WatchDogCyberDefense – Page 7 – Managed SOC as a Service with ProActive Attack Reduction

IBM’s MOVEit systems breached

by adminCyberSec News 2023-08-14No Comments

Source: https://techcrunch.com/2023/08/14/millions-americans-health-data-moveit-hackers-clop-ibm/ Millions of Americans had their sensitive medical and health information stolen after hackers exploited a zero-day vulnerability in the widely used MOVEit file transfer software raided systems operated by tech giant IBM. The Colorado Department of Health Care Policy and Financing (HCPF), which is responsible for administering Colorado’s Medicaid program, confirmed on Friday that it …

“Downfall” attacks on Intel CPUs steal encryption keys, data

by adminSoftware Vulnerabilities and Updates 2023-08-092023-08-09No Comments

A senior research scientist at Google has devised new CPU attacks to exploit a vulnerability dubbed Downfall that affects multiple Intel microprocessor families and allows stealing passwords, encryption keys, and private data like emails, messages, or banking info from users that share the same computer. Source: https://www.bleepingcomputer.com/news/security/new-downfall-attacks-on-intel-cpus-steal-encryption-keys-data/ Reference: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00828.html

QakBot Malware Operators Expand C2 Network with 15 New Servers

by adminMalicious Software 2023-08-092023-08-09No Comments

The operators associated with the QakBot (aka QBot) malware have set up 15 new command-and-control (C2) servers as of late June 2023. Source: QakBot Malware Operators Expand C2 Network with 15 New Servers (thehackernews.com)

Custom Yashma Ransomware Crashes Into the Scene

by adminMalicious Software 2023-08-092023-08-09No Comments

The threat actor is targeting organizations in Bulgaria, China, Vietnam, and various English-speaking nations. Source: https://www.darkreading.com/threat-intelligence/custom-yashma-ransomware-crashes-into-the-scene

Adobe Releases Security Updates for Multiple Products

by adminSoftware Vulnerabilities and Updates 2023-08-092023-08-09No Comments

Adobe has released security updates to address multiple vulnerabilities in Adobe software. An attacker can exploit some of these vulnerabilities to take control of an affected system. Source: https://www.cisa.gov/news-events/alerts/2023/08/08/adobe-releases-security-updates-multiple-products