- Security News Headlines
- Posts
- Security News Headlines #74
Security News Headlines #74
Ian Bishop
July 18, 2024
Stay informed with the latest updates in cybersecurity. Today's headlines cover a range of topics from new information-stealing malware to major data breaches and insights into secure software development.
BlackBerry analysts have uncovered RisePro, a new information-stealing malware targeting Windows systems. RisePro collects sensitive data like passwords and banking information. The malware spreads through fake software updates and malicious ads. Users are advised to be cautious when downloading software from unofficial sources.
AWS reportedly leased infrastructure to NSO Group, the company behind Pegasus spyware. This revelation emerged in the WhatsApp lawsuit against NSO, highlighting the challenges cloud providers face in preventing misuse of their services. The case underscores the importance of strict monitoring and enforcement of cloud usage policies.
Rite Aid disclosed a data breach affecting 2.2 million customers. Sensitive information, including names, addresses, and prescription details, was compromised. The breach was attributed to a vulnerability in their third-party vendor's system. Customers are advised to monitor their accounts for suspicious activity.
The Linux Foundation and OpenSSF have released a report on secure software development education. The report highlights gaps in current educational programs and calls for improved curricula to address security from the ground up. It emphasizes the need for developers to be trained in identifying and mitigating security vulnerabilities.
Scammers are using various tactics to obtain phone numbers, including data breaches, social engineering, and online activities. Once they have your number, they can execute phishing attacks and fraud schemes. Users should be cautious about sharing their phone numbers and verify sources before giving out personal information.
The FIN7 cybercrime group has begun advertising legitimate security services. This move blurs the line between cybercrime and cybersecurity, raising concerns about the integrity of services provided by such groups. Businesses are urged to vet security providers thoroughly to avoid inadvertently supporting criminal organizations.
Researchers have released SubSnipe, an open-source tool for identifying subdomains vulnerable to takeover. Subdomain takeovers can lead to significant security breaches. The tool aims to help organizations secure their web infrastructure by identifying and addressing these vulnerabilities.
A data breach has exposed the information of 15 million Trello users. Compromised data includes email addresses and activity logs. Trello users should change their passwords and monitor their accounts for any unusual activities. The breach highlights the importance of robust security measures for online collaboration tools.
A new vulnerability, server-side template injection (SSTI), has been identified, allowing attackers to execute arbitrary code on servers. This vulnerability is particularly dangerous as it can lead to full system compromise. Developers are encouraged to validate and sanitize input data to prevent such attacks.
Threat actors are exploiting a critical flaw in Apache HugeGraph. The vulnerability allows attackers to execute arbitrary commands, potentially compromising entire systems. Users of HugeGraph are urged to apply the latest patches and updates to mitigate the risk.
Snowflake accounts are being targeted using exposed legitimate credentials. Attackers leverage these credentials to access sensitive data stored in the cloud. Organizations using Snowflake should enforce strong password policies and consider multi-factor authentication to enhance security.
The Scattered Spider cybercrime group has adopted RansomHub, a new platform for conducting ransomware attacks. This tool enhances their ability to manage and deploy ransomware, increasing the threat level. Businesses are advised to bolster their ransomware defenses and have robust backup strategies in place.
A major furniture manufacturer has halted production following a cyberattack. The attack disrupted manufacturing operations, causing significant financial losses. The incident highlights the importance of cybersecurity measures in critical infrastructure and industrial operations.
A new report emphasizes the importance of cloud security and PowerShell expertise for Security Operations Center (SOC) analysts. These skills are crucial for detecting and mitigating modern cyber threats. Organizations are encouraged to invest in training their SOC analysts in these areas to enhance their defense capabilities.
CISA has issued an advisory for industrial control systems (ICS), highlighting vulnerabilities that could be exploited by attackers. The advisory provides mitigation steps to secure ICS environments. Operators of critical infrastructure are urged to review the advisory and implement the recommended security measures.
CISA has added three new exploited vulnerabilities to its Known Exploited Vulnerabilities Catalog. These vulnerabilities are actively being used by threat actors and pose significant risks. Organizations should prioritize patching these vulnerabilities to protect their systems from potential attacks.
Future Outlook
As cyber threats continue to evolve, the importance of robust cybersecurity measures and continuous education cannot be overstated. Organizations must remain vigilant, stay updated with the latest threat intelligence, and invest in training to build a resilient defense against emerging threats.
Reply