Friday Wrap Up: 2 August 2024

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🔒 Microsoft reports ransomware gangs exploiting VMware ESXi authentication bypass vulnerability. Stay alert! (Published on 7/29/2024, BleepingComputer). Read More

⚠️ Stargazer Goblin creates 3,000 fake GitHub accounts to spread malware, earning $100,000 in illicit profits. (Published on 7/29/2024, The Hacker News). Read More

🛡️ A critical security flaw in Acronis Cyber Infrastructure exploited in the wild; now patched. (Published on 7/29/2024, The Hacker News). Read More

🚨 Mandrake malware evades detection in Google Play for years due to sophisticated design. (Published on 7/30/2024, Ars Technica). Read More

🤖 ‘Friend’, an AI pendant, texts you updates about your life like a real friend would. (Published on 7/30/2024, Gizmodo). Read More

⚠️ New OneDrive phishing scam tricks users into running a malicious PowerShell script. (Published on 7/30/2024, The Hacker News). Read More

🌊 SideWinder cyber attacks target maritime facilities in the Indian Ocean and Mediterranean Sea. (Published on 7/30/2024, The Hacker News). Read More

🔒 DigiCert to mass-revoke TLS certificates due to a domain validation bug. (Published on 7/30/2024, BleepingComputer). Read More

🚨 New Android malware ‘BingoMod’ wipes devices after draining bank accounts. Stay alert! (Published on 7/31/2024, BleepingComputer). Read More

💻 OneBlood’s virtual machines are encrypted in a ransomware attack, causing IT system outages. (Published on 7/31/2024, BleepingComputer). Read More

🤔 Should today’s developers be more or less specialized? The debate continues with evolving technologies. (Published on 7/31/2024, InformationWeek). Read More

🔍 North Koreans target developers worldwide with spyware and fake job offers. Be cautious! (Published on 7/31/2024, Dark Reading). Read More

🏙️ The City of Columbus reports data compromised in a thwarted ransomware attack. (Published on 7/31/2024, SecurityWeek). Read More

🚨 Attackers hijack Facebook pages to promote a malicious AI photo editor, delivering the Lumma stealer. Stay alert! (Published on 8/1/2024, Dark Reading). Read More

🛡️ A critical infrastructure group is launching efforts to enhance federal agencies’ cyber defenses. (Published on 8/1/2024, Malware Analysis). Read More

🔄 Convicted cybercriminals included in a recent Russian prisoner swap, highlighting international cybercrime complexities. (Published on 8/1/2024, SecurityWeek). Read More

📢 KnowBe4 shares lessons from a North Korean IT hire to spotlight insider threat risks. (Published on 8/1/2024, InformationWeek). Read More

❌ Twilio ends support for Authy for Desktop, logging out all users. Important update for desktop users! (Published on 8/1/2024, BleepingComputer). Read More

🔒 Attackers exploit StackExchange to load malicious packages onto PyPI, stealing sensitive data and draining developers’ crypto wallets. (Published on 8/2/2024, Malware Analysis). Read More

🚨 Fake AI editor ads on Facebook push password-stealing malware by mimicking legitimate software. Stay vigilant! (Published on 8/2/2024, BleepingComputer). Read More

🖥️ New Windows backdoor BITSLOTH exploits BITS for stealthy communication, posing a new threat. (Published on 8/2/2024, The Hacker News). Read More

📧 APT28 targets diplomats with HeadLace malware via a car sale phishing lure, increasing espionage risks. (Published on 8/2/2024, The Hacker News). Read More

🌐 Cybercriminals are abusing Cloudflare tunnels to evade detection and spread malware, creating new security challenges. (Published on 8/2/2024, The Hacker News). Read More

and finally in non-cyber or tech news…

🧪 A new blood test with 90% accuracy shows promise for early Alzheimer’s diagnosis and treatment. (Published on 7/29/2024, Gizmodo). Read More

🌌 Physicists suggest dark matter might explain ‘hydrogen forest’ signatures in spectrograms, indicating new physics. (Published on 7/29/2024, Gizmodo). Read More

🌕 Scientists propose a lunar ‘Noah’s Ark’ to cryogenically preserve DNA of endangered species, leveraging the Moon’s remoteness and low temperatures. (Published on 8/1/2024, Gizmodo). Read More

Stay informed and secure in the tech and cybersecurity world. Have a great weekend, and remember to patch and protect your systems!

Disclaimer: The views and opinions expressed in this newsletter are solely those of the author and do not necessarily reflect the official policy or position of any agency of the U.S. government or any other organization. This content is provided for informational purposes only and is not meant to represent the strategies or opinions of any aforementioned entities.