News Roundup — August 15th 2024 edition.

BCK Security Inc
BCK Security Weekly Newsletter
3 min readAug 15, 2024

This week in cybersecurity, Microsoft patched a critical zero-click Windows TCP/IP RCE vulnerability affecting all IPv6-enabled systems. The Chinese APT group Eastwind was linked to a cyber espionage campaign, and NIST launched encryption tools to resist quantum computing. AutoCanada faced a cyberattack on its IT systems, and a cybercriminal leader tied to JP Morgan was arrested for pioneering ransomware-as-a-service.

Hackers leaked 1.4 billion Tencent accounts, and DARPA is shifting from C to Rust for secure coding. The UN approved a controversial cybercrime treaty, and Microsoft reported Iranian interference in U.S. elections. The U.S. dismantled a North Korean laptop farm, and CISA warned about an actively exploited Apache OFBiz flaw. Finally, a cybercrime rapper sued a bank over a fraud investigation.

--

--

BCK Security Inc
BCK Security Weekly Newsletter

Julien Richard — CISSP | OSCP | CRTP | CRISC | CISA | CCSP | Pentest+ | CEH | GCP-CDL