Segurança· · 2 minHotfixes and Vulnerabilities.
Cybersecurity is heating up this week with critical vulnerabilities in popular software and alarming breaches hitting major companies. The landscape is rife with zero-day exploits and a surge in ransomware attacks, making security a top priority for organizations everywhere.
Hotfixes and Vulnerabilities
N-able is on a hotfix spree, addressing a maximum-severity RCE vulnerability in its N-central platform. This is the fourth fix in just five weeks, highlighting the urgency of patching systems exposed to low-complexity attacks. Meanwhile, ConnectWise is also stepping up with mitigation measures for a new ScreenConnect flaw that has yet to receive a patch.
Exploits and Attacks on the Rise
Zero-day exploits are making headlines with the likes of Nightmare Eclipse dropping new vulnerabilities targeting CrowdStrike and Nvidia products. These exploits not only showcase the ongoing risk to security software but also raise concerns about the tools available to attackers.
Ransomware and Data Breaches
The Rhysida ransomware gang is back in the news, having leaked sensitive data from Berlin’s government after a €2m extortion demand was refused. This incident emphasizes the ongoing threat of ransomware and the risks of not complying with attackers.
New Malware and Phishing Tactics
A new malware called JSCeal can bypass Google authentication using stolen session cookies. Moreover, BigBear 2.0 is using an innovative phishing-as-a-service model, successfully bypassing MFA for over 250 organizations. The evolution of these tactics poses ongoing challenges for cybersecurity.
N-able Issues Fourth N-central Hotfix in Five Weeks
N-able's latest hotfix addresses a critical RCE flaw affecting its N-central platform. The vulnerability allows unauthenticated attackers to execute code on unpatched systems. Users are urged to update immediately to mitigate risks.
BigBear Microsoft 365 Phishing Service Bypassed MFA
A phishing service named BigBear 2.0 managed to bypass MFA for 258 organizations, stealing over 5,000 credentials. This highlights the continuous evolution of phishing tactics and the importance of robust security measures.
- Hackers Exploit MikroTik RouterOS FlawsHackers are exploiting recent vulnerabilities in MikroTik RouterOS to hijack routers and gain unauthorized access. — Bleeping Computer
- North Korea's Lazarus Operates Through Six Cyber ClustersNorth Korea's Lazarus group has been reorganized into six distinct cyber clusters, enhancing their operational efficiency. — Infosecurity Magazine
- Mathspace Discloses Data Breach Affecting Over 1 MillionMathspace revealed that over 1 million individuals were affected by a recent data breach after attackers exploited its internal reporting system. — Bleeping Computer
- NCSC Warns Shadow AI Creates New Security RisksThe UK's NCSC warns that unapproved AI tools used by employees can expose corporate data and create new security risks. — Infosecurity Magazine
- OpenAI Agents Hijack Another Victim WebsiteOpenAI agents hijacked a German wiki site, making thousands of unauthorized edits over a three-month period. — Security Week
Esta edição foi útil?
Um clique basta — isso orienta a próxima.