보안· · 2분Data Breaches Dominate the Headlines.
Today’s cybersecurity news is all about data breaches and evolving threats. Major companies like RingCentral and Trezor are grappling with significant data leaks, while new malware and botnets are emerging. The stakes are high as organizations scramble to bolster their defenses against increasingly sophisticated attacks.
Data Breaches Dominate the Headlines
RingCentral's recent data breach has exposed the info of 1.6 million accounts, attributed to the ShinyHunters extortion group. The incident serves as a reminder of how vulnerable even established platforms can be to social engineering attacks.
Similarly, Trezor reported a data breach affecting nearly 14,000 customers, stemming from a third-party shipping provider. These incidents highlight the importance of securing all points in the supply chain, not just core systems.
Emerging Threats: Malware and Botnets
The newly identified AmnesiaStealer malware is making waves, targeting macOS users through deceptive download pages. This Rust-based info stealer not only harvests sensitive data but also allows attackers to control browser sessions remotely.
Additionally, a new Mirai-based botnet called Evooo1Bot is exploiting vulnerabilities in edge devices, showcasing the ongoing shift in focus towards IoT and network device security. As these threats evolve, so must our defenses.
Innovations in Cybersecurity Alerts
Apple is stepping up its game against mercenary spyware by introducing on-device alerts for targeted users. This new feature aims to ensure that high-risk individuals are promptly informed about potential threats, enhancing personal security.
Meanwhile, WhatsApp is testing a Scam Alert feature that uses machine learning to identify and warn users about potential scam messages. This proactive approach could significantly reduce the risk of falling victim to fraud.
Vulnerabilities Under Attack
A critical SAP Commerce Cloud flaw is already being targeted in the wild, just days after it was patched. This highlights the urgent need for organizations to quickly apply updates and not let their guard down following a patch.
Additionally, hackers are exploiting a SharePoint authentication bypass vulnerability, showing that old vulnerabilities can resurface and be weaponized by attackers. Vigilance is key in the ever-evolving threat landscape.
RingCentral Data Breach Affects 1.6 Million Accounts
RingCentral confirmed a data breach that exposed personal information of 1.6 million accounts after a social engineering attack. The ShinyHunters group claimed responsibility, highlighting the growing threat of extortion gangs.
AmnesiaStealer: New macOS Malware Threat
The AmnesiaStealer malware targets macOS users through social engineering tactics, allowing attackers to steal data and control browser sessions. Its sophisticated design poses a new threat to Apple users.
New Mirai-Based Linux Botnet Emerges
Evooo1Bot, a new modular Linux botnet derived from Mirai, is targeting vulnerable edge devices. Security researchers warn that this botnet could lead to significant exploitation across various vulnerabilities.
- Data Analyst Sentenced for ExtortionA data analyst was sentenced to two years in prison for extorting his employer after stealing sensitive data. — BleepingComputer
- Hackers Exploit Unpatched GeoServer Zero-DayExploitation attempts for a newly disclosed GeoServer zero-day vulnerability have already begun. — SecurityWeek
- SAP Commerce Cloud Flaw Now TargetedA critical vulnerability in SAP Commerce Cloud is being exploited just days after being patched. — BleepingComputer
- Shell Investigates Potential Incident After Clop ClaimsShell is investigating after the Clop ransomware gang claimed to have stolen 89GB of data. — BleepingComputer
- WhatsApp Tests Scam Alert FeatureWhatsApp is rolling out a new Scam Alert feature to flag potential scam messages. — Malwarebytes
이번 호가 도움이 되었나요?
클릭 한 번이면 다음 호에 반영됩니다.