Daily Cybersecurity Update, September 25, 2023

infosecbulletin Monday , September 25 2023 Daily Security Update

The rising number of attacks targeting cryptocurrency businesses underscores the urgent requirement for enhanced security measures. Once, Mixin suffered a devastating loss of assets amounting to $200 million when it fell victim to a cyberattack targeting its cloud service provider.

National Student Clearinghouse recently experienced a troubling data breach that has affected numerous schools throughout the United States. Recently, the government of Bermuda fell victim to a cyberattack, which has been traced back to Russian threat actors.

Here’s everything you need to know:

Mixin, a cryptocurrency business based in Hong Kong, recently fell victim to a massive $200 million asset theft. This significant loss occurred when malicious threat actors targeted their cloud service provider, causing the temporary suspension of deposit and withdrawal services.
A new TA866 campaign has been unveiled by researchers. This campaign strategically utilizes a fresh strain of Python malware in order to specifically target users who speak the Tatar language. This malware possesses the ability to capture screenshots and then effortlessly transmit them to a remote server through FTP.
ESET has recently detected a novel backdoor malware, known as Deadglyph, that has been deployed in a sophisticated cyberespionage campaign against a government agency located in the Middle East. The malware has been linked to a UAE state-sponsored group named Stealth Falcon.
A new attack campaign has been uncovered by Securonix Threat Research, targeting Ukraine’s military. This sophisticated operation, carried out by the notorious threat group UAC-0154, involves the use of malware-laced lure files disguised as UAV service manuals.
Palo Alto Network’s Unit 42 published a new report on the Gelsemium APT group. They revealed that this group conducted a cyberespionage campaign against a Southeast Asian government. The campaign lasted for a impressive six-month period from 2022 to 2023.

InfoSecBulletin Cybersecurity for mankind

Daily Cybersecurity Update, September 25, 2023

B1ack’s Stash Releases 1 Million Credit Cards on a Deep Web Forum

Cisco Confirms
Salt Typhoon Exploited CVE-2018-0171 to Target U.S. Telecom Networks

AWS Key Hunter
Test this free automated tool to hunt for exposed AWS secrets

Check Point Flaw Used to Deploy ShadowPad and Ransomware

CVE-2024-12284
Citrix Issues Security Update for NetScaler Console

CISA and FBI ALERT
Ghost ransomware to breach organizations in 70 countries

Hacker chains multiple vulns to attack Palo Alto Firewall

150 Gov.t Portal affected
Black-Hat SEO Poisoning Indian “.gov.in, .ac.in” domain

CVE-2018-19410 Exposes 600 PRTG Instances in Bangladesh

Builder claims Rs 150 cr for data loss; AWS faces FIR In Bengaluru

Related Articles

Check Also

Daily Security Update Dated: 18.12.2024

Leave a Reply Cancel reply