Cybersecurity Weekly: Ransomware hits schools, vulnerability toolkit, state-sponsored hackers
Virginia's largest school system was hit with ransomware. The U.K. government releases a toolkit to easily disclose vulnerabilities. International hackers are targeting Exchange, Citrix and F5 flaws. All this, and more, in this week’s edition of Cybersecurity Weekly.
See Infosec IQ in action
1. Virginia's largest school system hit with ransomware
The Fairfax County Public School District is investigating a cyberattack on its technology systems. Maze has claimed responsibility for the incident. The administration confirmed the ransomware attack in a memo and said the incident did not disrupt its distance learning program, which started last week.
Read more »
2. U.K. government releases toolkit to easily disclose vulnerabilities
The National Cyber Security Center in the U.K. released a guideline to help companies implement or improve a vulnerability disclosure process. The Vulnerability Disclosure Toolkit underlines the need for organizations of all sizes to pave the road for an open posture toward responsible bug reporting.
Read more »
3. International hackers targeting Exchange, Citrix, F5 flaws
The US government issued an advisory on China-sponsored hackers attacking government agencies through vulnerabilities in Microsoft Exchange, Citrix, Pulse, and F5 devices and servers. MSS-affiliated actors have targeted various industries across the United States and other countries over the past few weeks.
4. Magento stores hit by largest automated hacking attack since 2015
Over the weekend, a credit card skimming prevention firm detected 1,904 Magento stores that were compromised over the last four days. The attack started when ten stores were infected with a credit card skimming script not previously seen in other attacks.
Read more »
5. Staples discloses data breach exposing customer info
Staples informed some of its customers that data related to their orders has been accessed without authorization. The company has not disclosed the incident publicly and alerted affected customers individually over email. The event occurred earlier this month around September 2 and consisted of unauthorized access to a system belonging to Staples.
Read more »
6. Ransomware Hits US District Court in Louisiana
The Fourth District Court of Louisiana has been hit with ransomware, and the attackers have published court data on the Dark Web to prove their capabilities. The attack, attributed to and claimed by the Conti malware group, has knocked the court's website offline. Conti uses the Trickbot malware distribution network to deliver the ransomware payload.
Read more »
7. New Linux malware steals call details from VoIP softswitch systems
Cybersecurity researchers have discovered an entirely new kind of Linux malware dubbed CDRThief that targets VoIP softswitches in an attempt to steal phone call metadata. The primary goal of the malware is to exfiltrate various private data from a compromised softswitch, including call detail records.
Read more »
8. Unpatched Bluetooth flaw lets hackers easily target nearby devices
Last week, Bluetooth SIG issued a statement informing users and vendors of a newly reported unpatched vulnerability that potentially affects hundreds of millions of devices worldwide. Dubbed BLURtooth, the flaw allows attackers to connect to a targeted nearby device by overwriting the authenticated key or reducing the encryption key strength.
Read more »
9. Hackers stole $5.4 million from Eterbase cryptocurrency exchange
Last week, European cryptocurrency exchange Eterbase disclosed a massive breach of its network by an unknown group of hackers who stole cryptocurrencies worth 5.4 million dollars. Eterbase has now entered maintenance mode until the security issue is resolved.
Read more »
See Infosec IQ in action
10. New Raccoon attack could let attackers break SSL/TLS encryption
Security researchers detailed a new timing vulnerability in the TLS protocol that could potentially allow an attacker to break the encryption and read sensitive communication under specific conditions. Dubbed Raccoon Attack, the server-side attack can extract the shared secret key used for secure communications between two parties.
Read more »
- Reduce security events
- Reinforce cyber secure behaviors
- Strengthen cybersecurity culture at your organization
In this Series
- Cybersecurity Weekly: Ransomware hits schools, vulnerability toolkit, state-sponsored hackers
- Canada Flipper Zero ban and new RustDoor macOS malware
- AnyDesk hack and iPhone patched kernel flaw
- Tesla Pwn2Own hacks and iOS push alerts abuse
- TeamViewer breach and Atlassian Jira outage
- Moscow ISP revenge hack and Microsoft Sharepoint bug warning
- X verified accounts hack and SpectralBlur macOS malware
- CISA default password alert and SOHO KV-botnet campaign
- New 5G modem flaws and Apple’s data breach report
- Staples cyberattack, Agent Racoon backdoor and other news
- British Library ransomware attack, Windows fingerprint authentication bypass
- Samsung UK data breach and ransomware actor’s SEC complaint
- ICBC ransomware attack and ChatGPT outage
- Boeing Lockbit ransomware attack, Apple’s vulnerability and WhatsApp mods spyware
- Octo Tempest hacking group and new iLeakage attack
- Okta support system breach and Google Ads fake KeePass campaign
- Skype DarkGate malware, Shadow PC breach and AvosLocker ransomware warning
- 23andMe data theft, MGM’s $100M ransomware loss and the Azure VM breach
- Malicious Bing Chat ads and FBI’s dual ransomware warning
- T-Mobile app glitch and fake Booking.com pages
- Airbus data leak, Cisco Webex ad malware and €345 million TikTok fine
- New Apple iMessage exploit and CISA’s Apache RocketMQ warning
- Forever 21 data breach and Android BadBazaar espionage
- Duolingo data leak and the Met Police IT hack
- Discord.io data breach and Ivanti Avalanche vulnerabilities
- UK Electoral Commission hack and Microsoft’s role in China email breach
- Salesforce email zero-day exploit and Microsoft Power Platform criticism
- Airlines disclose pilot data breach and the Microsoft Teams bug
- GravityRAT Android Trojan and new MOVEit Transfer flaw
- University of Manchester hack and Honda API flaws
- MOVEit zero-day exploit and the U.S. iPhone hack accusation
- Daam Android virus and Barracuda zero-day flaw
- TP-Link router exploit and 18-year-old charged with hacking DraftKings accounts
- Discord support hack and Toyota location data leak
- Twitter private tweets bug and Cisco phone router vulnerabilities
- Cisco XSS zero-day flaw and PaperCut vulnerabilities
- 3CX hackers hit critical infrastructure and secondhand routers cause security concerns
- Hyundai data breach and Microsoft’s warning to accountants
- Western Digital cloud breach and the MSI ransomware hack
- TMX loan data breach, Italy bans ChatGPT and WordPress Elementor Pro exploit
- ChatGPT data leak and Gmail message theft by North Korean hackers
- U.S. federal agency hack and the return of FakeCalls Android malware
- Massive AT&T data breach and fake jobs targeting security researchers
- U.S. Marshals service breach and TPM 2.0 security flaws
- Dangerous ChatGPT apps and food giant Dole ransomware attack
- GoDaddy malware installations, record-breaking DDoS attack and the new WhiskerSpy malware
- Reddit’s employees phished, healthcare firms targeted and the new Screenshotter malware
- JD Sports data breached, VMware ESXi servers attacked and the HeadCrab malware
- Yandex source code leaked, 4500+ WordPress sites hacked and the new SwiftSlicer malware
- PayPal accounts breached, Fortinet VPN flaw exploited, and the new Hook malware
- Twitter users’ emails leaked, ChatGPT used to write malware and Slack’s repository breach
We’ll customize our demo to your
- Security awareness goals
- Existing security and employee training tools
- Industry and compliance requirements
