TheNde
Security· · 2 min

Ransomware Rampage.

Today’s cybersecurity landscape is buzzing with major breaches, critical vulnerabilities, and the emergence of new threats. As hackers grow bolder, organizations must tighten their defenses. Don’t miss the latest on ransomware, state-sponsored attacks, and innovative security solutions.

In brief
  1. Ransomware Rampage
  2. Critical Vulnerabilities Galore
  3. State-Sponsored Threats
01 · Security

Ransomware Rampage

Warlock ransomware exploits SharePoint vulnerabilities.
Warlock ransomware exploits SharePoint vulnerabilities.

The Warlock ransomware group is making headlines again, exploiting SharePoint vulnerabilities to launch attacks on various sectors, including utilities and telecoms. As they disable security tools, organizations are left vulnerable. Meanwhile, the N0n ransomware gang is rapidly expanding its victim list since its emergence last month.

02 · Security

Critical Vulnerabilities Galore

Fortra patches critical vulnerabilities in BoKS.
Fortra patches critical vulnerabilities in BoKS.

Fortra has patched significant flaws in its BoKS product, including one critical vulnerability with a jaw-dropping CVSS score of 9.9. Meanwhile, GitLab’s AI Gateway also had a critical RCE vulnerability, urging users to patch their systems immediately. This is a stark reminder that vulnerabilities continue to surface at an alarming rate.

03 · Security

State-Sponsored Threats

MI5 warns of Chinese funding in academic research.
MI5 warns of Chinese funding in academic research.

MI5 revealed that China’s MSS is funding research involving over 100 U.K. academics, raising alarms about espionage. In a rare move, the U.S. has extradited an alleged Iranian state hacker linked to billions in cyber losses. These developments underscore the ongoing battle against state-sponsored cyber threats.

04 · Security

Data Breaches on the Rise

DTU breach exposes data of 200,000 users.
DTU breach exposes data of 200,000 users.

The Danish Technical University confirmed a breach exposing data of up to 200,000 users, while Frontline Education reported a data breach impacting school district employees. These incidents highlight the vulnerabilities educational institutions face amid increasing cyber threats.

Key numbers
9.9

The CVSS score of a critical vulnerability patched by Fortra in its BoKS product.

Source
200,000

Estimated number of users affected by the Danish university data breach.

Source
3.4 billion

Estimated losses attributed to the alleged Iranian hacker extradited to the U.S.

Source
Top stories
Bleeping Computer

Warlock Ransomware Group Targets Critical Infrastructure

Warlock ransomware is exploiting SharePoint vulnerabilities to attack various sectors, including utilities and telecoms. The group is known for disabling security tools, leaving organizations vulnerable to further attacks.

Bleeping Computer

Danish University Data Breach Exposes Sensitive Information

DTU reported a breach affecting up to 200,000 users due to compromised credentials. The attacker accessed a vast amount of sensitive data, raising concerns over the security of educational institutions.

Quick links
  1. N0n Ransomware: What You Need to KnowThe newly emerged N0n ransomware gang is rapidly expanding its victim count since its September debut. — Fortra
  2. OpenAI Parts Ways with Three ResearchersOpenAI has parted ways with three safety researchers due to mishandling sensitive information. — The Hacker News
  3. Microsoft Account Hacked in Crypto ScamMicrosoft's official X account was hacked in a scheme promoting a fraudulent cryptocurrency. — Bleeping Computer
  4. US Sanctions Tren de Aragua Gang MembersThe U.S. Treasury sanctioned members of the Tren de Aragua gang for their ATM jackpotting attacks. — Bleeping Computer
  5. Dell Patches Critical CSM VulnerabilitiesDell has patched critical flaws in its Container Storage Modules affecting Kubernetes environments. — Bleeping Computer