• Phishing Remains Top Cyberattack in the UK:
    • Phishing was identified as the most common and disruptive cyberattack faced by UK organizations in the past year.
  • North Korea Expands Fraudulent IT Worker Operations:
    • North Korea has expanded its fraudulent IT worker operations, posing a new threat.
  • MITRE’s CVE Funding Expires:
    • The U.S. government’s funding for MITRE to operate and maintain the CVE program ends, raising concerns in the cybersecurity community.
  • Chinese Hackers Target Linux Systems:
    • A China-linked threat actor known as UNC5174 is using SNOWLIGHT malware and the VShell tool to target Linux systems.
  • Critical Apache Roller Vulnerability Discovered:
    • A critical vulnerability in Apache Roller blogging server software allows unauthorized session persistence.
  • Browser Extensions Pose Security Risks:
    • Majority of browser extensions can access sensitive enterprise data, posing a risk to organizations.
  • Malicious PyPI Package Targets MEXC Trading API:
    • A malicious package on PyPI targets MEXC trading API to steal credentials and redirect orders.
  • Python Malware Targets Crypto Developers:
    • Python malware disguised as coding challenges targets crypto developers to deliver new stealer malware.
  • Midnight Blizzard Targets Diplomatic Entities:
    • Russian state-sponsored group Midnight Blizzard deploys new GrapeLoader malware in embassy phishing attacks.
  • Landmark Admin Data Breach Impact Grows:
    • Landmark Admin data breach now affects 1.6 million individuals.
  • Infamous 4chan Forum Taken Down in Hack:
    • 4chan was taken offline following a major hack affecting the notorious online forum.
  • Microsoft Disabling ActiveX Controls:
    • Microsoft will disable ActiveX controls in Microsoft 365 and Office 2024 applications.
  • Google Implements Auto-Reboot for Android Security:
    • Google introduces auto-reboot feature on Android to enhance security.
  • Max Severity Bug in Apache Roller Allows Persistent Access:
    • Adversaries could retain access to Apache Roller due to a remediated flaw.
  • Bad Bots Increasingly Difficult to Detect:
    • Bad bots are evolving to mimic human behaviors, making them harder to detect.
  • AI-Powered Tool Used in Phishing Attacks:
    • Threat actors leverage the legitimate presentation tool named “Gamma” in phishing attacks.
  • Hertz Falls Victim to Cleo Zero-Day Attacks:
    • Cleo zero-day attacks lead to the theft of customer data from Hertz.
  • Wave of Wine-Inspired Phishing Attacks Target EU Diplomats:
    • A phishing campaign targeting EU diplomats uses wine-tasting events as a lure.
  • Funding Expires for Key Cyber Vulnerability Database:
    • A critical cybersecurity resource’s funding is at risk of expiring, impacting vulnerability identification and mitigation efforts.