👉 What’s trending in cybersecurity today?
Apple, iOS Fixes, Zero-Day Threats, GhostSec, Stormous, Ransomware Assaults, Android, Windows RATs, Fake Online Meetings, VMware, Patches, ESXi Sandbox Escape Vulnerabilities, WogRAT Malware, Online Notepad Platform, Malware Storage, Meta’s Facebook and Instagram, Technical Outage, Fidelity Security, OrdiZK Bridge, Rug Pull Scam, Northeast Orthopedics Cyber Attack, TalentLaunch Subsidiary’s Data Breach, NSA,New Zero-Trust Guidance for Network Security Enhancement, Intellexa Consortium, Predator Spyware, CrowdStrike, Flow Security, Madonna, Text-to-Video Visuals, Microsoft, Windows Subsystem for Android.
Listen to the full podcast
1. Apple Swiftly Patches iOS Zero-Day Threats
Apple swiftly responded to two iOS zero-day vulnerabilities, CVE-2024-23225 and CVE-2024-23296, with emergency security updates. These bugs, allowing attackers kernel access, targeted a wide range of Apple devices, prompting immediate action. Installing the latest updates is crucial to thwart potential exploits, especially in high-risk scenarios.
2. Cybercrime Coalition Strikes Worldwide
GhostSec and Stormous ransomware groups unite in double extortion attacks across global sectors, unleashing a Go-written GhostLocker variant and launching a new RaaS program, STMX_GhostLocker. With targets spanning multiple industries and countries, their arsenal now includes sophisticated tools like GhostPresser for WordPress site infiltration. Affiliates gain access to a comprehensive web panel for tracking operations, while victims face swift encryption and data exfiltration threats.
3. Malware Threat via Fake Meeting Sites
Zscaler’s ThreatLabz reveals a threat actor deploying fraudulent Skype, Google Meet, and Zoom websites to distribute SpyNote RAT to Android users and NjRAT and DCRat to Windows users. Through shared web hosting, the attacker operates these fake sites with URLs closely resembling genuine platforms, posing significant risks to businesses worldwide. The findings underscore the critical need for heightened cybersecurity measures against evolving malware threats targeting online meeting applications, emphasizing the importance of regular updates and security patches.
4. VMware Urgently Fixes ESXi Sandbox Escapes
Virtualization leader VMware releases critical updates addressing ESXi, Workstation, Fusion, and Cloud Foundation vulnerabilities, allowing code execution with local admin privileges. The most severe flaws, CVE-2024-22252 and CVE-2024-22253, pose significant risks, scoring 9.3 on the CVSS scale. Urgent patching is advised to mitigate potential exploitation and safeguard virtual environments.
5. New WogRAT Malware Exploits Online Notepad
A new malware dubbed ‘WogRAT’ targets Windows and Linux via ‘aNotepad,’ exploiting the innocuous platform for covert code storage. Named ‘WingOfGod’ by researchers, it evades detection by leveraging disguised executables and legitimate online services. Despite initial stealth, it operates as a multifunctional backdoor, posing significant security risks to affected systems.
Meta’s platforms, including Facebook and Instagram, faced a widespread outage affecting thousands of users, which was quickly resolved within around two hours. Downdetector reported as many as 500,000 Facebook users experiencing login issues, along with 50,000 reports for Instagram and 10,000 for Facebook Messenger, highlighting the scale of the disruption.
Fidelity reveals that miscreants potentially accessed personal information, including Social Security numbers and bank details, from over 28,000 life insurance policyholders through an Infosys breach. The breach, attributed to LockBit, underscores the persistent threat of cybercrime, with criminals exploiting vulnerabilities to access sensitive data and disrupt financial services. Despite law enforcement actions against LockBit, concerns linger as over 85,000 individuals’ sensitive details may have been compromised.
The OrdiZK team allegedly orchestrates an exit scam, absconding with $1.4 million in investors’ cryptocurrency, as reported by CertiK. Certik’s investigation reveals significant token dumping on decentralized exchanges, causing a staggering 98% and 99% plunge in token price on March 4 and 5 respectively. The scam underscores the ongoing threat posed by crypto scammers and hackers, with over $200 million lost in similar incidents in 2024 alone, according to blockchain security firm Immunefi.
Northeast Orthopedics and Sports Medicine, a New York healthcare provider, faces a cyberattack compromising data of over 177,000 individuals. Detected on November 22nd, the breach allowed potential unauthorized access to sensitive patient information, including Social Security numbers and medical records. Despite offering free credit monitoring and identity protection services, concerns remain as to the potential misuse of stolen data.
Alliance Solutions Group, under TalentLaunch, reveals a data breach compromising extensive consumer data, including SSNs and medical information. The breach, detected on March 1, 2024, led to unauthorized access to personal and financial details of affected individuals. TalentLaunch swiftly initiated investigations and notified impacted parties, urging vigilance against potential fraud.
The National Security Agency has issued comprehensive guidance on implementing a zero-trust framework to fortify network security against internal threats. Embracing a zero-trust architecture necessitates stringent controls over network access and data flows, mitigating the potential impact of breaches. By breaking down network management into distinct components and maturity levels, organizations can gradually bolster their defenses and proactively thwart adversarial movements within their networks.
The US government has imposed sanctions on key individuals and entities associated with the development and distribution of the Predator spyware, a commercial tool used to target Americans, including government officials and journalists. Among those sanctioned are Tal Jonathan Dilian, the Israeli founder of Intellexa Consortium, and Sara Aleksandra Fayssal Hamou, a corporate specialist from Poland. These sanctions underscore the Biden administration’s commitment to curbing the misuse of spyware technology, aiming to prevent human rights abuses and the targeting of dissidents worldwide.
Cybersecurity giant CrowdStrike (NASDAQ: CRWD) announced plans to acquire Flow Security, a cloud data runtime security solution, aiming to enhance its cloud security capabilities and offer comprehensive protection for data in motion and at rest. Flow’s Data Security Posture Management (DSPM) platform, which secures sensitive information across various environments, will be integrated into CrowdStrike’s Falcon XDR platform post-acquisition, creating an advanced cloud data protection platform. The acquisition, expected to close in CrowdStrike’s fiscal first quarter, marks a significant strategic move for both companies in the cybersecurity landscape.
Madonna integrates text-to-video technology from Runway into her Celebration Tour, adding dynamic visuals behind her performance of La Isla Bonita. The decision stemmed from dissatisfaction with conventional graphics, leading Madonna’s team to experiment with AI-driven visuals to enhance the tropical vibe of the song. Runway’s software, though not capable of producing full-length documentaries, significantly reduces production time, offering Madonna a more efficient way to create captivating concert visuals.
Axonius, led by an Israeli military intelligence veteran, secures $200M to expand its security offerings. CEO Dean Sysman plans to utilize funds for acquisitions to enhance asset protection, catering to diverse customer environments and safeguarding SaaS applications and installed software. Sysman underscores the value of potential acquisitions in augmenting the company’s capabilities and providing enhanced value to its clientele.
Copyright © 2024 CyberMaterial. All Rights Reserved.
