👉 What’s the latest in the cyber world today?
Fluent Bit Vulnerability, Major Cloud Providers, Void Manticore, Wiper Malware Campaigns, UK Researchers, AI Chatbots, Jailbreaks, Samstealer Malware, Windows Systems, Data Theft, Vultur Malware, Mobile Antivirus, Login Credentials, OmniVision, Data Breach, Ransomware Attack, City of Brussels, Personal Data, Gala Games, $200M Security Incident,, Western Sydney University, Data Exposure, 7500 Students and Staff, City of Clarksville, Tennessee, Data Breach, US HHS, $50 Million Program, Hospital Cybersecurity, UK’s AI Safety Institute, Bay Area Expansion, Multi-Site Businesses, Network Outages, Major Social Apps, Deletion.
Listen to the full podcast
A critical vulnerability in Fluent Bit impacts major cloud providers and tech giants, potentially leading to denial-of-service and remote code execution attacks. Tracked as CVE-2024-4323, this issue was discovered by Tenable researchers and is due to a heap buffer overflow in the embedded HTTP server. Until patches are available, users are advised to restrict access to the monitoring API to mitigate risks.
The BiBi Wiper malware, attributed to the Iranian hacking group ‘Void Manticore’ (Storm-842), intensifies attacks by deleting disk partition tables, complicating data recovery. Operating primarily in Israel and Albania, the group’s tactics extend downtime for targeted victims, posing significant challenges for restoration efforts. Check Point Research uncovers newer variants of BiBi Wiper and related wipers, shedding light on the group’s evolving strategies and operational overlaps with other threat actors.
Advanced AI Safety Institute researchers warn of significant vulnerabilities in popular AI chatbots, revealed in recent findings. The study evaluated compliance rates of five large language models under attack conditions, raising concerns about potential misuse in cyber attacks and dissemination of chemical and biological knowledge. AISI underscores the importance of enhanced security protocols, regular audits, and public awareness to mitigate risks associated with AI advancements.
Cybersecurity researchers uncover Samstealer malware targeting Windows systems via Telegram, aiming to steal sensitive data including passwords and cryptocurrency wallets. The malware operates stealthily, packing stolen data into a zip file and uploading it to gofile.io, posing a significant risk to user privacy and data security. Recommendations include deploying advanced endpoint security, updating systems regularly, and implementing network segmentation to mitigate such threats effectively.
Malware mimics trusted antivirus apps to infiltrate devices, exploiting users’ trust in security software. Recent campaigns involve Vultur malware posing as legitimate antivirus apps, threatening both financial and digital assets. The malware’s overlay attack vectors deceive users into revealing sensitive login information, emphasizing the importance of robust security measures to combat evolving threats.
California-based imaging sensors manufacturer OmniVision warns of a data breach post-Cactus ransomware attack. The breach, lasting from September 4 to September 30, 2023, compromised personal information. As a precaution, the company offers credit monitoring and identity theft restoration services to affected individuals.
The City of Brussels announced that a cyberattack on one of its suppliers led to a personal data leak. The Belgian capital is investigating the extent of the breach with the supplier and has notified cybersecurity authorities. Preventive and corrective measures have been undertaken to address the situation.
Blockchain gaming platform Gala Games reportedly loses over 4 billion GALA tokens in a security breach. The incident, described as a “multi-million dollar security incident,” involved GALA tokens and has since been contained, with the impacted wallet frozen. Gala Games CEO Eric Schiermeyer reassures users of addressing the breach and cooperating with law enforcement, following an unauthorized minting and selling of GALA tokens worth $200 million.
Western Sydney University confirmed a significant data breach affecting over 7,500 students and staff. The breach, first identified in January 2024, involved unauthorized access to emails and files through a compromised Microsoft Office 365 account. WSU is working with NSW Police and the Information and Privacy Commission to investigate, while offering support to those impacted.
Clarksville, TN experienced a recent data breach where personal information was accessed without authorization. Although there’s no evidence of misuse, affected individuals have been notified and offered credit monitoring. Clarksville emphasizes its commitment to privacy and security, providing resources and support to impacted individuals.
The U.S. Department of Health and Human Services is launching a $50 million initiative to improve hospital cybersecurity. The UPGRADE program aims to speed up vulnerability detection and patch deployment using a platform for creating a “digital twin” of hospital devices for security tests. This initiative seeks to prevent ransomware attacks and ensure hospital devices remain safe and functional, allowing healthcare providers to focus on patient care.
The United Kingdom’s AI Safety Institute (AISI) is opening its first US office in San Francisco’s tech hub to bolster global AI safety efforts. Led by Michelle Donelan, the move aims to leverage Bay Area tech expertise and enhance collaboration with the US AI Safety Institute. AISI’s expansion signals a pivotal moment in global AI safety research, with plans to set new international standards discussed at the upcoming AI Seoul Summit.
A recent report by Kaspersky unveils that a majority of geographically distributed companies face frequent network issues, with 59% encountering problems at least monthly. Notably, network failures affect 55% of surveyed businesses, leading to connectivity losses and degraded service performance for 45% of respondents. Maxim Kaminsky of Kaspersky emphasizes the criticality of timely network management measures to avoid reputational and financial risks associated with IT downtime.
Major social media platforms face increased deletion rates in the US due to privacy concerns, algorithm changes, and shifting demographics. Despite once being popular, platforms like Instagram, Facebook, and Snapchat are experiencing drops in user retention. This trend extends to e-commerce apps like Amazon, as competition, privacy concerns, and changing consumer behavior influence uninstall decisions.
A Wisconsin man, Steven Anderegg, was arrested for using generative artificial intelligence to produce explicit images of minors. The US Department of Justice highlighted the severity of the charges, emphasizing the need to protect children from such exploitation. Deputy Attorney General Lisa Monaco underscored the commitment to pursue individuals involved in the creation and distribution of child sexual abuse material, regardless of the technology used.
Copyright © 2024 CyberMaterial. All Rights Reserved.
