보안· · 3분Data Breaches on the Rise.
Today's cybersecurity news is a mixed bag of alarming breaches and urgent patches. Major players like NVIDIA and Ivanti are scrambling after significant data leaks and zero-day vulnerabilities. As cyber threats continue to evolve, so do the defenses, but are they keeping pace?
Data Breaches on the Rise
NVIDIA confirmed a data breach affecting Armenian users of its GeForce NOW service. The incident resulted from a compromise of a partner's infrastructure, not NVIDIA's own systems. Meanwhile, Zara's breach exposed information of 197,000 customers, though no sensitive personal data was included.
In other news, Trellix faced a source code breach claimed by the RansomHouse group, raising eyebrows in the cybersecurity community. The attackers boasted access to internal systems, but Trellix assures that there's no evidence of exploitation. These breaches highlight the vulnerabilities still present in even established firms.
Zero-Day Alerts & Patches
CISA gave federal agencies just four days to patch a zero-day vulnerability in Ivanti Endpoint Manager Mobile, exploited for remote code execution. This flaw, CVE-2026-6973, underscores the urgency of swift cybersecurity measures.
Additionally, a new Linux zero-day exploit, dubbed 'Dirty Frag', allows attackers to gain root access on major Linux distributions. Researchers warn that this vulnerability could lead to severe system compromises if not addressed immediately.
Supply Chain Attacks & Malware
JDownloader's website was hacked, leading to the distribution of Python RAT malware through compromised installers. This supply chain attack serves as a reminder of the risks associated with software downloads from seemingly legitimate sources.
On the malware front, the 'PCPJack' worm is removing TeamPCP infections while stealing credentials across cloud environments. These evolving threats showcase the need for robust security measures in software development and deployment.
Human Factor in Cybersecurity
A startling report reveals that one in eight UK workers has sold their company passwords, with a shocking number of executives believing it's justifiable. This finding emphasizes that technology alone can't secure systems; human behavior remains a critical vulnerability.
In contrast, Sri Lankan authorities made 37 arrests at a scam center, highlighting the global battle against cybercrime. These two narratives show the spectrum of threats—from insider negligence to organized crime.
Emerging Threats and Trends
Fake repositories on platforms like Hugging Face have been spotted delivering infostealer malware, targeting developers directly. This trend of targeting developers with malicious dependencies is on the rise, and vigilance is key.
In Poland, ICS breaches at water treatment plants point to an alarming shift towards targeting critical infrastructure. As cyberattacks become more sophisticated, the focus on operational technology is increasing, stressing the need for enhanced security protocols.
NVIDIA Confirms Data Breach
NVIDIA's GeForce NOW service faced a data breach affecting Armenian users due to a partner's compromised infrastructure. The company clarified that its own systems remained secure.
Ivanti Patches EPMM Zero-Day Exploited in Targeted Attacks
Ivanti has released critical patches for a zero-day vulnerability exploited in targeted attacks. The flaw allows remote code execution and affects numerous federal agencies.
JDownloader Site Hacked to Distribute Malware
The JDownloader website was compromised, leading to the distribution of malicious installers containing Python RAT malware. This supply chain attack affected many users.
- Fake OpenAI Repository on Hugging Face Distributes MalwareA malicious repository impersonated OpenAI to deliver information-stealing malware, reaching #1 on Hugging Face. — BleepingComputer
- New Linux 'Dirty Frag' Zero-Day Gives Root AccessA new Linux zero-day exploit allows local attackers to gain root privileges across major distributions. — BleepingComputer
- Trellix Source Code Breach Claimed by RansomHouse HackersThe RansomHouse group claims responsibility for a breach at Trellix, leaking parts of its source code repository. — BleepingComputer
- Polish Security Agency Reports ICS BreachesPoland's Internal Security Agency documented multiple breaches targeting industrial control systems in water treatment plants. — SecurityWeek
- AI Firm Braintrust Prompts API Key Rotation After Data BreachBraintrust advised customers to rotate API keys after a breach compromised an AWS account. — SecurityWeek
- Cyberattack Hits Canvas System Used by SchoolsA cyberattack on Canvas affected thousands of schools, disrupting services during finals. — SecurityWeek
- Insider Betting on PolymarketAnalysis reveals troubling trends in insider betting on Polymarket, raising ethical concerns. — Schneier
이번 호가 도움이 되었나요?
클릭 한 번이면 다음 호에 반영됩니다.