Security Newsletter

Issue #215 · 15 September 2023

WiKI-Eve attack. Facebook Messenger phishing wave. 15 breaches. Minimal issue.

Supported by 1Password and GlitchSecure.

News

Hi everyone,

Many thanks to everyone who gave feedback on issue length and curation. The general theme seemed to be that most of you don't mind a lengthy issue, as long as it's easy to skim through. And that it might be a good idea to have a separate section with "quick links that were interesting too". Going to give this some more thought.

Meanwhile, as a testament to our skimming skills, this week has given us 15 entries in the "breaches and leaks" section, goodness.

The rest of this issue is a minimal version I'm afraid. I took a few days off to go to a sort of crisis management training, and loved it. But I'm also exhausted :-) So I'll share interesting articles but without writing the summary myself, instead using the one that the news site itself presents.

Have a good one friends!

Breaches and leaks

  • Sri Lankan government loses months of data following ransomware attack: link.
  • Canadian Nurses Association confirms data theft after group dumps stolen info: link.
  • MGM still responding to wide-ranging cyberattack as rumors run rampant: link.
  • Caesars Entertainment confirms ransom payment, customer data theft: link.
  • Nearly 15,000 accounts raided at automaker sites to harvest vehicle IDs, report says: link.
  • Save the Children International hit with cyberattack, but says operations weren’t impacted: link.
  • Airbus investigates data leak allegedly involving thousands of suppliers: link.
  • Royal Dutch Football Association confirms it paid ransom for hacked employee data: link.
  • Hackers steal $53 million worth of cryptocurrency from CoinEx: link.
  • US-Canada water commission investigating cyberattack: link.
  • Manchester police officers’ data stolen following ransomware attack on supplier: link.
  • Upstate New York nonprofit hospitals still facing issues after LockBit ransomware attack: link.
  • Dymocks Booksellers suffers data breach impacting 836k customers: link.
  • Rollbar discloses data breach after hackers stole access tokens: link.
  • Auckland transport authority hit by suspected ransomware attack: link.

Issues and fixes

  • Microsoft Patch Tuesday fixes 2 zero-days, 59 flaws: link
  • Adobe warns of critical Acrobat and Reader zero-day exploited in attacks: link.
  • Google patches critical vulnerability which is exploited in the wild: link.
  • Mozilla patches Firefox, Thunderbird against zero-day exploited in attacks: link.
  • Apple backports BLASTPASS zero-day fix to older iPhones: link.