Cybersecurity Weekly: DJI flaw, Garmin hack, ransomware defense group saves millions
A new security flaw affecting DJI drones has been identified. Garmin confirms a ransomware attack as they bring their services back online. The No More Ransom group saves $632 million in ransomware payments. All this, and more, in this week’s edition of Cybersecurity Weekly.
See Infosec IQ in action
1. New security flaw affecting DJI drones
Cybersecurity researchers last week revealed security issues in the Android app developed by Chinese drone-maker DJI that comes with an auto-update mechanism that bypasses Google Play Store. This flaw could be used to install malicious applications and transmit sensitive personal information to DJI's servers.
Read more »
2. Garmin confirms ransomware attack, services coming back online
Last week, Garmin suffered a worldwide outage that affected their Garmin Connect, Strava, inReach and flyGarmin navigation and fitness services. They officially confirmed that they were victims of a ransomware attack as they slowly bring these affected services back online.
Read more »
3. No More Ransom saves $632 million in ransomware payments
The No More Ransom Project celebrated its fourth anniversary after helping over 4.2 million visitors recover from a ransomware infection and saving an estimated $632 million in ransom payments. These savings are done through the availability of 110 decryptors created by law enforcement, academia and private partners.
Read more »
4. Chinese hackers escalate attacks against India and Hong Kong amid tensions
An emerging threat actor out of China has been traced to a new hacking campaign aimed at government agencies in India and residents of Hong Kong.The attacks were observed during the first week of July, coinciding the passage of controversial security law in Hong Kong and India's ban of 59 China-made apps over privacy concerns.
Read more »
5. Cerberus Android malware source code offered for sale for $100,000
The maintainer of Cerberus banking trojan for Android is auctioning the entire project for a price starting at $50,000 or close the deal for double the money. The price includes everything from source code to customer list along with installation guide and the scripts to make components work together.
Read more »
6. Source code from dozens of companies leaked online
Source code from exposed repositories of dozens of companies across various fields of activity is publicly available as a result of misconfigurations in their infrastructure. A large number of these leaks, which go by the name Confidential & Proprietary, are available in a public repository on GitLab.
Read more »
7. Shadow attacks allow replacing content in signed PDF files
Shadow attacks can allow an attacker to manipulate the content of a signed PDF document while keeping its signature valid. The attacker can create a document with the content expected by the authority reviewing and signing the PDF, and then change the content after the authority signs the document.
Read more »
8. Attackers exploiting high-severity network security flaw
The French telecommunications company confirmed that they suffered a ransomware attack exposing the data of twenty of their enterprise customers. On July 15th, 2020, the ransomware operators behind the Nefilim Ransomware added Orange to their data leak site and stated that they breached the company through their Orange Business Solutions division.
Read more »
9. Ransomware attack on insurance MSP Xchanging affects clients
Global IT services and solutions provider DXC Technology announced over the weekend a ransomware attack on systems from its Xchanging subsidiary. Xchanging is known as a managed service provider for businesses in the insurance industry, but its list of customers includes companies from several other fields.
Read more »
See Infosec IQ in action
10. Former Twitter staff claim more than 1,000 employees had access to accounts
Following the high-profile hijacking of verified Twitter accounts to post a bitcoin scam, former employees at the social network claimed that a large proportion of its workforce had tools to access and edit accounts. Twitter would not comment on whether the figure of more than 1,000 was accurate and if the employees had access to these tools.
Read more »
- Reduce security events
- Reinforce cyber secure behaviors
- Strengthen cybersecurity culture at your organization
In this Series
- Cybersecurity Weekly: DJI flaw, Garmin hack, ransomware defense group saves millions
- Canada Flipper Zero ban and new RustDoor macOS malware
- AnyDesk hack and iPhone patched kernel flaw
- Tesla Pwn2Own hacks and iOS push alerts abuse
- TeamViewer breach and Atlassian Jira outage
- Moscow ISP revenge hack and Microsoft Sharepoint bug warning
- X verified accounts hack and SpectralBlur macOS malware
- CISA default password alert and SOHO KV-botnet campaign
- New 5G modem flaws and Apple’s data breach report
- Staples cyberattack, Agent Racoon backdoor and other news
- British Library ransomware attack, Windows fingerprint authentication bypass
- Samsung UK data breach and ransomware actor’s SEC complaint
- ICBC ransomware attack and ChatGPT outage
- Boeing Lockbit ransomware attack, Apple’s vulnerability and WhatsApp mods spyware
- Octo Tempest hacking group and new iLeakage attack
- Okta support system breach and Google Ads fake KeePass campaign
- Skype DarkGate malware, Shadow PC breach and AvosLocker ransomware warning
- 23andMe data theft, MGM’s $100M ransomware loss and the Azure VM breach
- Malicious Bing Chat ads and FBI’s dual ransomware warning
- T-Mobile app glitch and fake Booking.com pages
- Airbus data leak, Cisco Webex ad malware and €345 million TikTok fine
- New Apple iMessage exploit and CISA’s Apache RocketMQ warning
- Forever 21 data breach and Android BadBazaar espionage
- Duolingo data leak and the Met Police IT hack
- Discord.io data breach and Ivanti Avalanche vulnerabilities
- UK Electoral Commission hack and Microsoft’s role in China email breach
- Salesforce email zero-day exploit and Microsoft Power Platform criticism
- Airlines disclose pilot data breach and the Microsoft Teams bug
- GravityRAT Android Trojan and new MOVEit Transfer flaw
- University of Manchester hack and Honda API flaws
- MOVEit zero-day exploit and the U.S. iPhone hack accusation
- Daam Android virus and Barracuda zero-day flaw
- TP-Link router exploit and 18-year-old charged with hacking DraftKings accounts
- Discord support hack and Toyota location data leak
- Twitter private tweets bug and Cisco phone router vulnerabilities
- Cisco XSS zero-day flaw and PaperCut vulnerabilities
- 3CX hackers hit critical infrastructure and secondhand routers cause security concerns
- Hyundai data breach and Microsoft’s warning to accountants
- Western Digital cloud breach and the MSI ransomware hack
- TMX loan data breach, Italy bans ChatGPT and WordPress Elementor Pro exploit
- ChatGPT data leak and Gmail message theft by North Korean hackers
- U.S. federal agency hack and the return of FakeCalls Android malware
- Massive AT&T data breach and fake jobs targeting security researchers
- U.S. Marshals service breach and TPM 2.0 security flaws
- Dangerous ChatGPT apps and food giant Dole ransomware attack
- GoDaddy malware installations, record-breaking DDoS attack and the new WhiskerSpy malware
- Reddit’s employees phished, healthcare firms targeted and the new Screenshotter malware
- JD Sports data breached, VMware ESXi servers attacked and the HeadCrab malware
- Yandex source code leaked, 4500+ WordPress sites hacked and the new SwiftSlicer malware
- PayPal accounts breached, Fortinet VPN flaw exploited, and the new Hook malware
- Twitter users’ emails leaked, ChatGPT used to write malware and Slack’s repository breach
- Reduce security events
- Reinforce cyber secure behaviors
- Strengthen cybersecurity culture at your organization
