News – July 2023


  • Thousands of Fortinet firewalls are unpatched against this serious security bug, so patch now

    July 4, 2023

    Hundreds of thousands of FortiGate firewalls are yet to be patched against a flaw being actively used in the wild, experts have revealed. Cybersecurity researchers from Bishop Fox recently used the Shodan.io search engine for internet-connected devices to look for servers with HTTPS responses that suggested the software was outdated. The results brought back almost 490,000 ...

  • TSMC discloses data breach from LockBit-claimed attack against third party

    July 4, 2023

    Major Taiwanese multinational chip manufacturing firm Taiwan Semiconductor Manufacturing Company has confirmed experiencing a data breach as a result of a cyberattack against Kinmax, which is one of its IT hardware suppliers, before the end of June, reports The Record, a news site by cybersecurity firm Recorded Future. Such a disclosure comes after the LockBit ransomware ...

  • Microsoft Denies Major 30 Million Customer-Breach

    July 4, 2023

    Microsoft has hit back at claims from a shadowy hacktivist outfit that it managed to breach the company and obtain account access for tens of millions of customers. Anonymous Sudan, which has been linked in the past to pro-Kremlin groups like Killnet, posted the details of its alleged raid on Telegram. Read more… Source: Infosecurity Magazine  

  • Chinese threat actors targeting Europe in SmugX campaign

    July 3, 2023

    In the last couple of months, Check Point Research (CPR) has been tracking the activity of a Chinese threat actor targeting Foreign Affairs ministries and embassies in Europe. Combined with other Chinese activity previously reported by Check Point Research, this represents a larger trend within the Chinese ecosystem, pointing to a shift to targeting European entities, ...

  • ‘Pay and benefits compromised’ in Dublin Airport cyber attack

    July 3, 2023

    The pay and benefits details of nearly 2,000 staff members of daa, which operates Dublin Airport, were compromised due to a recent cyber attack on professional service provider Aon, the Sunday Times reported. A spokesperson said that as a result of a recent cyber attack on Aon, a third-party provider, data relating to some employees’ pay ...

  • Turkish intelligence uncovers ‘ghost’ Mossad network

    July 3, 2023

    After monthslong surveillance, Türkiye’s National Intelligence Organization (MIT) has exposed a “ghost” cell of 56 operatives spying on non-Turkish nationals in the country on behalf of the Israeli intelligence agency Mossad. Documents from MIT revealed that the spies were gathering biographical intelligence on foreign nationals through an online routing method, tracking vehicle movements via GPS, hacking ...

  • More sensitive Optus data leaked in major cyberattack on law firm

    July 1, 2023

    Optus has been caught up in another major cyberattack, with sensitive information about a privacy watchdog investigation into the mobile-phone company breached by Russian hackers. The Office of the Australian Information Commissioner is one of dozens of government departments and agencies scrambling to find out how much of their data has been breached in a hack ...

  • Virtual kidnapping: How AI voice cloning tools and Chat GPT are being used to aid cybercrime and extortion scams

    June 28, 2023

    New technologies, such as artificial intelligence (AI) and machine learning (ML), are typically developed to boost productivity, increase efficiency, and make our lives easier. Unfortunately, cybercriminals have also found ways to exploit them for ill gain. Recently, malicious actors have abused AI technology to accurately impersonate real people as part of their attacks and scams. Cases ...

  • Manic Menagerie 2.0: The Evolution of a Highly Motivated Threat Actor

    June 28, 2023

    Unit 42 researchers discovered an active campaign that targeted several web hosting and IT providers in the United States and European Union from late 2020 to late 2022. Unit 42 tracks the activity associated with this campaign as CL-CRI-0021 and believes it stems from the same threat actor responsible for the previous campaign known as ...