sydney Australia, Kadi Grigg in Alexandria, Virginia and Olimpiu Pop in Transylvania, Romania.   

Let’s get to it!

🇦🇺 Edwin Kwan, Sydney, Australia

Microsoft Releases 2022 Digital Defense Report

https://www.microsoft.com/en-us/security/business/microsoft-digital-defense-report-2022

https://query.prod.cms.rt.microsoft.com/cms/api/am/binary/RE5bcRe - Executive summary of report

🇷🇴 Olimpiu Pop, Transylvania, Romania

Apache Commons Text Shell Another Java supply chain attack

https://nvd.nist.gov/vuln/detail/CVE-2022-42889

https://www.infoq.com/news/2022/11/apache-commons-vulnerability/

🇺🇸 Kadi Grigg, Alexandria,VA

Shutting down the one-stop-spoofing shop: iSpoof Fraud

https://www.theguardian.com/money/2022/nov/24/100-people-arrested-ispoof-uk-biggest-investigation

https://twitter.com/_DigitalBytes/status/1595730644411482113?t=k1Vqx8iHUaYbyQ4FlxB9-Q&s=19