And: -Thai crypto scammers detained -18.6% of FOSS JS and Java projects went dead this year -Malware reports on Knight ransomware and Mystic Stealer -APT reports on APT41's Android malware, new REF5961 group, Konni, and Cytrox -Microsoft patches apps for Libwebp and Libvpx zero-days -Exim patches RCE bugs -New Looney Tunables vulnerability -New ShellTorch vulnerability -ConnectedIO router bugs -Gartner's cybersecurity spending forecast (it's good news) -New tools—cloudgrep and KubeHound https://files.mastodon.social/media_attachments/files/111/176/004/758/846/742/original/83afe49c8697f8ee.webp