Cybersecurity Weekly: SSL malware campaign, Intel vulnerability, PwnedLocker decrypted
A new malware campaign employs fake security certificate updates. An unfixable vulnerability in Intel chipsets allows hackers to obtain protected data. Decryption is now available for PwnedLocker ransomware. All this, and more, in this week’s edition of Cybersecurity Weekly.
Top Security Awareness Posters
1. Malware campaign employs fake security certificate updates
Scammers are using a new phishing technique to trick victims into installing a security certificate update that delivers malware. Visitors to infected websites are asked to install a software update because the security certificate expired. The first infections employed in these attacks date back to January 16 of this year.
Read more »
2. Vulnerability in Intel chipsets allows hackers to obtain protected data
Most Intel chipsets released in the past five years are affected by a vulnerability that can be exploited to obtain encrypted data and compromise data protection systems. According to security researchers, this is an unfixable vulnerability that affects the CSME boot ROM on most intel processors, except for Ice Point chips.
Read more »
3. U.S. property and demographic database exposes 200 million records
200 million records containing a wide range of property-related information on U.S. residents were left exposed on a public database. The database, which was hosted on Google Cloud, was first indexed by search engines on January 26 and discovered a day later by cybersecurity researchers.
Read more »
4. Virgin Media data breach exposes info of 900,000 customers
Virgin Media announced that the personal information of 900,000 of its customers was accessed without permission on at least one occasion due to a misconfigured and unsecured marketing database. The database did not include any passwords or financial details, but did contain limited contact information, such as names and email addresses.
Read more »
5. Decryption now available for PwndLocker ransomware
Security researchers discovered a way to decrypt files encrypted by the new PwndLocker ransomware so victims can recover their files without paying any ransom. PwndLocker demanded ransoms ranging from $175,000 to over $660,000, depending on the size of the victim’s network.
Read more »
6. T-Mobile data breach exposes customer's personal, financial info
T-Mobile announced a data breach caused by a compromised email vendor that exposed the personal and financial information of some of its customers. Some of the hacked accounts contained T-Mobile customer information, such as Social Security numbers, financial information, government ID numbers, billing information and rate plans.
Read more »
7. Carnival cruise line operator discloses potential data breach
According to Carnival’s recent data breach report, an unauthorized third party gained access to some employee email accounts that contained personal information regarding their guests. Depending on the guest, hackers might have accessed customers' names, addresses, Social Security numbers and financial information.
Read more »
8. Let's Encrypt revoking 3 million incorrectly issued TLS certificates
Let's Encrypt removed three million TLS certifications that may have been issued wrongfully due to a bug in its Certificate Authority software. The bug opened up a scenario where a certificate could be issued even without adequately validating the holder's control of a domain name.
Read more »
9. FCC proposes to fine wireless carriers $200 million for selling customer location data
Last week, the U.S. FCC proposed $200 million fines against the four largest wireless carriers for selling access to their customers’ location information without taking adequate precautions to prevent unauthorized access to that data. The commission's fine is in response to a private company selling location data to law enforcement back in May 2018.
Read more »
See Infosec IQ in action
10. Cathay Pacific Airways fined over long-running breach
Last week, the U.K. fined Cathay Pacific Airways $646,000 following a long-running breach that occurred between October 2014 and May 2018. One of the attackers entered the network via an internet-facing server, moved laterally, installed malware and harvested credentials. The breach affected 9.4 million customers worldwide.
Read more »
- Reduce security events
- Reinforce cyber secure behaviors
- Strengthen cybersecurity culture at your organization
In this Series
- Cybersecurity Weekly: SSL malware campaign, Intel vulnerability, PwnedLocker decrypted
- Canada Flipper Zero ban and new RustDoor macOS malware
- AnyDesk hack and iPhone patched kernel flaw
- Tesla Pwn2Own hacks and iOS push alerts abuse
- TeamViewer breach and Atlassian Jira outage
- Moscow ISP revenge hack and Microsoft Sharepoint bug warning
- X verified accounts hack and SpectralBlur macOS malware
- CISA default password alert and SOHO KV-botnet campaign
- New 5G modem flaws and Apple’s data breach report
- Staples cyberattack, Agent Racoon backdoor and other news
- British Library ransomware attack, Windows fingerprint authentication bypass
- Samsung UK data breach and ransomware actor’s SEC complaint
- ICBC ransomware attack and ChatGPT outage
- Boeing Lockbit ransomware attack, Apple’s vulnerability and WhatsApp mods spyware
- Octo Tempest hacking group and new iLeakage attack
- Okta support system breach and Google Ads fake KeePass campaign
- Skype DarkGate malware, Shadow PC breach and AvosLocker ransomware warning
- 23andMe data theft, MGM’s $100M ransomware loss and the Azure VM breach
- Malicious Bing Chat ads and FBI’s dual ransomware warning
- T-Mobile app glitch and fake Booking.com pages
- Airbus data leak, Cisco Webex ad malware and €345 million TikTok fine
- New Apple iMessage exploit and CISA’s Apache RocketMQ warning
- Forever 21 data breach and Android BadBazaar espionage
- Duolingo data leak and the Met Police IT hack
- Discord.io data breach and Ivanti Avalanche vulnerabilities
- UK Electoral Commission hack and Microsoft’s role in China email breach
- Salesforce email zero-day exploit and Microsoft Power Platform criticism
- Airlines disclose pilot data breach and the Microsoft Teams bug
- GravityRAT Android Trojan and new MOVEit Transfer flaw
- University of Manchester hack and Honda API flaws
- MOVEit zero-day exploit and the U.S. iPhone hack accusation
- Daam Android virus and Barracuda zero-day flaw
- TP-Link router exploit and 18-year-old charged with hacking DraftKings accounts
- Discord support hack and Toyota location data leak
- Twitter private tweets bug and Cisco phone router vulnerabilities
- Cisco XSS zero-day flaw and PaperCut vulnerabilities
- 3CX hackers hit critical infrastructure and secondhand routers cause security concerns
- Hyundai data breach and Microsoft’s warning to accountants
- Western Digital cloud breach and the MSI ransomware hack
- TMX loan data breach, Italy bans ChatGPT and WordPress Elementor Pro exploit
- ChatGPT data leak and Gmail message theft by North Korean hackers
- U.S. federal agency hack and the return of FakeCalls Android malware
- Massive AT&T data breach and fake jobs targeting security researchers
- U.S. Marshals service breach and TPM 2.0 security flaws
- Dangerous ChatGPT apps and food giant Dole ransomware attack
- GoDaddy malware installations, record-breaking DDoS attack and the new WhiskerSpy malware
- Reddit’s employees phished, healthcare firms targeted and the new Screenshotter malware
- JD Sports data breached, VMware ESXi servers attacked and the HeadCrab malware
- Yandex source code leaked, 4500+ WordPress sites hacked and the new SwiftSlicer malware
- PayPal accounts breached, Fortinet VPN flaw exploited, and the new Hook malware
- Twitter users’ emails leaked, ChatGPT used to write malware and Slack’s repository breach
We’ll customize our demo to your
- Security awareness goals
- Existing security and employee training tools
- Industry and compliance requirements
