News

Hi friends,

I hope you're all doing well. I'm on another round of courses, so busy-busy, fortunately it's all wonderfully interesting. Still, that weekend sure looks good on the horizon ;-) Enjoy your own weekend, and enjoy the read. Cheers!

Dieter





Quick stories

  • Microsoft to start force-upgrading Windows 22H2 systems next month: link.
  • WordPress.org to require 2FA for plugin developers by October: link.
  • Poland dismantles cyber sabotage group linked to Russia, Belarus: link.
  • UK National Crime Agency, responsible for fighting cybercrime, ‘on its knees,’ warns report: link.
  • FBI: Reported cryptocurrency losses reached $5.6 billion in 2023: link.

Breaches and leaks

  • Fortinet confirms data breach after hacker claims to steal 440GB of files: link.
  • Hospital system to pay $65 million for data leak, including images of nude patients: link.
  • Car rental giant Avis data breach impacts over 299,000 customers: link.
  • Transport for London staff faces systems disruptions after cyberattack: link.
  • Payment gateway data breach affects 1.7 million credit card owners: link.
  • Highline Public Schools closes schools following cyberattack: link.
  • Popular French retailers confirm hackers stole customer data: link.
  • Japanese media giant Kadokawa investigating another reported data leak by BlackSuit hackers: link.
  • Washington state school district closed for second day after cyberattack: link.

Issues and fixes

  • Microsoft September 2024 Patch Tuesday fixes 4 zero-days, 79 flaws: link.
  • Ivanti fixes maximum severity RCE bug in Endpoint Management software: link.
  • Adobe fixes Acrobat Reader zero-day with public PoC exploit: link.
  • GitLab warns of critical pipeline execution vulnerability: link.
  • SonicWall SSLVPN access control flaw is now exploited in attacks: link.
  • Progress LoadMaster vulnerable to 10/10 severity RCE flaw: link.
  • Meta fixes easily bypassed WhatsApp ‘View Once’ privacy feature: link.