SOCRadar Cyber Threat Intelligence Weekly Newsletter 1/9/2023

 

Cyber Threat Intelligence Weekly Newsletter

This week's most mentioned cybersecurity topics have been covered in this newsletter for you — the latest developments, cyberattacks, data breaches, recent vulnerabilities, threat intelligence insights, and more.

Dark Web Insights

Data of 235 million Twitter users leaked online Rail giant Wabtec discloses data breach after Lockbit ransomware attack Does Volvo Cars suffer a new data breach? Deezer User Data Detected Shared on Underground Forums

Rackspace Confirms Play Ransomware Gang Responsible for Recent Breach CVE-2022-41080, CVE-2022-41040 and CVE-2022-41082 Synology Fixes a Max Severity RCE Vulnerability in VPN Server Products CVE-2022-43931 Fortinet fixed multiple command injection bugs in FortiADC and FortiTester  CVE-2022-39947  Security Bulletin: Multiple Vulnerabilities discovered in libraries used by Apache Zookeeper that is included in ITNM CVE-2020-36518, CVE-2022-2047, CVE-2022-2048 and CVE-2022-24823 Zoho urges administrators to fix critical ManageEngine errors immediately CVE-2022-47523

Trending Threat Actors

Pro-Russia cyberattacks aim at destabilizing Poland, security agency warns  IcedID malware campaign targets Zoom users Hive Ransomware gang leaked 550 GB stolen from Consulate Health Care  New shc-based Linux Malware Targeting Systems with Cryptocurrency Miner BitRAT malware campaign uses stolen bank data for phishing Bluebottle hackers used signed Windows drivers in attacks on banks Hackers use CAPTCHA bypass to make 20K GitHub accounts in a month

Important Cybersecurity News

Slack's private GitHub code repositories stolen over holidays Toyota, Mercedes, and BMW API flaws exposed owners’ info Amazon S3 will now encrypt all new data with AES-256 by default Ransomware decryption tool: Victims of MegaCortex can now unlock their files for free  Meta fined $414 million in latest European privacy crackdown  How hackers might be exploiting ChatGPT  Canadian mining firm shuts down mill after a ransomware attack France fines Apple for targeted App Store ads without consent VSCode Marketplace can be abused to host malicious extensions.

SOCRadar Blog

10 Questions to ChatGPT: How It Can Change Cybersecurity   In November 2022, OpenAI -an Artificial Intelligence research and deployment company- released its chatbot, the ChatGPT. With the release, ChatGPT attracted the entire world’s attention, and people started talking about their conversations with ChatGPT on blog pages and social media.   GPT (Generative Pretrained Transformer) is a natural language processing (NLP) model developed by OpenAI. These models are trained to generate text similar to human writing and have significantly advanced NLP. It uses a deep-learning technique called transformer architecture, commonly used in NLP tasks such as language translation and text generation.   Transformer architecture is based on self-attention, which allows the model to weigh and combine various parts of the input data to make predictions, so transformer models can better capture the relationships between different words and phrases in the input data and generate more accurate and fluent text.

Read More

Major Cyber Attacks in Review: December 2022   In the last month, we have seen many cyber incidents, ranging from data breaches at retailers to various cyberattacks on cryptocurrency exchange platforms. These types of incidents can harm a company’s reputation and lead to the theft of private information and financial loss. Individuals and organizations must be aware of these threats and take precautions to avoid them.   This blog reviewed the major cyberattacks that happened in December 2022.

Read More

SOCRadar Cyber Intelligence Inc., 651 N Broad St, Ste 205, Middletown, DE 19709, USA, +1 (571) 249 4598