Cybersecurity Digest for 17 July 2024:

AT&T Pays Hackers – Was it Worth it?

An Update on RiteAid’s Data Breach

SEXi Ransomware group rebrands…. Meet APT INC!

mSpy Breach

SYS01 Stealer Malware: Malvertising across Social Media

15 Million Trello Email Addresses Leaked

Google’s 23 Billion  to acquire Wiz

Octo Tempest, AKA Scattered Spider adds new ransomware payloads

CISA adds one new vulnerability to its Known Exploited Catalog

Articles Referenced in the Show in the order they appear:

CheckPoint Research Bugsleep Backdoor:

New BugSleep Backdoor Deployed in Recent MuddyWater Campaigns - Check Point Research

AT&T Paid Threat Actor:

AT&T Paid a Hacker $370,000 to Delete Stolen Phone Records | WIRED

RiteAid Update:

SEXi ransomware rebrands to APT INC, continues VMware ESXi attacks (bleepingcomputer.com)

Mspy data breach exposes millions of customers' information (candid.technology)

Malvertising in Facebook, LinkedIn, and YoutTube:

Malvertising_Research.pdf (trustwave.com)

Trello Leak:

Email addresses of 15 million Trello users leaked on hacking forum (bleepingcomputer.com)

Wiz Acquisition:

Exclusive | Google Near $23 Billion Deal for Cybersecurity Startup Wiz - WSJ

CISA KEV Addition:

Today’s Episode Topics for 15 July 2024

• AT&T Data Leaks

Articles Referenced in the Show in the order they appear:

AT&T 8-K Filing

Exim Vulnerability:

Censys Exim MTA Vulnerability

Apple Warns of Spyware:

Apple warns iPhone users in 98 countries of spyware attacks | TechCrunch

NSO – Darknet Diaries

Netgear Vulnerability:

Netgear Security Advisory

Sysdig Report on CRYSTALRAY:

CRYSTALRAY: Inside the Operations of a Rising Threat Actor Exploiting OSS Tools | Sysdig

RiteAid Data Breach:

Rite Aid confirms data breach after June ransomware attack (bleepingcomputer.com)

Disney Internal Slack possibly leaked:

Vx-underground's Post

Cloudfare Applicattion Security Report 2024:

Application Security report: 2024 update (cloudflare.com)

If you like our show, please share it with others who you think would enjoy it. Also feel free to check out www.thecybersecuritydigest.com to find all of the locations you can listen to us. Please leave us a rating if you have found this show helpful, as it helps us out tremendously. 

This week we talk about 

• Microsoft patches 140+ vulnerabilities including 2 zero days, in Patch Tuesday;

Articles Mentioned In Order they appear in the Show: 

Windows MSHTML zero-day used in malware attacks for over a year (bleepingcomputer.com)

Resurrecting Internet Explorer: Threat Actors Using Zero-day Tricks in Internet Shortcut File to Lure Victims (CVE-2024-38112) - Check Point Research

Whispers of Atlantida: Safeguarding Your Digital Treasure | Rapid7 Blog

Adobe Product Security Incident Response Team (PSIRT)

Hackers leak 39,000 print-at-home Ticketmaster tickets for 154 events (bleepingcomputer.com)

Advance Auto Parts data breach impacts 2.3 million people (bleepingcomputer.com)

$3,094 Bounty Awarded and 150,000 WordPress Sites Protected Against Arbitrary File Upload Vulnerability Patched in Modern Events Calendar WordPress Plugin (wordfence.com)

VU#456537 - RADIUS protocol susceptible to forgery attacks. (cert.org)

BLAST RADIUS

Notable CISA KEV Additions:

NVD - CVE-2024-23692 (nist.gov)

With the cyber threat landscape ever evolving it can be challenging to stay up to date on the latest cybersecurity developments.