TheNde
Security· · 2 min

Data Breaches and Cyber Attacks on the Rise.

Today’s cybersecurity news is packed with breaches, vulnerabilities, and the ongoing challenges of AI management. Major players like Microsoft and GitLab are in the hot seat with critical flaws and updates that could impact thousands. Meanwhile, innovative attacks are leveraging OAuth and targeting cloud servers, reminding us that the threat landscape is ever-evolving.

In brief
  1. Data Breaches and Cyber Attacks on the Rise
  2. Critical Vulnerabilities Demand Immediate Attention
  3. AI in Cybersecurity: A Double-Edged Sword
01 · Security

Data Breaches and Cyber Attacks on the Rise

Revolut's data breach exposed critical customer information.
Revolut's data breach exposed critical customer information.

Revolut has disclosed a data breach after attackers impersonated a government agency to obtain sensitive customer information. This incident underscores the increasing sophistication of social engineering tactics used by cybercriminals.

In other news, hackers hijacked HBO Max's Reddit account to push malware through ClickFix ads, a clever tactic that exploits user trust. These incidents highlight the importance of vigilance and robust security measures against targeted attacks.

02 · Security

Critical Vulnerabilities Demand Immediate Attention

Hackers are exploiting a severe GitLab vulnerability.
Hackers are exploiting a severe GitLab vulnerability.

CISA has warned that a maximum severity GitLab flaw is being actively exploited, with an urgent patch needed for affected users. This vulnerability allows unauthenticated access to sensitive information, making it a prime target for attacks.

Microsoft's recent updates have also caused widespread RDS failures and audio issues on Windows PCs, with users experiencing significant connectivity problems. These situations emphasize the challenges of timely and effective patch management in a fast-paced tech environment.

03 · Security

AI in Cybersecurity: A Double-Edged Sword

CISOs are navigating the complexities of AI integration.
CISOs are navigating the complexities of AI integration.

As CISOs race to integrate AI into their cybersecurity frameworks, the risks are growing. A recent report shows that 71% of CISOs are experimenting with AI tools, but the potential for misuse and over-privileged agents remains a significant concern.

Meanwhile, a new report reveals how OpenAI agents have been linked to a cyber-attack on RubyGems, highlighting the fine line between innovation and vulnerability in AI applications.

04 · Security

Emerging Threats in Cloud Environments

A new attack method targets cloud computing environments.
A new attack method targets cloud computing environments.

Hackers are targeting exposed Vite development servers to steal sensitive AWS and Azure credentials. This mass scanning campaign exploits a flaw that allows attackers to bypass security measures, showcasing vulnerabilities within cloud infrastructures.

On the other hand, companies like WordPress are proactively adding automated plugin reviews to prevent risky updates from reaching users. This is a step in the right direction to enhance security in a cloud-dominated landscape.

Key numbers
30,000

Number of users affected by the malicious Twitch browser extension leak.

Source
972

Record number of vulnerabilities patched by Microsoft in September updates.

Source
9.9/10

CVSS score for a critical vulnerability in ConnectWise's ScreenConnect software.

Source
Top stories
Infosecurity Magazine

Revolut Confirms Data Breach Through Fake Government Requests

Revolut suffered a data breach after attackers impersonated a government agency, leading to the unauthorized release of sensitive customer information. This incident highlights the growing threat of social engineering attacks.

BleepingComputer

CISA Warns of Exploited GitLab Vulnerability

Hackers are exploiting a critical GitLab vulnerability that allows unauthenticated access to sensitive data. CISA advises immediate patching for affected users to avert potential attacks.

Quick links
  1. Malicious Twitch Browser Extension Leaks OAuth TokensA malicious Twitch extension has leaked OAuth tokens from nearly 31,000 users, compromising their accounts. — The Hacker News
  2. Microsoft Updates Break Audio on Some Windows PCsUsers report audio issues after installing Microsoft’s September updates, affecting USB audio devices. — BleepingComputer
  3. Telus Warns Customers of Account BreachesTelus informs customers of account breaches, exposing personal information through compromised credentials. — SecurityWeek
  4. Three JFrog Artifactory Flaws Exploited for Backdoor DeploymentThree critical flaws in JFrog Artifactory are being exploited to install backdoors on vulnerable systems. — SecurityWeek
  5. ConnectWise Patches ScreenConnect VulnerabilityConnectWise has issued patches for a critical vulnerability in its ScreenConnect software exploited in recent attacks. — SecurityWeek
  6. Hackers Target Exposed Vite Dev ServersA new campaign targets exposed Vite development servers to steal AWS and Azure credentials. — BleepingComputer