News – November 2023

  • GoTitan Botnet – Ongoing Exploitation on Apache ActiveMQ

    November 28, 2023

    This past October, Apache issued a critical advisory addressing CVE-2023-46604, a vulnerability involving the deserialization of untrusted data in Apache. On November 2, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2023-46604 to its known exploited list, KEV Catalog, indicating this vulnerability’s high risk and impact. Fortiguard Labs also released an outbreak alert and a threat ...

  • Guidelines for secure AI system development

    November 28, 2023

    AI systems have the potential to bring many benefits to society. However, for the opportunities of AI to be fully realised, it must be developed, deployed and operated in a secure and responsible way. AI systems are subject to novel security vulnerabilities that need to be considered alongside standard cyber security threats. When the pace of ...

  • Hacker claims to have hit General Electric and stolen company data

    November 27, 2023

    A hacker with the alias IntelBroker claims to have breached General Electric and stolen plenty of sensitive data from the company’s systems. The company operates in different fields, including aerospace, renewable energy, power, venture capital, and more. The hacker posted a new thread on an underground forum, selling access to the company’s “development and software pipelines” ...

  • The Unseen Layers: Exploring The Tactics Of Multistage .NET Malware Packers

    November 27, 2023

    Recently, the SonicWall Capture Labs Threat Research team has identified a new .NET Packer that is currently being widely used by the various stealers such as Lokibot, AgentTesla etc. In the ever-evolving landscape of cybersecurity threats, malicious actors continue to develop sophisticated techniques to compromise systems and exploit vulnerabilities. One such method gaining prominence is the ...

  • Ransomware ‘catastrophe’ at Fidelity National Financial causes panic with homeowners and buyers

    November 27, 2023

    Last Tuesday, Fidelity National Financial, or FNF, a real estate services company that bills itself as the “leading provider of title insurance and escrow services, and North America’s largest title insurance company,” announced that it had experienced a cyberattack. Since then, homeowners who have mortgages and prospective buyers who are purchasing properties with FNF or one ...

  • Gulf Air hit with data breach, customer data possibly affected

    November 27, 2023

    Gulf Air, the national air carrier for the Kingdom of Bahrain, has confirmed suffering a data breach which most likely resulted in hackers stealing sensitive customer information. The company confirmed the news via a press release shared with local media highlighting a “data breach incident” on November 24, possibly resulting in the compromise of “some information ...

  • New Jersey: Montclair, Westwood Hospitals Divert Ambulances After Cyber Attack

    November 27, 2023

    Two hospitals in North Jersey are diverting ambulances from their emergency rooms after a cyber attack, authorities confirmed Monday. The attack impacted the computer systems at Mountainside Medical Center in Montclair, and Pascack Valley Medical Center in Westwood. Read more… Source: MSN News  

  • Foreign spy conducts cyberattacks against China’s defense, high-tech firm

    November 27, 2023

    China’s Ministry of State Security (MSS) disclosed a new case on Monday of foreign espionage activities involving the recruitment of a Chinese software developer who provided “technical services.” This spy agency used “poisoned” software to conduct cyberattacks and steal secrets from dozens of China’s defense and high-tech enterprises. Wang, a Chinese engineer in the network technology ...

  • The Dark Side of AI: Large-Scale Scam Campaigns Made Possible by Generative AI

    November 27, 2023

    Generative artificial intelligence technologies such as OpenAI’s ChatGPT and DALL-E have created a great deal of disruption across much of our digital lives. Creating credible text, images and even audio, these AI tools can be used for both good and ill. That includes their application in the cybersecurity space. Read more… Source: Sophos  

  • Thousands of house purchases frozen by cyber attack

    November 25, 2023

    Thousands of home moves have been thrown into limbo following a cyber attack on an IT company used by property conveyancers. An outage at CTS has hit around 80 law firms, halting a series of property exchanges and completions across the country since Wednesday. Rob Hailstone, chief executive of Bold Legal Group, which runs a forum ...