News Roundup — August 7th 2024 edition.

BCK Security Inc
BCK Security Weekly Newsletter
4 min readAug 14, 2024

This week in cybersecurity, North Korean hackers targeted developers worldwide with spyware disguised as job offers. The US Senate introduced bills aimed at streamlining cybersecurity regulations, while concerns grew over smart cars sharing driver data, prompting calls for federal investigation.

OneBlood’s virtual machines were encrypted in a ransomware attack, and Microsoft revealed that a massive Azure outage was caused by a DDoS attack. Cencora confirmed that patient health information was stolen in a February attack, and Singapore’s Cybersecurity Agency warned of rising cybercrime and ransom demands.

In Toronto, 10 suspects were arrested in a SIM swap scam, while the US traded five cybercriminals to Russia in a prisoner swap. The EPA faced scrutiny over water system cybersecurity, and CISA named Lisa Einstein as its Chief AI Officer. Meanwhile, CrowdStrike was sued by investors over a global IT outage, and a GitHub token leak potentially endangered the Python programming language.

Cybercriminals deployed 100,000 malware samples targeting various systems, while a hacker wiped 13,000 devices after breaching a classroom management platform. French Olympic venues and cultural sites were targeted in a cyberattack, and the open-source port scanner RustScan received attention for its security capabilities. Finally, Signal faced blocks in Venezuela and Russia, raising concerns over communication privacy.

--

--

BCK Security Inc
BCK Security Weekly Newsletter

Julien Richard — CISSP | OSCP | CRTP | CRISC | CISA | CCSP | Pentest+ | CEH | GCP-CDL