Friday Wrap Up: 28 June 2024

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚀 Google is testing “Digital Credential API” for Chrome on Android to enhance secure ID verification via mobile wallets. (Published on 6/24/2024, IoT and Edge). Read More

⚠️ The ‘GrimResource’ attack exploits MSC files and an unpatched Windows XSS flaw for network breaches. Stay alert! (Published on 6/24/2024, BleepingComputer). Read More

📚 The Los Angeles school district suffers a data breach through a Snowflake-linked vulnerability, impacting thousands of students. (Published on 6/24/2024, InformationWeek). Read More

🔍 The new SnailLoad attack uses network latency variations to deduce user activity without accessing network traffic. (Published on 6/24/2024, SecurityWeek). Read More

💻 P2PInfect botnet awakens to target Redis servers with a ransomware module and cryptominer. (Published on 6/25/2024, BleepingComputer). Read More

🔒 A supply chain attack backdoors WordPress.org plugins, adding malicious scripts to create admin accounts. (Published on 6/25/2024, BleepingComputer). Read More

🚨 Fresh MOVEit bug, CVE-2024-5806, under attack hours after disclosure, allowing unauthorized access to the platform. (Published on 6/25/2024, Dark Reading). Read More

🔍 Sensitive information on the CISA chemical app may have been accessed by a threat actor via a vulnerability in Ivanti Connect Secure. (Published on 6/25/2024, Dark Reading). Read More

📱 The “Green Bubble Nightmare” ends! Apple Messages now support RCS in the latest iOS 18 beta. (Published on 6/26/2024, Gizmodo). Read More

🔓 Hackers claim they can brick every Rabbit R1 device due to a massive security flaw. Stay cautious! (Published on 6/26/2024, Gizmodo). Read More

📲 Snowblind malware exploits an Android security feature to bypass app protections, threatening user data. (Published on 6/26/2024, BleepingComputer). Read More

🔊 Apple patches a Bluetooth vulnerability in AirPods that could allow eavesdropping. Update your firmware! (Published on 6/26/2024, The Hacker News). Read More

🎯 Chinese cyberspies are using ransomware in attacks to obscure attribution and distract defenders, with data theft as a primary goal. (Published on 6/26/2024, BleepingComputer). Read More

📱 Your phone’s 5G connection is vulnerable to bypass and DoS attacks due to security lapses. Stay cautious! (Published on 6/27/2024, Dark Reading). Read More

🔄 Microsoft pulls the Windows 11 KB5039302 update as it causes some devices to enter reboot loops. (Published on 6/27/2024, BleepingComputer). Read More

🚫 Cloudflare warns it did not authorize polyfill.io to use its name, following a significant supply chain attack involving malware. (Published on 6/27/2024, BleepingComputer). Read More

⚠️ A prompt injection flaw in Vanna AI exposes databases to remote code execution attacks. (Published on 6/27/2024, The Hacker News). Read More

🔓 A former IT employee accessed the data of over 1 million US patients at Geisinger healthcare system. (Published on 6/28/2024, BleepingComputer). Read More

💥 Infosys McCamish reveals that a LockBit ransomware attack exposed the sensitive information of over 6 million people. (Published on 6/28/2024, BleepingComputer). Read More

📧 Microsoft alerts more customers about email theft in the expanding Midnight Blizzard hack. (Published on 6/28/2024, Security Week). Read More

🕵️ TeamViewer attributes a recent corporate cyberattack to the Russian state-sponsored group Midnight Blizzard. (Published on 6/28/2024, BleepingComputer). Read More

🏥 Hundreds of thousands impacted by a cyberattack on a Chicago-area children’s hospital, putting sensitive medical information at risk. (Published on 6/28/2024, Dark Reading). Read More

and finally in non-cyber or tech news…

🎬 Discover the unique aesthetic of “The Acolyte” in an exclusive behind-the-scenes look with Star Wars creators. (Published on 6/26/2024, Ars Technica). Read More

🎮 First impressions of the Nintendo World Championships: NES Edition showcase competitive nostalgia and remixed classics. (Published on 6/26/2024, IGN). Read More

🧟 Capcom remasters its classic zombie game, Dead Rising, bringing fresh life to this slapstick mall adventure. (Published on 6/26/2024, Eurogamer). Read More

Stay informed and secure in the tech and cybersecurity world. Have a great weekend, and remember to patch and protect your systems!