Loading summary
Transcript1 lines
- [00:05]
A
The US Secret Service raids a SIM farm in New York EU airport disruptions were caused by ransomware Thieves steal gold nuggets from a French museum after a cyber attack and Sonicwall releases a firmware update to remove SMA rootkits. This is the Risky bulletin prepared by Catalyn Kim Panu and read by me, Claire airdrop. Today is the 24th of September and this podcast episode is brought to you by Spectrops, the experts in attack path management. In today's top story, the U.S. secret Service has seized 300 servers during a Sim Farm raid. The farm was operating from five locations across the New York Tri state area. Together, the seized servers were running more than 100,000 SIM cards. White House officials received anonymous death threats earlier this year from the sim farm, which prompted the investigation. In other news, A ransomware attack is responsible for this week's disruptions at European airports. The EU's cybersecurity agency says it's identified the type of ransomware used in the attack and that law enforcement is investigating. The attack began on Friday and targeted Collins Aerospace, which operates self check in kiosks. Disruptions are expected to continue throughout the week. GitHub will require developers to use FIDO based two factor authentication to authorise updates to their NPM packages. The requirement is part of the company's NPM security overhaul following a recent supply chain attack and self propagating worm. The company will also deprecate legacy NPM tokens and roll out new ones that only last seven days. UK carmaker Jaguar Land Rover has extended its halt in production until October 1st. The company paused production following a ransomware attack in early September. Several of the company's suppliers have said they may face bankruptcy. The company has lost more than 50 million pounds since the attack began. Hackers have stolen the contact information of Stellantis customers. Stellantis is the parent company of multiple car brands including Maserati, Jeep, Alfa Romeo and Fiat. The data was stolen from a third party service provider. The breach only impacted the company's customers. A European EV charging provider has notified customers of a security breach. Digital Charging Solutions builds public charging solutions for car manufacturers and fleet managers. The company confirmed a third party customer service provider had viewed customer information without authorisation. DCS also notified BMW and Kia, who used DCS for their charging networks. Thieves have stolen gold nuggets worth €600,000 from the French Natural History Museum following a cyber attack. The theft occurred while the museum's alarms and camera surveillance were down due to the cyber attack weeks earlier, according to investigators. The Thieves appear to have known about the lack of surveillance. A cyber attack has disrupted almost 400 circle K convenience stores in Hong Kong. Payment, email and loyalty systems have been down all week. The STOR have remained open but have only accepted payments via Hong Kong's custom Octopus payment cards. Maryland's Public Transport Agency is investigating a breach of its internal IT network. The incident occurred last week but did not impact public transportation operations. It mainly affected the agency's call centres, which are used for on demand mobility and paratransit services. A hacker has breached the UX Link crypto platform. The attacker stole almost $30 million in assets and minte minted trillions of the platform's custom coins. In a rare case of instant karma, the attacker fell for a phishing attack shortly after the hack and lost $48 million. An app designed to dox people that spoke against Charlie Kirk has wound up doxxing its own users. The Cancel the Hate app leaked the email addresses and phone numbers of its users, according to Straight Arrow News. The app was taken offline last week after reporters reached out the European Union is aiming to simplify its cookie consent pop up law. A proposed amendment to the E Privacy Directive could reduce the number of cases where consent must be obtained. The directive was passed in 2009 and required websites to obtain user consent before placing cookies on their devices. Poland has threatened to hack bag any country that cripples its critical infrastructure. Minister of Digital Affairs Krzysztof Gavkoski says the country has the capability to retaliate. Gavkowski was responding to questions about recent attacks that disrupted European airports and an attack that attempted to cut off water supply to a Polish city. Romania has also threatened hackback operations. EU authorities have dismantled a crypto fraud ring operating out of Spain and Portugal. The group has been operating since 2018. It allegedly stole more than 100 million euros from victims across Europe. The five suspects were detained and bank accounts have been frozen in multiple countries. Cloudflare says it's mitigated a new record DDoS attack of 22.2 terabits per second. The attack was almost double the previous record, which also targeted Cloudflare's infrastructure earlier this month. The attack lasted 40 seconds. Cloudflare is calling these attacks hypervolumetric DDoS attacks due to their size. SonicWall has released a firmware update to remove the overstep rootkit from its SMA appliances. The rootkit has been used in a campaign targeting SMA devices for almost a year. According to Google. The hackers abused compromised passwords to deploy both the rootkit and ransomware. Libre Ezbar has patched an actively exploited zero day in its email security gateways. The company says the bug was exploited by a foreign state. The vulnerability is a command injection bug. Attackers can run malicious code on Librez via email servers by sending email containing a specially crafted compressed attachment. And finally, two new vulnerabilities can allow hackers to remotely take over factory management systems. The bugs impact Dassault's Delmia Apreso manufacturing line management platform. Remote attackers can create privileged employee accounts and use them to upload web shells. Both issues are likely to be exploited. Earlier this month, CISA also warned that hackers were exploiting another Delmia Aprezo bug to compromise factories. And that is all for this podcast edition. Today's show was brought to you by our sponsor, Spectrops. Find them@Spectropsio. Thanks for your.