---
title: Articles of interest from the week of May 30, 2022
description: Zero-day bug exploited by attackers via macro-less Office documents (CVE-2022-30190). Plus other cybersecurity-related articles from the week of 5-30-2022.
---

[Network Security News | Ingalls Information Security ](https://resources.iinfosec.com/network-security-news)

# [Articles of interest from the week of May 30, 2022](https://resources.iinfosec.com/network-security-news/2022-05-30)

 Written by [John Frasier](https://resources.iinfosec.com/network-security-news/author/john-frasier) | May 30, 2022 4:00:00 AM

#### [Zero-Day Bug Exploited by Attackers via Macro-Less Microsoft Office Documents (CVE-2022-30190)](https://www.helpnetsecurity.com/2022/05/31/cve-2022-30190-follina/)

A newly numbered Windows zero-day vulnerability (CVE-2022-30190) is being exploited in the wild via specially crafted Office documents (without macros), security researchers are warning. (By Zeljka Zorz, [Help Net Security](https://www.helpnetsecurity.com/))

* *

#### [You Need to Update iOS, Chrome, Windows, and Zoom ASAP](https://www.wired.com/story/ios-chrome-android-windows-update-may-2022/)

May has been another busy month of security updates, with Google’s Chrome browser and Android operating system, Zoom, and Apple’s iOS releasing patches to fix serious vulnerabilities. (By Kate O’Flaherty, [WIRED](https://www.wired.com/))

#### [FBI and NSA Say: Stop Doing These 10 Things That Let the Hackers In](https://www.zdnet.com/article/fbi-and-nsa-say-stop-doing-these-10-things-that-let-the-hackers-in/)

CISA, the FBI, and National Security Agency (NSA), as well as cybersecurity authorities from Canada, New Zealand, the Netherlands, and the UK, have compiled a list of the main weak security controls, poor configurations, and poor security practices that defenders should implement to thwart initial access. It also contains the authorities' collective recommended mitigations. (By Liam Tung, [ZDNet](https://www.zdnet.com/))

#### [The Ransomware Crisis Deepens, While Data Recovery Stalls](https://www.darkreading.com/attacks-breaches/ransomware-crisis-deepens-data-recovery-stalls)

When it comes to ransomware, more companies are seeing attacks and have had data encrypted, according to research out this week. And even though more companies are backing up or paying ransom demands, less data was recovered in 2021 compared with the previous year. (Robert Lemos, [Dark Reading](https://www.darkreading.com/))

#### [Intuit Warns of QuickBooks Phishing Threatening To Suspend Accounts](https://www.bleepingcomputer.com/news/security/intuit-warns-of-quickbooks-phishing-threatening-to-suspend-accounts/)

Tax software vendor Intuit has warned that QuickBooks customers are being targeted in an ongoing series of phishing attacks impersonating the company and trying to lure them with fake account suspension warnings. (By Sergiu Gatlan, [Bleeping Computer](https://www.bleepingcomputer.com/))

[View full post](https://resources.iinfosec.com/network-security-news/2022-05-30)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "John Frasier"
  },
  "dateModified" : "2024-03-27T13:46:40.210Z",
  "datePublished" : "2022-05-30T04:00:00Z",
  "headline" : "Articles of interest from the week of May 30, 2022",
  "image" : {
    "@type" : "ImageObject",
    "height" : 60,
    "url" : "/hs/hsstatic/content_shared_assets/static-1.4092/img/default-amp-logo.png",
    "width" : 60
  },
  "mainEntityOfPage" : "https://resources.iinfosec.com/network-security-news/2022-05-30",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60,
      "url" : "/hs/hsstatic/content_shared_assets/static-1.4092/img/default-amp-logo.png",
      "width" : 60
    },
    "name" : "Keep a Pulse on What's Happening in Cybersecurity"
  }
}
```