Latest Cybersecurity News and Articles

---

Data Breach Hits US Department of Transportation, Aviation Records Compromised

The breach allegedly leaked 5.8 million flight logs from 2015, containing sensitive information. The motive behind the attack is unclear, but it raises concerns about cybersecurity measures in government agencies.

---

Vulnerabilities Found in High-Power Bosch Wrenches Popular With Carmakers

The vulnerabilities in the wrenches could lead to production line stoppages, causing large-scale financial losses, and enable malicious actors to introduce sub-optimal tightening or excessive damage.

---

Kyocera Printers Open to Path Traversal Attacks

Researchers have discovered a path traversal vulnerability in Kyocera's Device Manager, a product used for managing large printer fleets. Exploiting the vulnerability requires the attacker to be logged onto the network.

---

FTC Bans Outlogic (X-Mode) From Selling Sensitive Location Data

The U.S. Federal Trade Commission (FTC) on Tuesday prohibited data broker Outlogic, which was previously known as X-Mode Social, from sharing or selling any sensitive location data with third-parties. The ban is part of a settlement over allegations that the company "sold precise location data that could be used to track people's visits to sensitive locations such as medical and

---

Microsoft's January 2024 Windows Update Patches 48 New Vulnerabilities

Microsoft has addressed a total of 48 security flaws spanning its software as part of its Patch Tuesday updates for January 2024. Of the 48 bugs, two are rated Critical and 46 are rated Important in severity. There is no evidence that any of the issues are publicly known or under active attack at the time of release, making it the second consecutive Patch Tuesday with no zero-days. The

---

CISA Flags 6 Vulnerabilities - Apple, Apache, Adobe , D-Link, Joomla Under Attack

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added six security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. This includes CVE-2023-27524 (CVSS score: 8.9), a high-severity vulnerability impacting the Apache Superset open-source data visualization software that could enable remote code execution.

---

Turkish Hackers Exploiting Poorly Secured MS SQL Servers Across the Globe

The RE#TURGENCE campaign, linked to actors of Turkish origin, utilizes brute-force attacks, shell commands, and post-exploitation tools to gain access and carry out malicious activities.

---

Alert: Water Curupira Hackers Actively Distributing PikaBot Loader Malware

A threat actor called Water Curupira has been observed actively distributing the PikaBot loader malware as part of spam campaigns in 2023. “PikaBot’s operators ran phishing campaigns, targeting victims via its two components — a loader and a core module — which enabled unauthorized remote access and allowed the execution of arbitrary commands through an established connection with

---

New Decryptor for Babuk Tortilla Ransomware Variant Released

Cisco Talos, in collaboration with Dutch Police and Avast, recovered a decryptor for the Babuk Tortilla ransomware variant, allowing users to quickly recover their encrypted files.

---

US DHS Solicits Synthetic Data Expertise for AI Training

The U.S. federal government is seeking synthetic data generators to train machine learning models and test systems in instances where real-world data is unavailable or poses privacy and security risks.

---

Nigerian Gets Ten Years for Laundering Scam Funds

Olugbenga Lawal, 33, of Indianapolis, Indiana, was convicted in August last year of conspiring to commit money laundering, after three co-conspirators had already pleaded guilty to the same crime.

---

High-Severity Vulnerabilities Patched in QNAP QTS, Video Station, QuMagie, Netatalk Products

While there is no evidence that the flaws have been exploited in the wild, it's recommended that users take steps to update their installations to the latest version to mitigate potential risks.

---

Online Services Down for German Craft Associations Following ‘Security Incident’

The cyberattack has forced the affected Chambers to disconnect from the network and take their systems offline, causing disruption to vocational training and other online services.

---

62% of IT and security teams are remediating exposures

According to a recent report, 87% of organizations indicate plans to enhance vulnerability and exposure remediation efforts within the next year.

---

Saudi Ministry of Industry and Mineral Resources Exposed Sensitive Data for 15 Months

The Saudi Ministry of Industry and Mineral Resources (MIM) had a sensitive environment file exposed for 15 months, potentially allowing attackers to gain unauthorized access and launch ransomware attacks.

---

New York Clinic Must Pay $450K Fine, Spend $1.2M on Security

The Refuah Health Center in New York has been fined up to $450,000 and required to invest over $1 million in improving its data security following a ransomware attack in 2021.

---

Turkish Hackers Exploiting Poorly Secured MS SQL Servers Across the Globe

Poorly secured Microsoft SQL (MS SQL) servers are being targeted in the U.S., European Union, and Latin American (LATAM) regions as part of an ongoing financially motivated campaign to gain initial access. “The analyzed threat campaign appears to end in one of two ways, either the selling of ‘access’ to the compromised host, or the ultimate delivery of ransomware payloads,” Securonix researchers

---

Update: Apache OFBiz Zero-Day Sees Thousands of Daily Exploit Attempts

The authentication bypass flaw in OFBiz allows attackers to remotely execute arbitrary code and access sensitive information. Upgrading to OFBiz version 18.12.11 is crucial to patch both this zero-day vulnerability and another equally serious hole.

---

Rhysida Ransomware Gang Takes Credit for Christmas Attack on Global Lutheran Organization

The attack was carried out by the Rhysida ransomware gang, who also claimed responsibility for attacking the Lutheran World Federation, a member of the WCC. The WCC's systems went down on December 26, 2023.

---

Update: LockBit Claims November Attack on New Jersey Hospital That Disrupted Patient Care

The attack caused network outages and disrupted patient care, resulting in canceled appointments and rescheduled surgeries. The LockBit ransomware gang has now threatened to leak 7TB of stolen data from the hospital.