News Roundup — June 19th 2024 edition.

BCK Security Inc
BCK Security Weekly Newsletter
4 min readJun 19, 2024

This week in cybersecurity, Apple launched a new AI offering with strong privacy promises. Globe Life is investigating a web portal breach, and lawmakers questioned Microsoft over China ties and repeated breaches. Ascension was hacked after an employee downloaded malware. A critical RCE bug in Ivanti Endpoint Manager raised concerns with a new proof-of-concept exploit.

Panera Bread warned of an employee data breach following a ransomware attack. Microsoft faced criticism for a delayed response to a DNSSEC zero-day flaw. The alleged leader of the Scattered Spider hacking group was arrested. A new Linux malware controlled via Discord emojis was discovered, and ASUS warned of a critical bypass flaw in seven router models.

London hospitals canceled over 800 operations due to a ransomware attack. The Signal Foundation warned against EU encryption regulations. Singapore extradited cybercrime scammers, and hackers breached Amtrak Guest Rewards accounts. AMD is investigating a data breach. Critical VMware bugs exposed VMs to RCE and data theft. CISA released new network security guidance, and a bug allowed spoofing of Microsoft employee emails.

--

--

BCK Security Inc
BCK Security Weekly Newsletter

Julien Richard — CISSP | OSCP | CRTP | CRISC | CISA | CCSP | Pentest+ | CEH | GCP-CDL