A new phishing scam purports to be MYOB invoices – but really contains a novel banking trojan.

HackerOne’s 2018 Hacker-Powered Security Report showed that the average award for critical vulnerabilities has increased.

The thief also had a second dataset, including the M1 Abrams maintenance manual, a tank platoon training course, a crew survival course and documentation on improvised explosive device (IED) mitigation tactics.

Cisco also patched three medium-security flaws in its network security offerings; and, it issued a fix for a high-severity bug in its platform for mobile operator routers, StarOS.

Old banking malware called Dorkbot has reemerged in 2018 to become a serious threat.

A new feature called site isolation is being tapped to protect Chrome users against Spectre.

QNAP said in a security advisorythat it has fixed the issues in Q’Center Virtual Appliance, and urged customers to update to the latest version.

The newly-discovered Spectre variants can be exploited to uncover confidential data via microarchitectural side channels in CPUs.

Microsoft patches 17 critical bugs and 34 important bugs as part of its monthly security bulletin.

The company issued fixes for 112 vulnerabilities in products spanning from Flash Player, Acrobat and Reader, Experience Manager, to Adobe Connect.