News Roundup — Apr 24th 2024 edition.

BCK Security Inc

Published in

BCK Security Weekly Newsletter

3 min readApr 25, 2024

Russian Sandworm hackers pose as hacktivists in water utility breaches

The Sandworm hacking group associated with Russian military intelligence has been hiding attacks and operations behind…

www.bleepingcomputer.com

FIN7 targets American automaker's IT staff in phishing attacks

The financially motivated threat actor FIN7 targeted a large U.S. car maker with spear-phishing emails for employees in…

www.bleepingcomputer.com

185K people's data stolen in Cherry Health ransomware raid

Extent of information seized will be a concern for those affected

www.theregister.com

Open source groups fear xz repeat as suspicious messages fly

Social engineering patterns spotted across range of popular projects

www.theregister.com

Cyberattack Takes Frontier Communications Offline

The local phone and business communications company said that attackers accessed unspecified PII, after infiltrating…

www.darkreading.com

Evil XDR: Researcher Turns Palo Alto Software Into Perfect Malware

It turns out that a powerful security solution can double as even more powerful malware, capable of granting…

www.darkreading.com

Cisco Warns of Massive Surge in Password Spraying Attacks on VPNs

Attackers are indiscriminately targeting VPNs from Cisco and several other vendors in what may be a reconnaissance…

www.darkreading.com

ICS Network Controllers Open to Remote Exploit, No Patches Available

CISA advisory warns of critical ICS device flaws, but a lack of available fixes leaves network administrators on…

www.darkreading.com

840-bed hospital in France postpones procedures after cyberattack

The Hospital Simone Veil in Cannes (CHC-SV) has announced that it was targeted by a cyberattack on Tuesday morning…

www.bleepingcomputer.com

CISA and Partners Release Advisory on Akira Ransomware | CISA

Today, CISA, the Federal Bureau of Investigation (FBI), Europol's European Cybercrime Centre (EC3), and the…

www.cisa.gov

'Large volume' of data stolen from UN agency after ransomware attack

The attack is just the latest in a string targeting the multilateral body in recent years.

cyberscoop.com

Hackers are threatening to leak World-Check, a huge sanctions and financial crimes watchlist |…

The hackers say they have stolen 5.3 million records from the World-Check database, used by companies and banks for…

techcrunch.com

Malware dev lures child exploiters into honeytrap to extort them

You rarely root for a cybercriminal, but a new malware campaign targeting child exploiters doesn't make you feel bad…

www.bleepingcomputer.com

CrushFTP warns users to patch exploited zero-day "immediately"

CrushFTP warned customers today in a private memo of an actively exploited zero-day vulnerability fixed in new versions…

www.bleepingcomputer.com

FBI Director Wray Issues Dire Warning on China's Cybersecurity Threat

Chinese actors are ready and poised to do "devastating" damage to key US infrastructure services if needed, he said.

www.darkreading.com

Hackers Offering Admin Access to 3000 Fortinet SSL-VPN

An unidentified group of hackers has exploited vulnerabilities in Fortinet SSL-VPN devices, allowing employees to…

cybersecuritynews.com

Cisco firewall 0-days under attack for 5 months by resourceful nation-state hackers

Perimeter devices ought to prevent network hacks. Why are so many devices allowing attacks?

arstechnica.com

Lights On in Leicester: City Streetlights in Disarray After Cyberattack

The city is stymied in efforts to pinpoint the issue since its IT systems were shut down in the wake of the…

www.darkreading.com

Biden signs bill to ban TikTok if Chinese owner ByteDance doesn't sell

Bill gives ByteDance 270 days to sell TikTok or app loses access to US market.

arstechnica.com

Hackers infect users of antivirus service that delivered updates over HTTP

eScan AV updates were delivered over HTTP for five years.

arstechnica.com

BCK Security Weekly Newsletter

News Roundup — Apr 24th 2024 edition.

Russian Sandworm hackers pose as hacktivists in water utility breaches

The Sandworm hacking group associated with Russian military intelligence has been hiding attacks and operations behind…

FIN7 targets American automaker's IT staff in phishing attacks

The financially motivated threat actor FIN7 targeted a large U.S. car maker with spear-phishing emails for employees in…

185K people's data stolen in Cherry Health ransomware raid

Extent of information seized will be a concern for those affected

Open source groups fear xz repeat as suspicious messages fly

Social engineering patterns spotted across range of popular projects

Cyberattack Takes Frontier Communications Offline

The local phone and business communications company said that attackers accessed unspecified PII, after infiltrating…

Evil XDR: Researcher Turns Palo Alto Software Into Perfect Malware

It turns out that a powerful security solution can double as even more powerful malware, capable of granting…

Cisco Warns of Massive Surge in Password Spraying Attacks on VPNs

Attackers are indiscriminately targeting VPNs from Cisco and several other vendors in what may be a reconnaissance…

ICS Network Controllers Open to Remote Exploit, No Patches Available

CISA advisory warns of critical ICS device flaws, but a lack of available fixes leaves network administrators on…

840-bed hospital in France postpones procedures after cyberattack

The Hospital Simone Veil in Cannes (CHC-SV) has announced that it was targeted by a cyberattack on Tuesday morning…

CISA and Partners Release Advisory on Akira Ransomware | CISA

Today, CISA, the Federal Bureau of Investigation (FBI), Europol's European Cybercrime Centre (EC3), and the…

'Large volume' of data stolen from UN agency after ransomware attack

The attack is just the latest in a string targeting the multilateral body in recent years.

Hackers are threatening to leak World-Check, a huge sanctions and financial crimes watchlist |…

The hackers say they have stolen 5.3 million records from the World-Check database, used by companies and banks for…

Malware dev lures child exploiters into honeytrap to extort them

You rarely root for a cybercriminal, but a new malware campaign targeting child exploiters doesn't make you feel bad…

CrushFTP warns users to patch exploited zero-day "immediately"

CrushFTP warned customers today in a private memo of an actively exploited zero-day vulnerability fixed in new versions…

FBI Director Wray Issues Dire Warning on China's Cybersecurity Threat

Chinese actors are ready and poised to do "devastating" damage to key US infrastructure services if needed, he said.

Hackers Offering Admin Access to 3000 Fortinet SSL-VPN

An unidentified group of hackers has exploited vulnerabilities in Fortinet SSL-VPN devices, allowing employees to…

Cisco firewall 0-days under attack for 5 months by resourceful nation-state hackers

Perimeter devices ought to prevent network hacks. Why are so many devices allowing attacks?

Lights On in Leicester: City Streetlights in Disarray After Cyberattack

The city is stymied in efforts to pinpoint the issue since its IT systems were shut down in the wake of the…

Biden signs bill to ban TikTok if Chinese owner ByteDance doesn't sell

Bill gives ByteDance 270 days to sell TikTok or app loses access to US market.

Hackers infect users of antivirus service that delivered updates over HTTP

eScan AV updates were delivered over HTTP for five years.

Billions of scraped Discord messages up for sale | Malwarebytes

An internet scraping platform is offering access to a database filled with over four billion Discord messages and…

Published in BCK Security Weekly Newsletter

Written by BCK Security Inc

No responses yet