Friday Wrap Up: 20 Sept 2024

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Vulnerability Fixes and Threat Patches

🔒 D-Link patches critical flaws in WiFi 6 routers, addressing vulnerabilities that allowed attackers to exploit hardcoded credentials and execute arbitrary code. (Published on 9/16/2024, BleepingComputer). Read More

🔑 Apple addresses major security flaws in iOS 18, warning that attackers could use Siri to access sensitive user data or control nearby devices. (Published on 9/16/2024, SecurityWeek). Read More

⚠️ VMware patches a critical remote code execution flaw identified during a Chinese hacking contest, with a CVSS score of 9.8/10. (Published on 9/17/2024, SecurityWeek). Read More

🔓 GitLab releases a fix for a critical SAML authentication bypass vulnerability impacting self-managed CE and EE installations. (Published on 9/18/2024, BleepingComputer). Read More

Cybersecurity Incidents

🚨 Ivanti’s cloud vulnerability (CVE-2024-8190) is actively exploited by threat actors just days after the advisory was issued. (Published on 9/16/2024, Dark Reading). Read More

💥 AT&T fined $13M for a data breach that exposed customer billing information, which was retained in the cloud for years. (Published on 9/17/2024, Ars Technica). Read More

📷 A zero-click RCE bug in macOS Calendar allows attackers to bypass security and steal iCloud data, including photos. (Published on 9/17/2024, Dark Reading). Read More

🛡️ Dell investigates data breach claims after a hacker leaked personal information of over 10,000 employees. (Published on 9/20/2024, BleepingComputer). Read More

Botnets and Malware

🕵️‍♂️ A new Raptor Train IoT botnet, likely run by a Chinese threat actor, compromises over 200,000 devices worldwide. (Published on 9/18/2024, The Hacker News). Read More

🤖 FBI leads the takedown of the Raptor Train botnet, impacting over 200,000 devices as part of the Flax Typhoon APT campaign. (Published on 9/19/2024, Dark Reading). Read More

Industry and Legislation

⚖️ California’s deepfake laws face a test of enforcement, aimed at curbing misinformation ahead of the U.S. presidential elections. (Published on 9/19/2024, InformationWeek). Read More

🛠️ Hackers are brute-forcing Foundation Accounting Software used by construction contractors, leading to significant compromises. (Published on 9/18/2024, SecurityWeek). Read More

Emerging Trends

📊 The future of cybersecurity may involve passwordless and keyless access management, transforming how companies handle privileged access. (Published on 9/20/2024, The Hacker News). Read More

💻 GenAI poses new challenges for cybersecurity, despite limited data on AI-enabled attacks in existing threat reports. (Published on 9/20/2024, Dark Reading). Read More

🩺 Microsoft tracks Vanilla Tempest hackers who target U.S. healthcare organizations with INC ransomware attacks. (Published on 9/19/2024, BleepingComputer). Read More

and finally in non-cyber or tech news…

Entertainment and Industry Innovations

🎬 James Cameron hints at a new direction for the Terminator franchise, aiming for something entirely different from previous films. (Published on 9/19/2024, Gizmodo). Read More

🚗 Lotus unveils a bold, wedge-shaped EV sportscar concept, showcasing a futuristic vision for the troubled automaker. (Published on 9/17/2024, Ars Technica). Read More

Stay informed and secure in the tech and cybersecurity world. Have a great weekend, and remember to patch and protect your systems!