⚠️ VULNERABILITY DISCLOSURE 5[−]
2 Dec60 US Credit Unions Offline After Cloud Ransomware InfectionThe affected IT provider, Ongoing Operations, was infiltrated through the Citrix Bleed vulnerability, emphasizing the importance of robust cybersecurity measures and patching vulnerabilities promptly.THEREGISTER.COM
2 DecNorth Korea's Lazarus Group Rakes in $3 Billion from Cryptocurrency HacksThe Lazarus Group, linked to North Korea, has exploited decentralized finance (DeFi) protocols to steal cryptocurrency and launder funds, contributing to the rise of DeFi hacking in 2022.THEHACKERNEWS.COM
2 Dec KEVActive Attacks Targeting Google Chrome & ownCloud Flaws: CISA WarnsThe CISA announced two known exploited vulnerabilities active attacks targeting Google Chrome & own cloud vulnerabilities in their catalog. As the national coordinator for critical infrastructure security and resilience, CISA oversees government cybersecurity operations. …GBHACKERS.COM
2 Dec KEVUS Health Dept urges hospitals to patch critical Citrix Bleed bugThe U.S. Department of Health and Human Services (HHS) warned hospitals this week to patch the critical 'Citrix Bleed' Netscaler vulnerability actively exploited in attacks. [...]BLEEPINGCOMPUTER.COM
2 DecOver 20,000 vulnerable Microsoft Exchange servers exposed to attacksTens of thousands of Microsoft Exchange email servers in Europe, the U.S., and Asia exposed on the public internet are vulnerable to remote code execution flaws. [...]BLEEPINGCOMPUTER.COM
🔥 INCIDENT REPORTING 3[−]
2 DecUpdate: 23andMe Says Hackers Accessed ‘Significant Number’ of Files About Users’ AncestryGenetic testing company 23andMe experienced a data breach, with hackers accessing around 14,000 customer accounts and potentially compromising the personal information of other users connected to those accounts.TECHCRUNCH.COM
2 DecSurgical Practice Notifying 437,400 Patients of Data TheftProliance Surgeons, a large Seattle-based surgical group, suffered a ransomware attack and data theft, potentially compromising the personal information of nearly 437,400 individuals.BANKINFOSECURITY.COM
2 DecExpert Warns of Turtle macOS RansomwareWhile the Turtle ransomware may not pose a significant risk to macOS users currently, its existence highlights the ongoing efforts by ransomware authors to target Apple devices.SECURITYAFFAIRS.COM
🕵️ THREAT INTELLIGENCE 5[−]
2 DecRussian Hacker Vladimir Dunaev Convicted for Creating TrickBot MalwareA Russian national has been found guilty in connection with his role in developing and deploying a malware known as TrickBot, the U.S. Department of Justice (DoJ) announced. Vladimir Dunaev, 40, was arrested in South Korea in September 2021 and extradited to the U.S. a …THEHACKERNEWS.COM
2 DecAgent Racoon Backdoor Targets Organizations in Middle East, Africa, and U.S.Organizations in the Middle East, Africa, and the U.S. have been targeted by an unknown threat actor to distribute a new backdoor called Agent Racoon. "This malware family is written using the .NET framework and leverages the domain name service (DNS) protocol to create a co…THEHACKERNEWS.COM
2 DecAWS re:Invent 2023 - 35 Security Talkssubmitted by ashar to security_cpe 1 points | 0 comments https://infosec.pub/pictrs/image/682cccc8-986b-4ce4-be56-751ab97da707.png AWS re:Invent 2023 - 35 Security TalksINFOSEC.PUB
2 DecIntroduction to OT Cybersecurity - GISPP ACADEMY - 1 hour 24 minsubmitted by ashar to security_cpe 1 points | 0 comments https://infosec.pub/pictrs/image/55ec54e4-26e9-4b22-921f-64bcd053b3ff.png What is OT Security | Introduction to OT Cybersecurity | Knowledge and Skills needed for OT SecurityINFOSEC.PUB
2 DecCritical 'LogoFAIL' Bugs Offer Secure Boot Bypass for Millions of PCssubmitted by IllNess to securitynews 1 points | 0 comments https://www.darkreading.com/endpoint-security/critical-logofail-bugs-secure-boot-bypass-millions-pcsDARKREADING.COM
📡 INFOSEC NEWS 1[−]
2 DecGoogle Chrome's new cache change could boost performanceGoogle is introducing a significant change to Chrome's Back/Forward Cache (BFCache) behavior, allowing web pages to be stored in the cache, even if a webmaster specifies not to store a page in the browser's cache. [...]BLEEPINGCOMPUTER.COM