Loading summary
Transcript1 lines
- [00:04]
Claire Aird
Ukraine's State railway hit by a cyber attack A ransomware attack reduces Malaysia's largest airport to writing flight details on a whiteboard. Buggy exploits put Draytek routers in a reboot loop and the NIST CVE backlog grows bigger despite efforts to address it. This is the risky bulletin prepared by Catalyn Kim Panu and read by me, Claire aird. Today is the 26th of March and this podcast episode brought to you by Sublime Security, an email security platform that's not a black box. A presumed data wiper attack has taken down online ticketing at Ukraine's state railway company. Sunday's attack has resulted in large queues at train stations across Ukraine. Despite the attack, Ukraine's state owned rail company says trains are still running normally. The website is still down and officials are restoring it from backups. Ukraine has blamed the incident on Russia. US President Donald Trump says senior government officials won't be using Signal very much in the future. Trump said the best place for sensitive conversations is in the Situation Room with no phones on. The comments come in the wake of a journalist accidentally being added to a so called Principles Committee Signal Group chat that was planning a military strike in Yemen. The Malaysian prime minister has declined to pay a $10 million ransom after hackers targeted the country's main airport. The weekend's incident crippled crippled some IT systems, forcing staff at the Kuala Lumpur International Airport to write flight information on a whiteboard. The country's prime minister, Anwar Ibrahim, said it took him less than five seconds to decline to pay the ransom. No ransomware group has taken credit for the attack yet Draytek Vigor routers all over the world are stuck in a reboot loop after attackers attempted to exploit them. Unconfirmed reports suggest attackers were attempting to exploit Draytek Vigor vulnerabilities that were disclosed by Faraday Security last month. Outages have been reported in countries including Australia, the UK and Vietnam. Draytek has told its customers to update to the latest firmware and disable VPN and remote access while it investigates the issue. A massive DDoS attack has hit Russian Internet service provider Lovett, according to Russia's Internet Watchdog. The attack peaked at almost 220 gigabits per second. The attack is said to have cut Internet access for critical infrastructure OPER operators as well as Russian civilians. The IT army of Ukraine took credit. A hacker has defaced the website of New York University and leaked the personal data of 3 million students. It included personal details and test scores of students admitted to the university since 1989. The hacker claims the data shows NYU disproportionately admitted black and Latino students in violation of a 2023 Supreme Court decision that struck down affirmative action. The has reported the breach to authorities. Interpol has detained more than 300 suspects in Africa over their alleged involvement in cyber attacks and scams. The suspects were arrested across seven countries and were allegedly involved in mobile banking, investment and instant messaging scams. Almost half were detained in Nigeria. Most of them were foreigners operating out of scam hubs. The Open Technology Fund is suing the Trump administration over cuts to its funding. The OTF is a non organisation and has been primarily funded by the United States Agency for Global Media. The funding was cut this month by a presidential executive order. The lawsuit says the funding was authorised by Congress and can't be cut by the President. The OTF has been a major sponsor for Tor, LetsEncrypt, OpenVPN and other anti surveillance projects. Genetic testing service 23andMe has filed for bankruptcy protection a year after a major data breach. The company's long standing financial troubles were compounded last year by a series of class action lawsuits related to the 2023 breach. Its board resigned in 2024, followed by its CEO last week. 23andMe holds DNA profiles of more than 15 million users. Privacy regulators across the US and Europe are urging users to request the deletion of their data before it's sold. Austria's intelligence service has uncovered a Russian disinformation campaign that spread false information about uk. The campaign started shortly after Russia's invasion and was allegedly run by a Bulgarian woman living in Austria. DSN says it's filed espionage charges against the suspect who's been released on bail. A new vulnerability chain could impact more than 40% of Kubernetes systems. The Ingress nightmare attack is a chain of four vulnerabilities that leads to unauthenticated remote code execution on Kubernetes clusters. Security firm WIZ has identified at least 6,500 Kubernetes deployments that vulnerable to the attack, including many at Fortune 500 companies. The Kubernetes project released patches on Monday. The U.S. national Institute of Standards and Technology now expects the backlog for the national vulnerability database to grow, not shrink. NIST's backlog for new NVD entries has been a problem since February 2024. New vulnerabilities in the database are not being enriched with additional metadata and information. The agency hired external contract to address the backlog, but crucial information is still missing from tens of thousands of CVE entries. Last week, NIST said the backlog will likely continue for the rest of the year. The agency blamed the issue on a 32% increase in vulnerability submissions last year. That number is also expected to grow this year. It says it's exploring machine learning to automate certain processing tasks. Uh oh. And that is all for this podcast edition. Today's show was brought to you by our sponsor, Sublime Security. Find them at Sublime Security. Thanks to your company.