Latest Cybersecurity News and Articles

---

Massive Ransomware Attack Hinders Services in 70 German Municipalities

Multiple cities and districts in western Germany have been paralyzed by a ransomware attack. The attack encrypted the servers of the local municipal service provider Südwestfalen IT, affecting over 70 municipalities.

---

European Privacy Officials Widen Ban on Meta’s Behavioral Advertising to Most of Europe

European privacy officials have widened a ban on Meta’s “behavioral advertising” practices to most of Europe. The post European Privacy Officials Widen Ban on Meta’s Behavioral Advertising to Most of Europe appeared first on SecurityWeek.

---

Over 630,000 US Defense Officials’ Emails Breached in Attack on Westat

The attack targeted a data firm called Westat, used by the Office of Personnel Management (OPM) for surveys. The hackers exploited a vulnerability in the MOVEit Transfer software developed by Ipswitch INC.

---

Boeing Confirms Distribution Business Hit by Cyberattack

Boeing has confirmed that parts of its distribution business were hit by a cyberattack after a ransomware group claimed to have breached the company’s systems. The post Boeing Confirms Distribution Business Hit by Cyberattack appeared first on SecurityWeek.

---

AP News Site Hit by Apparent Denial-of-Service Attack

The Associated Press news website experienced an outage that appeared to be consistent with a denial-of-service attack. The post AP News Site Hit by Apparent Denial-of-Service Attack appeared first on SecurityWeek.

---

RansomedVC Gang Up for Sale as Cyber Cops Make Owner Sweat

The RansomedVC group, which recently claimed responsibility for several high-profile attacks, is now up for sale. The owner, citing personal reasons and a desire to avoid monitoring by federal agencies, is offering a 20% discount to a trusted buyer.

---

3,000 Apache ActiveMQ Servers Vulnerable to RCE Attacks Exposed Online

The flaw, known as CVE-2023-46604, allows attackers to execute arbitrary shell commands by exploiting the serialized class types in the OpenWire protocol. The issue affects several versions of Apache ActiveMQ, but patches have been released.

---

Cisco Patches 27 Vulnerabilities in Network Security Products

Cisco has released software updates to address 27 vulnerabilities in Cisco ASA, FMC, and FTD software. The post Cisco Patches 27 Vulnerabilities in Network Security Products appeared first on SecurityWeek.

---

Healthcare's Ransomware Attackers are Addicted to Encryption

According to a report by security firm Sophos, 75% of ransomware attacks on healthcare organizations involve the malicious encryption of data. This reflects the increasing skill level of hackers in the healthcare sector.

---

Update: Boeing Admits Cyberattack on Parts and Distribution Business

“We are aware of a cyber incident impacting elements of our parts and distribution business,” Boeing told The Register. At the time of writing, the company’s parts and distribution website was “down due to technical issues.”

---

SaaS Security is Now Accessible and Affordable to All

This new product offers SaaS discovery and risk assessment coupled with a free user access review in a unique “freemium” model Securing employees' SaaS usage is becoming increasingly crucial for most cloud-based organizations. While numerous tools are available to address this need, they often employ different approaches and technologies, leading to unnecessary confusion and complexity. Enter

---

Iran's MuddyWater Targets Israel in New Spear-Phishing Cyber Campaign

The Iranian nation-state actor known as MuddyWater has been linked to a new spear-phishing campaign targeting two Israeli entities to ultimately deploy a legitimate remote administration tool from N-able called Advanced Monitoring Agent. Cybersecurity firm Deep Instinct, which disclosed details of the attacks, said the campaign "exhibits updated TTPs to previously reported MuddyWater activity,"

---

Probe of School Surveillance Software Finds Privacy Abuses, Inaccurate Results

The investigation by the Electronic Frontier Foundation (EFF) found that innocent content related to education, therapy, and LGBTQ+ issues was consistently flagged as potentially harmful, leading to a "stunning invasion of privacy."

---

Mozi Botnet Put in its Grave Using Kill Switch

The activation of the kill switch disabled various system services, replaced the original malware, and maintained persistence, suggesting a deliberate dismantling of the botnet.

---

Researchers Find 34 Windows Drivers Vulnerable to Full Device Takeover

As many as 34 unique vulnerable Windows Driver Model (WDM) and Windows Driver Frameworks (WDF) drivers could be exploited by non-privileged threat actors to gain full control of the devices and execute arbitrary code on the underlying systems. "By exploiting the drivers, an attacker without privilege may erase/alter firmware, and/or elevate [operating system] privileges," Takahiro Haruyama, a

---

Update: Toronto Public Library Outages Caused by Black Basta Ransomware Attack

The library has stated that there is no evidence of compromised personal information, and they are actively working with cybersecurity experts and law enforcement to investigate the incident.

---

Update: Dallas County ‘Interrupted’ Data Exfiltration, Prevented Encryption After Attack

Dallas County in Texas has provided an update on a ransomware attack that was reported earlier this week. The county was able to stop the hackers before they could encrypt files or systems.

---

FIRST Announces CVSS 4.0 - New Vulnerability Scoring System

The Forum of Incident Response and Security Teams (FIRST) has officially announced CVSS v4.0, the next generation of the Common Vulnerability Scoring System standard, more than eight years after the release of CVSS v3.0 in June 2015. "This latest version of CVSS 4.0 seeks to provide the highest fidelity of vulnerability assessment for both industry and the public," FIRST said in a statement.

---

HelloKitty Ransomware Group Exploiting Apache ActiveMQ Vulnerability

Cybersecurity researchers are warning of suspected exploitation of a recently disclosed critical security flaw in the Apache ActiveMQ open-source message broker service that could result in remote code execution. "In both instances, the adversary attempted to deploy ransomware binaries on target systems in an effort to ransom the victim organizations," cybersecurity firm Rapid7 disclosed in a

---

FIRST Releases CVSS 4.0 Vuln Scoring Standard

The CVSS vulnerability scoring standard is refreshed to provide more data and remove ambiguities in rating the severity of downstream issues. The post FIRST Releases CVSS 4.0 Vuln Scoring Standard appeared first on SecurityWeek.