Friday Wrap Up: 22 March 2024

It’s been a busy week in cybersecurity and time for a Saturday aka Friday Wrap Up. Here are some of the interesting stories from this past week.

🔐 Microsoft steps up security, deprecating 1024-bit RSA keys in Windows TLS. A significant move! (3/18/2024, BleepingComputer) Read more

🌏 Chinese ‘Earth Krahang’ hackers breach 70 orgs in a global campaign. (3/18/2024, BleepingComputer) Read more

💻 Malware distributed via fake Google Sites using HTML smuggling technique. Beware! (3/18/2024, The Hacker News) Read more

🛡️ Fujitsu suffers data breach, affecting personal and customer info. (3/18/2024, SecurityWeek) Read more

🤖 Sam Altman candidly critiques ChatGPT’s performance. Eye-opening! (3/18/2024, Gizmodo) Read more

📧 Clever phishing attack deploys NetSupport RAT via Microsoft Office. Stay vigilant! (3/18/2024, The Hacker News) Read more

🔒 19 million plaintext passwords leaked due to Firebase misconfigurations. (3/19/2024, BleepingComputer) Read more

🚰 US warns of hackers targeting water systems’ infrastructure. (3/19/2024, BleepingComputer) Read more

🚗 GM & LexisNexis face lawsuit over nontransparent sale of driver data to insurers. (3/19/2024, Techdirt) Read more

🇨🇳 Chinese APT group hacks 48 government organizations worldwide. (3/19/2024, SecurityWeek) Read more

🔧 Fortra updates critical RCE flaw with a 9.8 CVSS rating. Upgrade advised! (3/19/2024, Dark Reading) Read more

🚱 US warns of cyber threats to water systems by Iran and China. (3/20/2024, Dark Reading) Read more

🕵️ After LockBit and ALPHV takedowns, RaaS groups seek new recruits. (3/20/2024, Dark Reading) Read more

🛑 1 in 4 organizations forced to shut down OT operations due to cyberattacks. (3/20/2024, SecurityWeek) Read more

🛠️ Atlassian fixes over 2 dozen security flaws, including a critical Bamboo bug. (3/20/2024, The Hacker News) Read more

🐰 New BunnyLoader malware variant emerges with stealth and modular tactics. (3/20/2024, The Hacker News) Read more

💻 Microsoft addresses Windows Server issue causing domain controller crashes. (3/21/2024, BleepingComputer) Read more

🔓 Sign1 malware infects 39,000 WordPress sites with ads and redirects. (3/21/2024, BleepingComputer) Read more

🏨 Hackers could unlock millions of hotel doors due to Unsaflok flaw. (3/21/2024, BleepingComputer) Read more

📱 Kenya challenges TikTok on privacy law compliance. (3/22/2024, Dark Reading) Read more

🍏 Apple Silicon’s hardware exploit could leak sensitive data. (3/22/2024, Engadget) Read more

📡 Cable ISP fined $10k for misleading FCC about broadband coverage. (3/22/2024, Ars Technica) Read more

🦊 Mozilla patches two exploited Firefox zero-days from Pwn2Own. (3/22/2024, BleepingComputer) Read more

and finally in non-cyber or tech news…

🪐 Check out the best space images of the week, including bizarre Martian dunes and more! (3/22/2024, Gizmodo) Read more

Stay informed and secure in the tech and cybersecurity world. Have a great weekend, and remember to patch and protect your systems!

Disclaimer: The views and opinions expressed in this newsletter are solely those of the author and do not necessarily reflect the official policy or position of any agency of the U.S. government or any other organization. This content is provided for informational purposes only and is not meant to represent the strategies or opinions of any aforementioned entities.