News Roundup — July 31st 2024 edition.
This week in cybersecurity, Google announced it will not remove third-party cookies from Chrome, sparking privacy concerns. A North Korean hacking group gained attention from Mandiant and the FBI, and KnowBe4 mistakenly hired a North Korean hacker. HealthEquity’s data breach affected 4.3 million people, and US senators called on the FTC to investigate car makers’ privacy practices.
Fake GitHub accounts spread malware, and companies struggled to recover from a crippling CrowdStrike Falcon update, with losses estimated at $5.4 billion. Millions of devices are vulnerable to the PKFail secure boot bypass issue, and a targeted PyPI package stole Google Cloud credentials from macOS developers.
ServiceNow RCE flaws were actively exploited to steal credentials, and a critical FBCS data breach impacted 4.2 million people. Meta dismantled a massive Instagram sextortion network, and French police pushed a self-destruct payload to clean PCs infected with PlugX malware.
The FBI, CISA, and partners released an advisory on North Korean cyber espionage. Senate introduced a bill to promote cybersecurity apprenticeships, and the India-linked SideWinder group pivoted to hacking maritime targets. Additionally, ongoing concerns about car software updates and cybersecurity regulations were highlighted in recent discussions.
