<img src="https://secure.ruth8badb.com/159098.png" alt="" style="display:none;">

IT Security Newsletter - 10/10/2024

SHARE

Top News

The Internet Archive is under attack, with a breach revealing info for 31 million accounts

When visiting The Internet Archive (www.archive.org) on Wednesday afternoon, The Verge was greeted with a pop-up claiming the site had been hacked. Just after 9PM ET, Internet Archive founder Brewster Kahle confirmed the breach and said the website had been defaced with the notification via a JavaScript library. Here's what the pop-up said: "Have you ever felt like the Internet Archive runs on sticks and is constantly on the verge of suffering a catastrophic security breach?" READ MORE...

Breaches

National Public Data files for bankruptcy, admits 'hundreds of millions' potentially affected

The Florida business behind data brokerage National Public Data has filed for bankruptcy, admitting "hundreds of millions" of people were potentially affected in one of the largest information leaks of the year. In June, the hacking group USDoD put a 277.1 GB file of data online that contained information on about 2.9 billion individuals, and asked $3.5 million for it. The data came from National Public Data, which offered background checks to corporate clients via its API. READ MORE...


Ransomware attack leaks social security numbers of over 230,000 Comcast customers

Over 237,000 Comcast customers have had their sensitive personal information compromising following a ransomware attack against a third party company. Financial Business and Consumer Solutions (FBCS), a debt collection agency previously used by Comcast, was the subject of a ransomware attack in February 2024, which had a database of names, addresses, social security numbers, dates of birth, and Comcast account details exposed. READ MORE...

Hacking

Lamborghini Carjackers Lured by $243M Cyberheist

The parents of a 19-year-old Connecticut honors student accused of taking part in a $243 million cryptocurrency heist in August were carjacked a week later. Prosecutors say the couple was beaten and briefly kidnapped as part of a botched plan to hold the parents for ransom. Approximately one week earlier a group of cybercriminals executed a sophisticated phone-based social engineering attack in which they stole $243 million worth of cryptocurrency from a victim in Washington, D.C. READ MORE...

Software Updates

Mozilla patches critical Firefox vuln that attackers are already exploiting

It's patch time for Firefox fans as Mozilla issues a security advisory for a critical code execution vulnerability in the browser. Mozilla said CVE-2024-9680 is a use-after-free issue in Animation timelines - the pane within the Firefox browser's Page Inspector that depicts how a given element's animation progresses. The most alarming aspect of the advisory, however, was Mozilla revealing that the vulnerability is being exploited in the wild already. READ MORE...

Malware

Hackers Hide Remcos RAT in GitHub Repository Comments

Trusted and widely used software development and collaboration platforms like GitHub and GitLab have become both targets of and vehicles for a growing range of malicious activity. The latest manifestations of that trend include a malware distribution campaign involving legitimate GitHub repositories and the availability this week of an exploit for a vulnerability that allows an attacker to gain access as any user of GitLab. READ MORE...

Exploits/Vulnerabilities

CISA says critical Fortinet RCE flaw now exploited in attacks

Today, CISA revealed that attackers actively exploit a critical FortiOS remote code execution (RCE) vulnerability in the wild. The flaw (CVE-2024-23113) is caused by the fgfmd daemon accepting an externally controlled format string as an argument, which can let unauthenticated threat actors execute commands or arbitrary code on unpatched devices in low-complexity attacks that don't require user interaction. READ MORE...

On This Date

  • ...in 1902, The Gibson Mandolin guitar company is formed. 50 years later, they would produce the Gibson Les Paul electric guitar.
  • ...in 1917, jazz great Thelonious Monk ("Straight, No Chaser") is born in Rocky Mount, NC.
  • ...in 1924, filmmaker Edward D. Wood, Jr., director of the infamous 1956 cult classic "Plan 9 From Outer Space" is born in Poughkeepsie, NY.
  • ...in 1967, the Outer Space Treaty, prohibiting the militarization and nuclearization of space and all celestial bodies, comes into force after being signed by over 60 nations.
  • ...in 1970, Black Sabbath reaches No.1 on the UK charts with their second album, 'Paranoid.'