👉 What’s happening in cybersecurity today?
Vulnerability, Encryption, Chip, Mozilla, Firefox, Zero-Days, Pwn2Own, Russian, APT29, Malware, StrelaStealer, Phishing, Campaign, US, EU, Organizations, Iran-Linked, MuddyWater, Atera, Surveillance, Israel, Air Europa, Data Compromise, EMSA, Patients, Security Breach, Ransomware, Attack, Illinois, Henry County Government, French, Media Outlets, Cyberattack, GardaWorld Cash, Data Breach, Client Information, Meta, Disinformation, Tracking Tool, U.S. Election, Spain, Telegram, Copyright Concerns, GitLab, SAST, Oxeye Acquisition, Police Bust, Cyber-Fraud Gang, Romania, BlueFlag Security, Seed Funding.
Listen to the full podcast
A new vulnerability, GoFetch, exploits Apple M-series chips, compromising secret keys during cryptographic operations. This microarchitectural side-channel attack leverages the data memory-dependent prefetcher (DMP), rendering constant-time cryptographic implementations susceptible. The flaw, unfixable in existing CPUs, prompts urgent actions from developers and users alike to mitigate risks.
Mozilla swiftly tackles two zero-day vulnerabilities in Firefox, exploited during Pwn2Own Vancouver 2024. Researcher Manfred Paul showcased the hacks, earning accolades and $100,000 for a sandbox escape demonstration. Mozilla’s prompt response with Firefox 124.0.1 and Firefox ESR 115.9.1 underscores their commitment to user security.
Mandiant raises alarm as APT29 shifts focus, targeting German political parties with sophisticated multi-stage malware attacks. Phishing lures, including fake invitations, lead victims to download malicious files containing Wineloader backdoor. The emergence of German-language lures indicates a concerning evolution in APT29’s tactics, posing a broad threat to Western political entities.
Cybersecurity researchers uncover a fresh surge of phishing attacks deploying the dynamic information stealer, StrelaStealer, affecting over 100 organizations in the EU and US. These campaigns employ ever-changing email attachments to elude detection, showcasing the attackers’ adaptability. StrelaStealer, initially disclosed in 2022, targets email login data from various clients, with recent variants utilizing invoice-themed emails to propagate, highlighting evolving tactics in cybercrime.
Proofpoint flags MuddyWater’s phishing campaign, delivering Atera RMM to Israeli sectors. Malicious links in PDFs serve as attack vectors, highlighting a shift in TA450’s tactics. This underscores the escalating threat landscape, with Iranian actors leveraging legitimate tools for strategic cyber operations.
Air Europa faces a potential data breach, raising concerns over customer data safety in the aviation sector. Sensitive information such as names, IDs, and contact details may have been compromised, posing risks of misuse. The airline swiftly responded, emphasizing its ongoing commitment to enhancing cybersecurity measures amidst growing cyber threats.
EMSA identifies suspicious activity in its IT network, prompting proactive measures and investigation. Patients whose information may have been involved will receive notification letters. EMSA establishes a call center and offers credit monitoring for affected individuals.
Henry County grapples with a ransomware attack affecting essential systems, prompting shutdowns and investigations by law enforcement and cybersecurity agencies. Despite the incident, emergency services remain operational, but the Medusa ransomware gang demands a hefty ransom, signaling the growing threat of cyberattacks on local governments.
On March 23, 2024, major French media outlets within the Altice group faced a cyberattack, with “malicious messages” flooding social networks, allegedly claimed by the Epsilon hacker group, known for previous attacks. Questions arise about the motive behind targeting these outlets, prompting speculation about potential messages being conveyed.
Unnamed attackers compromised the private data of GardaWorld Cash US clients, accessing facility systems and administrative files in Florida. The breach, affecting over 39,000 individuals, exposed sensitive information including Social Security numbers, driver’s license numbers, and health-related data. GardaWorld Cash US is offering affected clients free credit monitoring and fraud protection services for 24 months in response to the breach.
Meta’s decision to shut down CrowdTangle, a vital tool for tracking social media content, has sparked criticism from over 100 research and advocacy groups. The move, announced last week, is viewed as detrimental to combating disinformation, particularly in the lead-up to major elections worldwide. CrowdTangle’s closure risks hindering transparency and impeding efforts to safeguard the integrity of elections, according to concerned organizations, who are urging Meta to reconsider or extend support for the tool.
Judge Santiago Pedraz of the Audencia Nacional issued a temporary order to suspend Telegram in Spain after media companies complained of copyright infringement. This move follows allegations that users were uploading copyrighted content without permission, prompting concerns about the platform’s role in facilitating piracy. Despite the suspension, challenges remain as users may seek alternative methods, such as VPNs or proxy services, to circumvent the block and access the messaging app.
GitLab acquires Oxeye, a startup specializing in static application security testing, to enhance risk detection and reduce false positives, providing a comprehensive solution across the software development life cycle. Oxeye’s technology, praised for its distinctive approach, is expected to significantly improve GitLab’s ability to detect software weaknesses via SAST, streamlining vulnerability management.
Law enforcement in Romania and Spain have dismantled a cyber-fraud network responsible for defrauding victims of millions through fake ads and BEC scams. During raids in Romania, they seized cash, gold, and electronic devices, shedding light on the gang’s sophisticated operations. Europol revealed the gang’s intricate setup, involving multiple groups orchestrating fake ads and laundering profits, emphasizing the need for a comprehensive investigation to combat such cybercrimes effectively.
BlueFlag Security, a Sunnyvale, California-based startup, has emerged from stealth mode, revealing its mission to secure the software development lifecycle (SDLC). With $11.5 million in seed funding led by Maverick Ventures and Ten Eleven Ventures, BlueFlag aims to revolutionize SDLC security and governance. Their platform offers end-to-end protection, focusing on developer identities to prevent software supply chain attacks, leveraging an AI-powered identity intelligence framework.
Copyright © 2024 CyberMaterial. All Rights Reserved.
