- Security News Headlines
- Posts
- Security News Headlines #98
Security News Headlines #98
Ian Bishop
August 22, 2024
Today's cybersecurity landscape highlights critical vulnerabilities and new malicious threats, affecting everything from widely used plugins to global manufacturing and financial systems. Major organizations, including CISA and AWS, are making efforts to strengthen security, while cybercriminals exploit overlooked vulnerabilities and malware spreads in innovative ways. The news also touches on ongoing struggles in vulnerability management and the ongoing evolution of cyber threats.
A critical privilege escalation vulnerability in the LiteSpeed Cache plugin, affecting over 5 million WordPress sites, has been patched. The flaw could allow attackers to gain unauthorized access and control over sites, posing a significant security risk. Site owners are urged to update immediately to avoid potential exploitation.
CISA has updated its catalog with four newly identified, actively exploited vulnerabilities. This addition emphasizes the need for organizations to prioritize patching these vulnerabilities to mitigate risks. The vulnerabilities span various software, underscoring the diverse threat landscape.
JFrog discusses the risks associated with outdated software dependencies and offers strategies for keeping systems secure. By managing dependencies effectively, organizations can avoid the pitfalls of using outdated components that may introduce vulnerabilities.
AquaSec reports on PG_Mem, a sophisticated malware hiding within PostgreSQL processes. This malware is difficult to detect and can execute arbitrary commands, posing a severe threat to database security. Organizations using PostgreSQL should be vigilant and consider enhanced monitoring.
AWS outlines its approach to encryption in transit, particularly in relation to New York Department of Financial Services (NYDFS) regulations. The guidance ensures secure data transmission over external networks, aligning with regulatory requirements and best practices for data protection.
Ticketmaster is under scrutiny by the DOJ for allegedly using revolving barcodes to control ticket resales and surveil customers. The practice is part of a broader strategy to dominate the ticket market, raising significant privacy and ethical concerns.
At BSidesLV, GreyNoise presented insights into vulnerabilities listed in the CISA Known Exploited Vulnerabilities (KEV) catalog. The analysis highlights trends in exploitation and underscores the importance of proactive vulnerability management.
A new campaign exploiting the infamous Log4j vulnerability is making rounds, targeting systems that have not been patched. This renewed activity highlights the enduring risk posed by unpatched software and the importance of comprehensive security measures.
The creators of the Styx Stealer malware inadvertently revealed their identities due to poor operational security (OpSec). This exposure serves as a cautionary tale for cybercriminals and a victory for law enforcement efforts to track down threat actors.
Securelist's Q2 2024 report reveals significant trends in vulnerabilities and exploits. The report indicates an increase in targeted attacks on critical infrastructure and emphasizes the need for ongoing vigilance in vulnerability management.
Microchip Technology has suffered a cyberattack that disrupted its manufacturing operations. The incident highlights the vulnerability of supply chains and the critical need for robust cybersecurity measures in industrial environments.
The Oregon Zoo has warned visitors that their credit card details may have been stolen in a data breach. The breach underscores the ongoing threat of cyberattacks on consumer-facing institutions and the importance of data security.
Security researchers have uncovered 'TodoSwift,' a new macOS malware variant linked to Chinese APT groups. This malware is capable of data exfiltration and espionage, adding to the growing list of threats targeting macOS users.
A backdoor has been discovered in RFID cards manufactured by Shanghai Fudan Microelectronics, raising security concerns. The backdoor allows unauthorized access, posing a significant risk to systems relying on these cards for security.
Cado Security emphasizes the importance of monitoring typosquatting domains to prevent cyberattacks. These domains are often used in phishing schemes, making vigilant monitoring a key component of a comprehensive security strategy.
Intel471 provides a case study on tracking the Gootloader malware, highlighting the effectiveness of threat hunting techniques. The study showcases the importance of proactive security measures in identifying and neutralizing complex threats.
Google has discontinued its Play Store bug bounty program, surprising many in the security community. The program was a key initiative in identifying and fixing vulnerabilities, raising questions about the future of app security on Android.
A vulnerability in the GiveWP WordPress plugin has exposed donors' sensitive information. The flaw, which affects over 100,000 sites, underscores the risks associated with third-party plugins and the need for rigorous security practices.
Hackers are increasingly using 'Xeon Sender,' a new SMS spam tool, to enhance phishing campaigns. This tool exploits cloud APIs and exposed credentials, enabling more effective and widespread phishing attacks.
Intigriti offers an in-depth guide on Server-Side Request Forgery (SSRF) vulnerabilities, covering advanced exploitation techniques. The guide provides valuable insights for both security professionals and developers aiming to protect their systems.
A data exposure incident at FlightAware has raised concerns over the security of aviation data. The breach, involving sensitive information, highlights the need for stronger data protection measures in the aviation industry.
CannonDesign has confirmed a data breach following an attack by the AvosLocker ransomware group. The breach compromised sensitive company and client data, underscoring the growing threat of ransomware attacks.
Future Outlook
As vulnerabilities continue to be exploited and new malware emerges, organizations must remain vigilant in their security practices. The persistence of threats like Log4j and the rise of sophisticated tools like Xeon Sender demonstrate the evolving nature of cybercrime. Ongoing monitoring, timely patching, and proactive threat hunting are essential to mitigate these risks in an increasingly interconnected world.
Reply