Zero-click RCE against Windows IPv6. Github actions with leaked tokens. Data breach with 3 billion records.

Hi folks!

Many greetings from the lovely Belgian coast :-) As I said last week, I'm on vacation right now, so it's a quicker version than usual. Still, plenty of interesting news to catch up on. Enjoy the read!

• Ransomware gangs rake in more than $450 million in first half of 2024: link.
• FBI disrupts the Dispossessor ransomware operation, seizes servers: link.
• White House details $11M plan to help secure open source: link.
• White House working on cyber insurance policy proposal for ‘catastrophic’ incidents: link.
• DARPA competition shows promise of using AI to find and patch bugs: link.
• NIST releases first encryption tools to resist quantum computing: link.
• New AI tool enables real-time face swapping on webcams: link.

• Troy Hunt: Inside the "3 Billion People" National Public Data breach: link.
• 3AM ransomware stole data of 464,000 Kootenai Health patients: link.
• Biotech company hacked in 2023 pays states $4.5 million over breached data: link.
• CSC ServiceWorks discloses data breach after 2023 cyberattack: link.
• Australian gold producer Evolution Mining hit by ransomware: link.
• Hackers posing as Ukraine’s Security Service infect 100 govt PCs: link.
• South Korea says DPRK hackers stole spy plane technical data: link.
• AutoCanada discloses cyberattack impacting internal IT systems: link.
• Carbon black supplier Orion loses $60 million in business email compromise scam: link.
• Suspected 'hostile state' behind hack of Poland’s anti-doping agency and leak of athletes' data: link.
• Local gov’ts in Texas, Florida hit with ransomware: link.

• New AMD SinkClose flaw helps install nearly undetectable malware: link.
• Microsoft discloses unpatched Office flaw that exposes NTLM hashes: link.
• Ivanti warns of critical vTM auth bypass with public exploit: link.
• Microsoft August 2024 Patch Tuesday fixes 9 zero-days, 6 exploited: link.
• Critical SAP flaw allows remote attackers to bypass authentication: link.
• New Windows SmartScreen bypass exploited as zero-day since March: link.
• SolarWinds fixes critical RCE bug affecting all Web Help Desk versions: link.
• Microsoft disables BitLocker security fix, advises manual mitigation: link.