Cybersecurity Brief: SQL Fault Found in Airport Software, Iranian APTs assist ransomware crews.
Learn more about how we can help your business prevent attacks like this
Contact Us: https://hubs.ly/Q02JyH5Q0
Pentest ROI Calculator Download: https://hubs.ly/Q02wBB5d0
Cybersecurity Executive Brief: SQL Injection Vulnerability in Airport Security Software, SEC continues to file charges and Iranian APTs assist ransomware crews.
Cybersecurity researchers Ian Carroll and Sam Curry uncovered a critical vulnerability in the Known Crewmember (KCM) system, a TSA program allowing airline pilots and flight attendants to bypass regular security screenings. The flaw, found in FlyCASS, a service used by smaller airlines to manage KCM and Cockpit Access Security System (CASS) authorizations, involved a simple SQL injection that allowed the researchers to gain administrative access. This vulnerability enabled unauthorized individuals to bypass stringent employment verification and access restricted airport areas and cockpits. Although the Department of Homeland Security addressed the issue after being notified, the TSA's initial downplaying of the severity raised concerns about transparency.
More reading: https://informationsecuritybuzz.com/s...
The Securities and Exchange Commission (SEC) announced that New York-based transfer agent Equiniti Trust Company LLC, formerly known as American Stock Transfer & Trust Company LLC, has settled charges for failing to protect client securities and funds, resulting in over $6.6 million in losses from two cyber intrusions in 2022 and 2023. One incident involved a fraudulent email scam that led to the unauthorized liquidation of shares worth $4.78 million, while another saw stolen Social Security numbers used to create fake accounts linked to legitimate ones, leading to $1.9 million in stolen funds. Equiniti has since reimbursed clients for their losses and agreed to a cease-and-desist order, censure, and an $850,000 civil penalty.
More reading: https://informationsecuritybuzz.com/s...
CISA Advisory - Iran-based Cyber Actors Enabling Ransomware Attacks on US Organizations: https://www.cisa.gov/news-events/cybe...