👉 What are the latest cybersecurity alerts, incidents, and news?
LightSpy, macOS, Apple, ThreatFabric, RedTail Crypto-Mining Malware, Palo Alto Networks, Akamai, WordPress Plugins, Fastly, Fake Browsers, BitRAT, Lumma Stealer, eSentire, Microsoft Office, Johnson & Johnson, Newfoundland TV, Davido, University of Chicago Medical Center, Everbridge, Surveillance Law, EU Parliament, Europol’s ‘Endgame’ Operation, Public Sector Apps, Veracode, OpenAI.
Listen to the full podcast
A macOS version of the LightSpy surveillance framework has been discovered, extending its reach beyond Android and iOS. Researchers found that it uses various plugins to capture data from microphones, cameras, and more on infected devices. This discovery reveals LightSpy’s potential to target a wider array of systems, raising significant cybersecurity concerns.
The RedTail cryptocurrency mining malware has added a critical vulnerability in Palo Alto Networks firewalls to its exploit arsenal. This update includes new anti-analysis techniques and private crypto-mining pools for better control. Researchers suggest this sophistication may indicate a nation-state-sponsored attack group behind RedTail.
Cybersecurity researchers have flagged multiple high-severity vulnerabilities in WordPress plugins, exploited by attackers to create rogue administrator accounts. These flaws allow unauthenticated stored cross-site scripting (XSS) attacks, enabling the injection of malicious scripts due to insufficient input sanitization. WordPress site owners should urgently update plugins, audit for malware, and check for suspicious admin users to mitigate these risks.
eSentire’s TRU reveals a sophisticated malware campaign delivering BitRAT and Lumma Stealer via fake browser updates, exploiting user trust for malicious ends. The attack’s complexity involves multiple steps, including redirecting users to phony update pages and utilizing PowerShell scripts to download payloads. With the malware’s capabilities ranging from remote access to information theft, vigilance against fake updates is paramount for safeguarding against evolving cyber threats.
Cybercriminals distribute diverse malware via cracked software, prompting warnings from security experts about the risks involved in downloading pirated versions. AhnLab Security Intelligence Center (ASEC) identifies the ongoing campaign, revealing that attackers exploit popular software like Microsoft Office and Windows to inject various malicious payloads into systems. Users should exercise caution, as these malware-laden files often persistently reinstall themselves, posing significant threats to cybersecurity.
Johnson & Johnson reports a significant data breach affecting over 175,000 Texans, potentially linked to a broader incident involving pharmaceutical support company Cencora. The breach compromises sensitive patient information, including names, addresses, medical data, and birth dates, raising concerns for affected individuals nationwide. With over 15 pharmaceutical companies impacted, the full scope of the breach’s impact on patient data security remains under assessment.
Newfoundland Broadcasting Company Limited, operator of NTV, confirms a cyberattack without disrupting operations. Perpetrators threaten to expose company data online. Cybersecurity measures paramount for safeguarding against future threats.
Nigerian artist Davido’s launch of the memecoin “DAVIDO” on Solana’s pump.fun platform garnered significant attention with promises of market success, but within hours, it collapsed, prompting concerns of a rug pull. Despite initial optimism and high-profile endorsements, the token’s rapid crash and subsequent fallout have sparked scrutiny and suspicion surrounding Davido’s involvement.
Over 10,000 patients and employees of the University of Chicago Medical Center may have had their data exposed in a phishing incident. The breach compromised sensitive information including social security numbers and security questions. UChicago Medicine is implementing measures to prevent future breaches.
Everbridge, a crisis management software company, suffered a data breach impacting user data, prompting a call for multi-factor authentication to enhance security measures. The breach, detected on May 21, affected a limited number of files containing business-related information, including customer contact details and service subscriptions. While the investigation is ongoing, Everbridge is working with cybersecurity experts to assess the extent of the breach and ensure customer protection.
📢 Cyber News
U.S. senators aim to narrow surveillance scope, restricting entities the government can compel for communications. Senate Intel Committee approves legislation amending Section 702 of FISA, addressing concerns over broad language. Biden administration refutes claims, promising judicious use of expanded authority.
Belgium and France authorities raided the home and office of a European Parliament staffer allegedly paid by Russia to spread propaganda through a contentious news outlet. The probe focuses on Voice of Europe, accused of promoting Kremlin narratives ahead of European elections. Despite the allegations, the targeted lawmaker denies any involvement in Russian disinformation activities.
Europol’s recent operation, “Endgame,” aimed to disrupt significant malware droppers like IcedID and Trickbot, conducted with international collaboration between May 27 and 29, 2024. Coordinated efforts led to arrests, server takedowns, and over 2000 domains under law enforcement control. The operation’s success demonstrates the importance of global cooperation in combating cybercrime.
Veracode’s Chief Research Officer emphasizes the critical need for a secure-by-design approach, particularly in light of increasing cyber threats faced by the public sector. Eng applauds CISA’s Secure by Design Pledge, underscoring the importance of collaborative efforts to promote secure software practices across government and industry.
OpenAI’s recent disclosure reveals its intervention in five covert influence operations originating from China, Iran, Israel, and Russia, leveraging artificial intelligence (AI) tools to manipulate public discourse. These operations, detected over the past three months, utilized AI models to generate comments, articles, and social media content across various languages, aiming to sway political outcomes while concealing their true identities.
Copyright © 2024 CyberMaterial. All Rights Reserved.
