👉 What’s trending in cybersecurity today?
China, Hackers, UNAPIMON Malware, WordPress Plugin Vulnerability, Script Injection, Pikabot, HTML, Qualcomm, Google, Exploited Pixel Flaws, Omni Hotels & Resorts, California, City of Hope, Missouri, Jackson County, Ransomware, The Kansas City Star, NorthBay Hospital, Sacramento, CBS News, Riley County, Radio Fails, Kansas Cyber Crisis, WIBW, CyberNews, Microsoft, Security Missteps, US Cyber Safety Review Board, High-Risk Communities, Cyber Hub, US Cybersecurity Infrastructure Security Agency, Altman, OpenAI, Axios, YouTube, Indian Election, Disinformation, Global Witness, CareFirst Breach Suit, US District Court, The District of Columbia.
Listen to the full podcast
A threat group known as Earth Freybug, linked to China, has deployed UNAPIMON, a sophisticated malware aimed at evading detection while conducting espionage and financial activities, according to Trend Micro researchers. Earth Freybug, a subset of APT41, employs a blend of living-off-the-land binaries and custom malware, demonstrating evolving tactics in its long-standing cyber campaign. This latest attack underscores the group’s adaptability and the effectiveness of seemingly simple techniques when strategically applied.
A critical XSS flaw in WP-Members Membership plugin enables attackers to inject malicious scripts, posing serious security risks, warns Defiant. Exploiting this vulnerability, attackers can execute arbitrary scripts via user registration forms, potentially compromising site integrity. Site owners are urged to update to version 3.4.9.3 promptly to safeguard their installations from exploitation.
A new sophisticated backdoor, Pikabot, emerges with adaptable distribution tactics, leveraging various file types for infiltration, according to McAfee Labs. The malware’s modular design allows it to execute commands from a command-and-control server stealthily, resembling the notorious Qakbot’s approach. Pikabot’s multifaceted campaigns, including HTML, Javascript, and Excel distributions, highlight its creators’ intent to exploit vulnerabilities and evade detection, necessitating heightened security measures for protection.
Hackers exploit Qualcomm chipset flaws, posing critical risks to devices from smartphones to IoT gadgets. Multiple vulnerabilities enable unauthorized access and data compromise, prompting an urgent response from Qualcomm to enhance security measures. The detected vulnerabilities, ranging from memory corruption to buffer overflows, demand immediate attention to mitigate potential cyber threats.
Google rolls out patches for 28 Android vulnerabilities and 25 bugs in Pixel devices, including two exploited flaws in Pixel’s bootloader and firmware. Though specifics on attacks remain undisclosed, Google warns of limited, targeted exploitation and often links such vulnerabilities to commercial spyware vendors. The update addresses various vulnerabilities, including Elevation of Privilege (EoP) and information disclosure, along with high-severity flaws in Framework and System components, emphasizing the importance of timely security updates for device protection.
Omni Hotels & Resorts grapples with a chain-wide IT outage impacting reservation, room lock, and POS systems, leaving guests inconvenienced. Despite locations remaining open, customers face delays in new reservations and room access, with reports of lengthy waits for assistance. While the hotel chain’s IT team works to restore systems, guests express frustration over disrupted services, pointing to potential cybersecurity concerns amidst the outage.
City of Hope, a non-profit clinical research and cancer treatment center in Duarte, California, confirms cyberattack affecting 827,000 individuals’ personal and health info. After detecting suspicious activity, a forensic investigation uncovered unauthorized access to systems from September to October 2023, leading to data exfiltration. Affected individuals in California are receiving mail notifications and two years of complimentary credit monitoring.
Jackson County, Missouri, faces significant disruptions in IT systems due to a ransomware attack, underscoring vulnerabilities in digital infrastructure. The attack has led to closures of essential county offices, impacting services like tax payments and property searches. Despite the disruption, electoral activities remain unaffected, with prompt actions taken to investigate and secure systems, ensuring data integrity and resident confidentiality.
Amid systemwide disruptions caused by a cyber incident, NorthBay VacaValley Hospital in Sacramento faces challenges, with patients like Linda Sperow encountering difficulties accessing services due to the outage. Patients have been turned away, unable to check in or access their records, underscoring the impact of cyberattacks on critical healthcare infrastructure. NorthBay Health is actively investigating the incident and collaborating with cybersecurity experts to restore systems and mitigate further disruptions, highlighting the urgency of cybersecurity measures in safeguarding healthcare data and services.
Riley County’s P25 radio outage triggers local emergency declaration. Kansas responders utilize backup systems for vital communications. Despite the setback, 911 systems remain operational, ensuring prompt dispatch and resource management.
A government-ordered review reveals Microsoft’s lapses enabled Chinese hackers to breach U.S. officials’ emails. The report underscores the urgency for cloud providers like Microsoft to prioritize security and implement robust measures to safeguard sensitive data. Urgent recommendations emphasize the need for comprehensive security overhauls to fend off persistent cyber threats from nation-state actors.
Today, CISA unveiled a dedicated webpage aimed at supporting civil society communities facing elevated digital security risks. The resource hub offers cyber hygiene guidance, access to local cyber volunteer programs, and discounted cybersecurity tools and services tailored to high-risk organizations. This initiative addresses the critical need for cybersecurity support among vulnerable civil society groups, empowering them to enhance their digital resilience in the face of evolving threats.
OpenAI CEO Sam Altman relinquishes control of the company’s $325 million venture capital fund to Ian Hathaway, an OpenAI employee. The fund, launched in May 2021 with backing from Microsoft, has seen significant investments in startups like Harvey and Descript, signaling a shift in leadership and strategy within the organization.
Researchers criticize YouTube for its lax approach to ad moderation, stating that the platform’s system lacks scrutiny and accountability, especially during critical election periods. Despite clear policies against false claims, YouTube approved ads containing election disinformation in India, raising concerns about its readiness for safeguarding the electoral process. With India’s upcoming general election, the findings underscore the urgent need for YouTube to prioritize stricter content moderation to prevent the spread of misinformation.
A federal judge has certified a “contract class” of over 1 million CareFirst customers in a proposed class action lawsuit related to a 2014 cyberattack. This ruling breathes new life into the long-standing legal battle over alleged breaches of contractual obligations to safeguard customer data. Despite the likelihood of limited damages, the judge’s decision allows the lawsuit to proceed, signaling a significant development in the ongoing litigation.
Copyright © 2024 CyberMaterial. All Rights Reserved.
