Latest Cybersecurity News and Articles

---

Check Point Buys Startup Atmosec to Secure SaaS Applications

Check Point Software plans to purchase Atmosec, an early-stage SaaS security startup founded by former Armis leaders to anticipate and block threats from malicious applications.

---

Hackers Claim to Publish Prominent Israeli Hospital’s Patient Data

The ransomware attack on Mayanei Hayeshua Medical Center resulted in the shutdown of its administrative computer systems, leading the hospital to redirect new patients and those requiring emergency care to other medical centers.

---

Hackers Exploit Multiple Bugs in Hotel Booking Platform

Financially motivated hackers developed custom malware to exploit a likely zero-day flaw in popular property management software used by resorts and hotels, said security researchers.

---

CISA announces secure by design pledge with K-12 education tech providers

CISA announces a voluntary pledge for K-12 Education Technology software manufacturers to commit to designing products with greater security built in.

---

IBM Reports Patient Data Breach at Johnson & Johnson Subsidiary

IBM has worked with the database provider to address the technical issue, but warned Janssen customers about the potential for their personal information to be misused by malicious actors.

---

Alleged LockBit Ransomware Attack Shuts Down City Networks in Seville

The council said it will not pay a ransom of $1.5 million demanded by the hackers, according to local media reports. The incident has affected a broad range of city services, including police, firefighters, and tax collection.

---

See Tickets Alerts 300,000 Customers After Another Web Skimmer Attack

In a data breach notification letter sent to the affected individuals, a copy of which was submitted to the Maine Attorney General’s Office, See Tickets says the new attack was identified in May 2023 and completely shut down in July.

---

Mirai Botnet Variant 'Pandora' Hijacks Android TVs for Cyberattacks

A Mirai botnet variant called Pandora has been observed infiltrating inexpensive Android-based TV sets and TV boxes and using them as part of a botnet to perform distributed denial-of-service (DDoS) attacks.

---

Protecting Your Microsoft IIS Servers Against Malware Attacks

Microsoft Internet Information Services (IIS) is a web server software package designed for Windows Server. Organizations commonly use Microsoft IIS servers to host websites, files, and other content on the web. Threat actors increasingly target these Internet-facing resources as low-hanging fruit for finding and exploiting vulnerabilities that facilitate access to IT environments.  Recently, a

---

Cisco Issues Urgent Fix for Authentication Bypass Bug Affecting BroadWorks Platform

Cisco has released security fixes to address multiple security flaws, including a critical bug, that could be exploited by a threat actor to take control of an affected system or cause a denial-of service (DoS) condition. The most severe of the issues is CVE-2023-20238, which has the maximum CVSS severity rating of 10.0. It’s described as an authentication bypass flaw in the Cisco BroadWorks

---

Cisco Patches Critical Vulnerability in BroadWorks Platform

Tracked as CVE-2023-20238, the vulnerability affecting the BroadWorks platform was identified in the SSO implementation and could be exploited by remote, unauthenticated attackers to forge credentials and access affected systems.

---

Cisco Finds Eight Vulnerabilities in OAS Industrial IoT Data Platform

Multiple vulnerabilities in the Open Automation Software (OAS) Platform can be exploited to bypass authentication, leak sensitive information, and overwrite files, Cisco warns.

---

CISA Releases Guidance on Adopting DDoS Mitigations

According to CISA, before deciding which type of DDoS mitigation to adopt, federal agencies should make an inventory of agency-owned or -operated web services, and then analyze the impact a DDoS attack would have against those services.

---

Two Flaws in Apache SuperSet Allow to Remotely Hack Servers

By tricking Superset into connecting to its own metadata database, an attacker can directly read or write application configuration through the interface potentially leading to credential harvesting and remote code execution.

---

North Korean Hackers Exploit Zero-Day Bug to Target Cybersecurity Researchers

Threat actors associated with North Korea are continuing to target the cybersecurity community using a zero-day bug in unspecified software over the past several weeks to infiltrate their machines. The findings come from Google’s Threat Analysis Group (TAG), which found the adversary setting up fake accounts on social media platforms like X (formerly Twitter) and Mastodon to forge relationships

---

Alert: Phishing Campaigns Deliver New SideTwist Backdoor and Agent Tesla Variant

"APT34 has a high level of attack technology, can design different intrusion methods for different types of targets, and has supply chain attack capability," NSFOCUS Security Labs said in a report published last week.

---

Google Addressed an Actively Exploited Zero-Day in Android

In total, Google has fixed 6 flaws in the Framework module, 14 in the Kernel componet, 3 issues in the Qualcomm components, and 9 issues in the Qualcomm closed-source components.

---

Hundreds of Scam Pages Uncovered in Major Investment Fraud Campaign

Group-IB said it uncovered nearly 900 scam pages associated with the campaign, 60% of which targeted users from the Middle East and Africa (MEA) region. It estimated losses between March and June 2023 alone to be $280,000.

---

Dozens of Unpatched Flaws Expose Security Cameras Made by Defunct Company Zavio

Zavio is a defunct Chinese company, but its security cameras are reportedly still deployed in the United States and Europe, which is why it’s important to raise awareness about the vulnerabilities.

---

New BlueShell Malware Attacks Windows, Linux, and Mac

The BlueShell malware was found being used by various threat actors to target systems running Windows, Linux, and other operating systems in Korea and Thailand. The Dalbit Group, a China-based threat group, has been identified as using a customized version of BlueShell. To mitigate such threats, organizations should prioritize regular system patching, implement robust intrusion detection systems, and enhance server security measures.