https://blog.dansec.red/vendors/wk-kellogg/Recent content in WK Kellogg on DanSec DailyHugoen-gbTue, 08 Apr 2025 00:00:00 +0000https://blog.dansec.red/posts/2025-04-08-cybersecurity-news/Tue, 08 Apr 2025 00:00:00 +0000https://blog.dansec.red/posts/2025-04-08-cybersecurity-news/<h2 id="major-incidents-and-attacks">Major Incidents and Attacks</h2> <ul> <li>Attackers are distributing a miner and the ClipBanker Trojan via SourceForge, using unconventional persistence techniques.</li> <li>Researchers discovered a surge in SMS phishing (smishing) attacks driven by a phishing-as-a-service (PhaaS) platform named ‘Lucid.’</li> </ul> <h2 id="newly-discovered-vulnerabilities">Newly Discovered Vulnerabilities</h2> <ul> <li>The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a critical security flaw impacting CrushFTP to its Known Exploited Vulnerabilities (KEV) catalog.</li> <li>Google released patches for 62 vulnerabilities, including two actively exploited zero-days in Android devices.</li> </ul> <h2 id="impacts-on-the-cybersecurity-industry">Impacts on the Cybersecurity Industry</h2> <ul> <li>The dark web leak site of the Everest ransomware gang was hacked and is now offline, affecting the ransomware group&rsquo;s operations.</li> <li>Nine malicious VSCode extensions on Microsoft&rsquo;s Visual Studio Code Marketplace were found infecting users with cryptominers.</li> <li>WK Kellogg Co disclosed a data breach linked to Clop ransomware attacks, warning employees and vendors about stolen company data.</li> </ul> <h2 id="regulatory-and-policy-developments">Regulatory and Policy Developments</h2> <ul> <li>NIST is implementing a &lsquo;Deferred&rsquo; status for dated vulnerabilities to prioritize CVEs in the National Vulnerability Database (NVD).</li> <li>EU officials are preparing to &rsquo;ease the burden&rsquo; of the GDPR data privacy law for small and medium businesses while ensuring data privacy rules still function effectively.</li> </ul> <h2 id="notable-incidents-in-aviation-sector">Notable Incidents in Aviation Sector</h2> <ul> <li>The Computer Emergency Response Team of Ukraine (CERT-UA) revealed cyber attacks targeting Ukrainian institutions with information-stealing malware, impacting military entities.</li> </ul> <p>Overall, the cybersecurity landscape is witnessing a rise in sophisticated attacks, exploitation of vulnerabilities, and regulatory efforts to enhance security standards, with specific incidents targeting various sectors like gaming, ransomware, and phishing-as-a-service platforms.</p>