Friday Wrap Up: 5 July 2024

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 An Australian man charged for conducting an ‘evil twin’ WiFi attack on domestic flights, stealing credentials. (Published on 7/1/2024, BleepingComputer). Read More

🔒 HubSpot is actively blocking attempts to hack customer accounts amidst ongoing cyberattacks. (Published on 7/1/2024, SecurityWeek). Read More

🛡️ Landmark Admin discloses a data breach compromising personal and medical information from May. (Published on 7/1/2024, SecurityWeek). Read More

📱 CapraRAT spyware, disguised as popular apps, is targeting Android users in a new malware campaign. (Published on 7/1/2024, The Hacker News). Read More

🚨 New OpenSSH vulnerability could lead to remote code execution as root on Linux systems. (Published on 7/1/2024, The Hacker News). Read More

🎓 Dark Reading interviews Johnathan Kim on why schools are targeted by cybercriminals and how they can defend themselves. (Published on 7/2/2024, Dark Reading). Read More

🔍 Evolve Bank reveals details of a data breach affecting fintech firms Wise and Affirm. (Published on 7/2/2024, SecurityWeek). Read More

📱 Google releases an Android update patching 25 vulnerabilities, including a critical privilege escalation bug. (Published on 7/2/2024, SecurityWeek). Read More

🎮 Xbox Live service is down worldwide, preventing users from logging in and playing games. (Published on 7/2/2024, BleepingComputer). Read More

🚨 Twilio confirms an unsecured API endpoint allowed hackers to verify phone numbers of millions of Authy MFA users, exposing them to potential attacks. (Published on 7/3/2024, BleepingComputer). Read More

🔒 HealthEquity reports a data breach after a partner’s account was compromised, exposing protected health information. (Published on 7/3/2024, BleepingComputer). Read More

🛡️ Microsoft MSHTML flaw exploited to deliver MerkSpy spyware, targeting users in Canada, India, Poland, and the U.S. (Published on 7/3/2024, The Hacker News). Read More

⚠️ FakeBat loader malware is spreading widely through drive-by download attacks, delivering various malicious payloads. (Published on 7/3/2024, The Hacker News). Read More

💻 384,000 sites still pull code from a questionable library recently acquired by a Chinese firm, posing security risks. (Published on 7/3/2024, Ars Technica). Read More

📊 Outages are costing companies over $10 million monthly, with 97% highlighting the importance of a resilient internet. (Published on 7/4/2024, InformationWeek). Read More

🛡️ California advances AI safety regulations despite opposition, requiring companies to test and secure their systems against misuse. (Published on 7/4/2024, SecurityWeek). Read More

🔍 Microsoft reveals critical flaws in Rockwell Automation PanelView Plus, allowing remote attackers to execute arbitrary code and cause DoS attacks. (Published on 7/4/2024, The Hacker News). Read More

🔓 OpenAI confirms a breach in 2023, but reassures that source code and customer data were not accessed. (Published on 7/5/2024, SecurityWeek). Read More

🚨 OVHcloud mitigated a record 840 million PPS DDoS attack using MikroTik routers, surpassing previous records. (Published on 7/5/2024, The Hacker News). Read More

💻 New Eldorado ransomware targets Windows and VMware ESXi VMs, emerging as a significant RaaS threat. (Published on 7/5/2024, BleepingComputer). Read More

🎟️ Hackers leak alleged Ticketmaster barcode data for 166,000 Taylor Swift tickets, demanding $2 million to stop further leaks. (Published on 7/5/2024, BleepingComputer). Read More

📚 Alabama Education Department confirms some data was breached during a recent hacking attempt. (Published on 7/5/2024, SecurityWeek). Read More

and finally in non-cyber or tech news…

🌌 The Acolyte’s latest episode delves deep into the temptations of the dark side in the Star Wars universe. (Published on 7/3/2024, Gizmodo). Read More

🔥 An Amazon delivery van exploded in Houston’s heat, raising concerns about electric vehicle safety near charging stations. (Published on 7/3/2024, Gizmodo). Read More

🐜 Ants exhibit remarkable medical abilities, performing amputations to prevent infections in injured colony members. (Published on 7/2/2024, Ars Technica). Read More

Stay informed and secure in the tech and cybersecurity world. Have a great weekend, and remember to patch and protect your systems!

Disclaimer: The views and opinions expressed in this newsletter are solely those of the author and do not necessarily reflect the official policy or position of any agency of the U.S. government or any other organization. This content is provided for informational purposes only and is not meant to represent the strategies or opinions of any aforementioned entities.