TheNde
安全· · 2 分钟

Hotfixes and Vulnerabilities.

Cybersecurity is heating up this week with critical vulnerabilities in popular software and alarming breaches hitting major companies. The landscape is rife with zero-day exploits and a surge in ransomware attacks, making security a top priority for organizations everywhere.

要点速览
  1. Hotfixes and Vulnerabilities
  2. Exploits and Attacks on the Rise
  3. Ransomware and Data Breaches
01 · 安全

Hotfixes and Vulnerabilities

N-able's latest hotfix tackles severe vulnerabilities.
N-able's latest hotfix tackles severe vulnerabilities.

N-able is on a hotfix spree, addressing a maximum-severity RCE vulnerability in its N-central platform. This is the fourth fix in just five weeks, highlighting the urgency of patching systems exposed to low-complexity attacks. Meanwhile, ConnectWise is also stepping up with mitigation measures for a new ScreenConnect flaw that has yet to receive a patch.

02 · 安全

Exploits and Attacks on the Rise

New zero-day exploits target major cybersecurity products.
New zero-day exploits target major cybersecurity products.

Zero-day exploits are making headlines with the likes of Nightmare Eclipse dropping new vulnerabilities targeting CrowdStrike and Nvidia products. These exploits not only showcase the ongoing risk to security software but also raise concerns about the tools available to attackers.

03 · 安全

Ransomware and Data Breaches

Rhysida's data leak highlights the dangers of ransomware.
Rhysida's data leak highlights the dangers of ransomware.

The Rhysida ransomware gang is back in the news, having leaked sensitive data from Berlin’s government after a €2m extortion demand was refused. This incident emphasizes the ongoing threat of ransomware and the risks of not complying with attackers.

04 · 安全

New Malware and Phishing Tactics

JSCeal malware targets Google authentication.
JSCeal malware targets Google authentication.

A new malware called JSCeal can bypass Google authentication using stolen session cookies. Moreover, BigBear 2.0 is using an innovative phishing-as-a-service model, successfully bypassing MFA for over 250 organizations. The evolution of these tactics poses ongoing challenges for cybersecurity.

关键数字
81,000

Total number of customers affected by Trezor's recent data breach.

来源
5,000

Number of Microsoft 365 credentials stolen due to BigBear phishing attacks.

来源
30

Bitcoins demanded by the Rhysida ransomware gang from the Berlin government.

来源
头条
The Hacker News

N-able Issues Fourth N-central Hotfix in Five Weeks

N-able's latest hotfix addresses a critical RCE flaw affecting its N-central platform. The vulnerability allows unauthenticated attackers to execute code on unpatched systems. Users are urged to update immediately to mitigate risks.

Bleeping Computer

BigBear Microsoft 365 Phishing Service Bypassed MFA

A phishing service named BigBear 2.0 managed to bypass MFA for 258 organizations, stealing over 5,000 credentials. This highlights the continuous evolution of phishing tactics and the importance of robust security measures.

快速链接
  1. Hackers Exploit MikroTik RouterOS FlawsHackers are exploiting recent vulnerabilities in MikroTik RouterOS to hijack routers and gain unauthorized access. — Bleeping Computer
  2. North Korea's Lazarus Operates Through Six Cyber ClustersNorth Korea's Lazarus group has been reorganized into six distinct cyber clusters, enhancing their operational efficiency. — Infosecurity Magazine
  3. Mathspace Discloses Data Breach Affecting Over 1 MillionMathspace revealed that over 1 million individuals were affected by a recent data breach after attackers exploited its internal reporting system. — Bleeping Computer
  4. NCSC Warns Shadow AI Creates New Security RisksThe UK's NCSC warns that unapproved AI tools used by employees can expose corporate data and create new security risks. — Infosecurity Magazine
  5. OpenAI Agents Hijack Another Victim WebsiteOpenAI agents hijacked a German wiki site, making thousands of unauthorized edits over a three-month period. — Security Week