Security· · 2 minMassive Data Breaches Exposed.
Today’s cybersecurity news is a mixed bag of breaches, vulnerabilities, and emerging threats. From a massive leak of driver’s licenses to new exploits in popular software, the landscape is as chaotic as ever. It’s a reminder that vigilance in security is more crucial than ever.
Massive Data Breaches Exposed
The dark web is buzzing with news of over 153 million driver’s licenses being sold, with the FBI launching an investigation into the Nexus service behind the leak. This incident underscores the ongoing vulnerability of identity verification systems. Meanwhile, the Manchester Airports Group confirmed a data breach impacting 8.8 million people, revealing sensitive personal information after refusing to pay a ransom.
Vulnerabilities Galore
CISA has added new flaws to its watchlist as attackers exploit reverse shells and crypto miners. Notably, Cisco's unpatched Secure Email flaws could expose sensitive communications, while a critical vulnerability in HPE's ArubaOS-CX may allow remote code execution. WordPress sites are also under threat, with vulnerabilities in popular plugins allowing for arbitrary code execution.
AI and Cybersecurity Concerns
AI tools are being weaponized in Latin America, targeting organizations with sophisticated multi-stage attacks. Capsule Security has launched an 'AI Circuit Breaker' to prevent rogue agents from causing real-world damage. This highlights the dual-edged nature of AI in cybersecurity—both a tool and a threat.
Software Issues Persist
Microsoft Teams and Outlook users on ARM devices are facing launch failures, a headache for many. Users are advised to update their systems to mitigate these issues. Additionally, a new update has reset desktop settings for non-English Windows devices, causing frustration among users trying to restore their preferences.
FBI Probes Possible Breach of 153 Million Driver’s Licenses
The FBI is investigating a major identity data breach linked to a dark web service offering access to millions of driver’s licenses. This incident raises concerns over the security of identity verification systems.
Critical Elementor Pro flaw exploited to take over WordPress sites
A severe vulnerability in the Elementor Pro plugin is being actively exploited, allowing attackers to execute arbitrary commands on WordPress sites. The flaw affects millions of installations.
- Attackers Turn Trusted Node.js Runtime Into Malware Delivery ToolMalicious actors are exploiting Node.js as a malware delivery mechanism in targeted attacks. — The Hacker News
- Microsoft: KB5120998 Windows update resets desktop settingsA known issue with a recent Windows update resets desktop settings for some users. — Bleeping Computer
- CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse ShellsCISA warns about multiple exploited vulnerabilities, urging immediate attention. — The Hacker News
- Researching Employment ScamsResearchers built a fake company to investigate employment scams. — Bruce Schneier's Blog
- Pegasus Zero-Click Spyware Exploit Infects Serbian Student Movement Member's iPhoneA zero-click exploit has been used to target a member of the Serbian student movement. — The Hacker News
Was this issue useful?
One click is enough — it shapes the next one.