Friday Wrap Up: 19 July 2024

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 Cybercriminals use Facebook ads to spread info-stealing malware via fake Windows themes. Stay alert! (Published on 7/15/2024, BleepingComputer). Read More

🚫 Kaspersky Lab announces the shutdown of its U.S. operations starting July 20. (Published on 7/15/2024, BleepingComputer). Read More

🛡️ Rite Aid suffers a data breach affecting older customer purchases, becoming RansomHub’s latest victim. (Published on 7/15/2024, Dark Reading). Read More

💻 SEXi ransomware rebrands as ‘APT Inc.’ but continues its notorious methods. (Published on 7/15/2024, Dark Reading). Read More

📱 AT&T breach potentially impacts millions of Boost, Cricket, and H2O customers. (Published on 7/15/2024, InformationWeek). Read More

🚨 Void Banshee APT exploits Microsoft MHTML flaw to spread Atlantida Stealer. Stay secure! (Published on 7/16/2024, The Hacker News). Read More

⚠️ CISA warns of exploited GeoServer vulnerability. Ensure your systems are protected! (Published on 7/16/2024, SecurityWeek). Read More

📧 Email addresses of 15 million Trello users leaked on a hacking forum. Be cautious! (Published on 7/16/2024, BleepingComputer). Read More

🎯 Void Banshee APT uses Microsoft zero-day in spear-phishing attacks. Protect your data! (Published on 7/16/2024, Dark Reading). Read More

🚤 MarineMax’s data breach impacts over 123,000 people, exposing personal information. (Published on 7/17/2024, BleepingComputer). Read More

📱 Over 400,000 Life360 user phone numbers leaked due to an unsecured API flaw. (Published on 7/17/2024, BleepingComputer). Read More

🔧 Atlassian releases updates to fix high-severity vulnerabilities in Bamboo, Confluence, and Jira. (Published on 7/17/2024, SecurityWeek). Read More

🖥️ North Korean hackers update BeaverTail malware to target MacOS users. (Published on 7/17/2024, The Hacker News). Read More

🛡️ FIN7 group advertises a security-bypassing tool on dark web forums, used by ransomware groups. (Published on 7/17/2024, The Hacker News). Read More

🕵️♂️ Lawyers and journalists in Northern Ireland claim police unlawfully surveilled them to uncover confidential sources. (Published on 7/18/2024, Computer Weekly). Read More

🏢 CISA releases a playbook to help local governments and private sectors improve critical infrastructure resiliency. (Published on 7/18/2024, CyberScoop). Read More

⚖️ Judge clears SolarWinds and its CISO of most charges in SEC lawsuit related to the Russian cyberattack. (Published on 7/18/2024, Information Week). Read More

🐇 Revolver Rabbit gang registers over 500,000 domains for malware campaigns targeting Windows and macOS systems. (Published on 7/18/2024, BleepingComputer). Read More

💡 Vulnerabilities in SAP AI Core expose customer data to cyber attacks, dubbed “SAPwned” by researchers. (Published on 7/18/2024, The Hacker News). Read More

🛡️ Two Russians plead guilty to involvement in numerous LockBit ransomware attacks targeting victims globally. (Published on 7/19/2024, BleepingComputer). Read More

👻 Notorious Chinese hacker gang GhostEmperor re-emerges with sophisticated infection chains and new EDR evasion techniques. (Published on 7/19/2024, Dark Reading). Read More

💰 Indian cryptocurrency exchange WazirX loses $230 million in a major security breach involving multi-signature wallets. (Published on 7/18/2024, The Hacker News). Read More

🔓 A recent Splunk Enterprise vulnerability is alarmingly easy to exploit, warns SonicWall. (Published on 7/19/2024, SecurityWeek). Read More

and finally in non-cyber news…

🔋 The 2025 Lucid Air is now the most efficient EV on sale thanks to a new heat pump. (Published on 7/16/2024, Ars Technica). Read More

🎮 Bite-size speed challenges in the Nintendo World Championships refresh the classics and require patience. (Published on 7/17/2024, Ars Technica). Read More

🧠 Researchers found that individual neurons respond to words with similar meanings when processing language. (Published on 7/17/2024, Ars Technica). Read More

🚗 Porsche expands the Macan EV range with two new models starting at $75,300. Available Q4 2024. (Published on 7/16/2024, Ars Technica). Read More

Stay informed and secure in the tech and cybersecurity world. Have a great weekend, and remember to patch and protect your systems!

Disclaimer: The views and opinions expressed in this newsletter are solely those of the author and do not necessarily reflect the official policy or position of any agency of the U.S. government or any other organization. This content is provided for informational purposes only and is not meant to represent the strategies or opinions of any aforementioned entities.