CyberSecurity Weekly Hacker News April 01 - 08, 2023 #hacker #cybersecurity #ddos #ransomware
00:00 Intro
00:17 3CX Supply chain attack allowed targeting cryptocurrency firms
02:11 Analyzing attacks conducted by North Korea-linked ARCHIPELAGO APT
03:51 Apple addressed two actively exploited zero-day flaws
05:21 CISA adds bugs exploited by commercial surveillance spyware to Known Exploited Vulnerabilities catalog
05:54 CISA adds Zimbra bug exploited in attacks against NATO countries to its Known Exploited Vulnerabilities catalog
07:23 CISA JCDC Will Focus on Energy Sector
08:03 Clipper attacks use Trojanized TOR Browser installers
10:15 Cyber Police of Ukraine arrested members of a gang that defrauded EU citizens of $4 33M
11:27 Google TAG shares details about exploit chains used to install commercial spyware
12:57 Hackers are actively exploiting a flaw in Elementor Pro WordPress plugin
14:55 HP would take up to 90 days to fix a critical bug in some business-grade printers
16:03 Italy's Data Protection Authority temporarily blocks ChatGPT over privacy concerns
18:53 Law enforcement seized the Genesis Market marketplace
19:20 Leaked documents from Russian firm NTC Vulkan show Sandworm cyberwarfare arsenal
21:17 LockBit leaks data stolen from South Korean National Tax Service
23:11 Microsoft aims at stopping cybercriminals from using cracked copies of Cobalt Strike
24:17 Microsoft fixed Azure AD bug that led to Bing com results manipulation and account takeover
26:02 Money Message ransomware group claims to have hacked MSI
27:41 Moobot botnet spreads by targeting Cacti and RealTek flaws
28:50 New AlienFox toolkit harvests credentials for tens of cloud services
29:30 Nexx bugs allow to open garage doors, and take control of alarms and plugs
30:31 OpenAI quickly fixed account takeover bugs in ChatGPT
31:23 Phishers migrate to Telegram
32:25 QNAP fixed Sudo privilege escalation bug in NAS devices
33:37 Rorschach ransomware has the fastest file-encrypting routine to date
35:27 STYX Marketplace emerged in Dark Web focused on Financial Fraud
36:42 Super FabriXss flaw in Microsoft Azure SFX could lead to RCE
37:33 Tax preparation and e-file service eFile com compromised to serve malware
39:09 UK outsourcing services provider Capita suffered a cyber incident
39:40 Western Digital took its services offline due to a security breach
40:54 Thanks forWatching