SecurityWeek-Cybersecurity Update

"Google disrupts more China-linked Dragonbridge Influence Operations."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 26 June 2024, 1632 UTC.

Content and Source:  https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Ffeeds.feedburner.com%2FSecurityweek/SecurityWeek.

Please scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

SecurityWeek

76K followers43 articles per week#security#tech

31

TODAY

Google Disrupts More China-Linked Dragonbridge Influence Operations

Google disrupts China-linked influence operations

•

by Ionut Arghire / 1h

Google has disrupted over 175,000 YouTube and Blogger instances related to the Chinese influence operation Dragonbridge. The post appeared first on SecurityWeek .

Gaining and Retaining Security Talent: A Cheat Sheet for CISOs

by Kevin Townsend / 3h

Freed from the shackles of always demanding a technical background, the CISO can concentrate on building a diverse team comprising multiple skills. The post appeared first on SecurityWeek .

The EU Targets Russia’s LNG Ghost Fleet With Sanctions as Concern Mounts About Hybrid Attacks

EU adopts 14th sanctions against Russia

•

by Associated Press / 3h

Some expressed concern about a rise in hybrid attacks by Russia – including allegations of election interference, cyberattacks and sabotage. The post appeared first on SecurityWeek .

P2Pinfect Worm Now Dropping Ransomware on Redis Servers

P2PInfect botnet deploys ransomware

•

by Ionut Arghire / 4h

The P2Pinfect worm targeting Redis servers has been updated with ransomware and cryptocurrency mining payloads. The post appeared first on SecurityWeek .

Polyfill Supply Chain Attack Hits Over 100k Websites

Polyfill.io supply chain attack impacts 100K+

•

by Ionut Arghire / 5h

More than 100,000 websites are affected by a supply chain attack injecting malware via a Polyfill domain. The post appeared first on SecurityWeek .

Siemens Sicam Vulnerabilities Could Facilitate Attacks on Energy Sector

5 TTPs

•

by Eduard Kovacs / 6h

Several vulnerabilities patched recently in Siemens Sicam products could be exploited in attacks aimed at the energy sector. The post appeared first on SecurityWeek .

Exploitation Attempts Target New MOVEit Transfer Vulnerability

4 TTPs

•

by Eduard Kovacs / 6h

•

CVE-2024-5806

Exploitation attempts targeting CVE-2024-5806, a critical MOVEit Transfer vulnerability patched recently, have started. The post appeared first on SecurityWeek .

YESTERDAY

EU Sanctions Six Russian Hackers

EU sanctions Russian hackers cyberattacks

•

by Eduard Kovacs / 1d

The European Council has added six Russian hackers to the EU’s sanctions list for their cyberattacks against member states and Ukraine. The post appeared first on SecurityWeek .

Recent Zyxel NAS Vulnerability Exploited by Botnet

2 TTPs

•

by Ionut Arghire / 1d

•

CVE-2024-29973

A Mirai-like botnet has started exploiting a critical-severity vulnerability in discontinued Zyxel NAS products. The post appeared first on SecurityWeek .

Indonesia Says a Cyberattack Has Compromised Its Data Center but It Won’t Pay the $8 Million Ransom

Indonesia refuses $8 million ransom

•

by Associated Press / 1d

Indonesia’s national data center has been compromised by a hacking group asking for a $8 million ransom that the government won’t pay. The post appeared first on SecurityWeek .

Hackers Steal Over $2 Million in Cryptocurrency From CoinStats Wallets

CoinStats reports security breach

•

by Ionut Arghire / 1d

CoinStats says North Korean hackers drained $2 million in virtual assets from 1,590 cryptocurrency wallets. The post appeared first on SecurityWeek .

Several Plugins Compromised in WordPress Supply Chain Attack

8 TTPs

•

by Ionut Arghire / 1d

•

Supply-chain attack on WordPress plugins affects

Five WordPress plugins were injected with malicious code that creates a new administrative account. The post appeared first on SecurityWeek .

Meta’s Virtual Reality Headset Vulnerable to Ransomware Attacks: Researcher

by Kevin Townsend / 1d

Researcher shows how hackers could use social engineering to deliver ransomware and other malware to Meta’s Quest 3 VR headset. The post appeared first on SecurityWeek .

Car Dealerships in North America Revert to Pens and Paper After Cyberattacks on Software Provider

CDK Global hit by cyberattacks

•

by Associated Press / 1d

Car dealerships in North America are still wrestling with major disruptions that started last week with cyberattacks on a company whose software is used widely in the auto retail sales sector. The post appeared first on SecurityWeek .

Malware Sandbox Any.Run Targeted in Phishing Attack

CISA CSAT breach exposes data

•

by Eduard Kovacs / 1d

Employees of the Any.Run malware analysis service were recently targeted in a phishing attack that was part of a BEC campaign. The post appeared first on SecurityWeek .

JUN 24, 2024

Neiman Marcus Data Breach Disclosed as Hacker Offers to Sell Stolen Information

by Eduard Kovacs / 1d

Neiman Marcus has disclosed a data breach impacting 64,000 people just as a hacker announced the sale of customer data. The post appeared first on SecurityWeek .

Chrome 126 Update Patches Memory Safety Bugs

4 TTPs

•

by Ionut Arghire / 1d

•

CVE-2024-6290 & 3 others

Google has released a Chrome security update to resolve four high-severity use-after-free vulnerabilities. The post appeared first on SecurityWeek .

WikiLeaks Founder Julian Assange Will Plead Guilty in Deal With US and Return to Australia

Julian Assange to plead guilty

•

by Associated Press / 1d

Assange will plead guilty to an Espionage Act charge of conspiring to unlawfully obtain and disseminate classified national defense information, the Justice Department said. The post appeared first on SecurityWeek .

Chinese Hackers Have Stepped Up Attacks on Taiwanese Organizations, Cybersecurity Firm Says

Chinese hackers target Taiwanese organizations

•

by Associated Press / 1d

A suspected Chinese state-sponsored hacking group has stepped up its targeting of Taiwanese organizations, particularly those in sectors such as government, education, technology and diplomacy. The post appeared first on SecurityWeek .

Tech Leaders Gather This Week for AI Risk Summit + CISO Forum at the Ritz-Carlton, Half Moon Bay

by Mike Lennon / 1d

SecurityWeek’s AI Risk Summit + CISO Forum brings together business and government stakeholders to provide meaningful guidance on risk management and cybersecurity in the age of artificial intelligence. The post appeared first on SecurityWeek .

New SnailLoad Attack Relies on Network Latency Variations to Infer User Activity

by Eduard Kovacs / 2d

New attack named SnailLoad allows a remote attacker to infer websites and videos viewed by a user without direct access to network traffic. The post appeared first on SecurityWeek .

EFF Issues New Warning After Discovery of Automated License Plate Reader Vulnerabilities

EFF warns of ALPR vulnerabilities

•

by Eduard Kovacs / 2d

The EFF has issued a warning over the use of automated license plate readers following the discovery of serious vulnerabilities. The post appeared first on SecurityWeek .

LivaNova USA Discloses Data Breach Impacting 130,000 Individuals

by Ionut Arghire / 2d

LivaNova USA says the personal and medical information of 130,000 individuals was compromised in an October 2023 data breach. The post appeared first on SecurityWeek .

Vietnamese Members of FIN9 Hacking Group Charged in US

Vietnamese FIN9 hackers indicted $71M

•

by Ionut Arghire / 2d

The US has announced charges against four Vietnamese nationals for hacking businesses and causing $71 million in losses. The post appeared first on SecurityWeek .

Push Notification Fatigue Leads to LA County Health Department Data Breach

by Ionut Arghire / 2d

The Los Angeles County Department of Health Services discloses a data breach caused by push notification spamming attack. The post appeared first on SecurityWeek .

US Sanctions 12 Kaspersky Executives

US sanctions Kaspersky Lab executives

•

by Eduard Kovacs / 2d

The US has imposed sanctions on 12 individuals who have leadership roles at Kaspersky in Russia and the UK. The post appeared first on SecurityWeek .