News Roundup — June 26th 2024 edition.

BCK Security Inc
BCK Security Weekly Newsletter
3 min readJun 27, 2024

This week in cybersecurity, a cyberattack on CDK Global disrupted thousands of US car dealerships, with hackers demanding millions in ransom. A threat actor claimed to have breached Apple, stealing source code. Multi-factor authentication was found insufficient for cloud data protection, and Optus suffered a data breach due to a faulty API. London hospitals postponed surgeries after a ransomware attack.

Change Healthcare and Accenture faced data breaches, while the US sanctioned 12 Kaspersky executives. CDK Global warned customers about threat actors posing as support and faced another attack during recovery. Researchers stole $3 million in crypto from Kraken due to a bug.

A DDoS attack hit Poland’s UEFA Euro opening match, and a UK health club chain experienced a data leak. Julian Assange agreed to plead guilty in a US deal. CISA alerted chemical facilities about Ivanti vulnerabilities, and a new MOVEit bug was disclosed. WordPress plugins were backdoored in a supply chain attack, highlighting ongoing security issues.

--

--

BCK Security Inc
BCK Security Weekly Newsletter

Julien Richard — CISSP | OSCP | CRTP | CRISC | CISA | CCSP | Pentest+ | CEH | GCP-CDL