Sign up for Scout Insight's free trial today! Get immediate insights into threats, search any IP with no training required, and enjoy intuitive graphical results. Whether you need to identify compromised hosts or enrich Splunk queries, Scout Insight has you covered. Don’t wait – accelerate your threat response now. Visit team-cymru.com/cyberwire to start your free trial!
This groundbreaking report leverages skills data from the professional members of Women in CyberSecurity (WiCyS), and establishes a new benchmark for understanding the capabilities and potential of women in cybersecurity. For more information on the Cyber Talent Study and to access the full report, please visit www.n2k.com/wicys.
A China-aligned cyberespionage actor dubbed "Velvet Ant" exploited a zero-day vulnerability (CVE-2024-20399) affecting a wide range of Cisco Nexus devices, according to researchers at Sygnia. The flaw is a command injection vulnerability in the Cisco NX-OS Software CLI that can "allow an authenticated, local attacker to execute arbitrary commands as root on the underlying operating system of an affected device." Cisco has issued patches for the flaw.
Sygnia says Velvet Ant's "exploitation led to the execution of a previously unknown custom malware that allowed the threat group to remotely connect to compromised Cisco Nexus devices, upload additional files, and execute code on the devices."
Last year alone, SpyCloud researchers and data scientists recaptured and analyzed more than 43.7 billion distinct identity records. Use our free tool to see your organization’s darknet footprint, including breach exposures and malware-exfiltrated data that puts your business at risk of account takeover and ransomware. Simply enter your business email to reveal PII, credentials, breach exposures, stolen session cookies, and more. Check your exposure now to see what criminals know about your business.
Researchers at EVA Information Security discovered a set of vulnerabilities affecting the open-source dependency manager CocoaPods that could allow a threat actor "to claim ownership over thousands of unclaimed pods and insert malicious code into many of the most popular iOS and MacOS applications." The vulnerabilities have since been patched.
EVA explains, "A 2014 migration process left thousands of orphaned packages (where the original owner is unknown), many of which are still widely used in other libraries. Using a public API and an email address that was available in the CocoaPods source code, an attacker could claim ownership over any of these packages, which would then allow the attacker to replace the original source code with their own malicious code." Additionally, "An insecure email verification workflow could be exploited to run arbitrary code on the CocoaPods ‘Trunk’ server (manages the distribution and metadata of Podspecs), which would allow an attacker to manipulate or replace the packages being downloaded." Finally, "A separate vulnerability would allow an attacker to infiltrate the CocoaPods ‘Trunk’ server and perform a near-unlimited range of exploits."
Modernize your identity infrastructure and get rid of technical debt without sacrificing your complex access policies. Use Strata to integrate non-standard apps with any identity service while using any vendor, standard, or app architecture. Or use it to migrate away from outdated identity providers and consolidate IDPs. It’s seamless, simple and code-free. Share your top identity security priorities, and receive a pair of complimentary AirPods Pro.
Car sales management software provider CDK Global expects all car dealerships to be back online by Thursday, July 4th, following a ransomware attack the company sustained on June 18th, BleepingComputer reports. A CDK spokesperson told BleepingComputer, "We are continuing our phased approach to the restoration process and are rapidly bringing dealers live on the Dealer Management System (DMS). We anticipate all dealers connections will be live by late Wednesday, July 3 or early morning Thursday, July 4."
BleepingComputer cites sources as saying the BlackSuit ransomware gang was responsible for the attack.
Subscribe to N2K's monthly News2Knowledge Letter to stay on top of the latest training product releases and exam retirements, get certification and career development resources to support your learning journey, and keep up with the latest industry news and research on workforce development. You’ll also be the first to get our exclusive product promotions and discounts.
Today's issue includes events affecting , and Poland the United States.
Affirm tells SEC customer data stolen in Evolve breach (The Register) Number of partners acknowledging data theft continues to rise
HubSpot accounts breach under investigation (SC Media) Major U.S.-based customer relationship management and marketing automation software provider HubSpot has begun an investigation into a cyberattack after determining unauthorized access attempts against a "limited number" of its customers' accounts, according to TechCrunch.
3 million iOS and macOS apps were exposed to potent supply-chain attacks (Ars Technica) Apps that used code libraries hosted on CocoaPods were vulnerable for about 10 years.
Health Tech Execs Sentenced in $1bn Fraud Case (Infosecurity Magazine) The former CEO and COO of a health startup will spend years in jail after conducting a large-scale fraud scheme
Polish Parliament strips official of immunity, clearing path for prosecution in spyware scandal (The Record) The Polish parliament on Friday voted to lift an opposition leader’s legal immunity in order to prosecute him for the part he allegedly played in buying powerful commercial spyware when he was a leader in the former ruling majority.
For a complete running list of events, please visit the Event Tracker.
SANSFIRE Washington, DC 2024 (Washington (or virtual), DC, USA, Jul 15 - 20, 2024) At SANSFIRE Washington, DC 2024, choose from 48 interactive courses with hands-on labs. Practice your skills and compete against your peers during NetWars Tournaments, and network with your instructor and industry colleagues in real-time. Each course includes electronic and printed books, and several courses align with GIAC certifications!
