Network Security News Summary for Tuesday April 19th, 2022

Sysmon BinaryData; Ukraine IcedID and Zimbra; NSO/Pegasus News; Fake Windows 11 Sysmon's ReigstryEvent (Value Set) and Binary Data https://isc.sans.edu/forums/diary/Sysmons+RegistryEvent+Value+Set/28558/ Ukraine CERT Posts: IcedID and Zimbra Flaw https://cert.gov.ua/article/39606 https://cert.gov.ua/article/39609 New NSO Pegasus Exploit Spotted in the Wild https://citizenlab.ca/2022/04/catalangate-extensive-mercenary-spyware-operation-against-catalans-using-pegasus-candiru/ Unofficial Windows 11 Upgrade Delivers Spyware https://www.bleepingcomputer.com/news/security/unofficial-windows-11-upgrade-installs-info-stealing-malware/ keywords: Windows 11; Upgrade; microft; malware; pegasus; nso; ukraine; icedid; zimbra; sysmon; registryevent;