Latest Cybersecurity News and Articles

---

Security’s Top 5 – July 2023

In this edition of Security’s Top 5, we showcase the top stories and new developments from across the security industry throughout July.

---

PSNI bosses’ blase attitude to data leak that has put my family at risk | Letter

A serving member of Police Service Northern Ireland on the sacrifices that have been made and the lack of support from the topI’m a serving officer with the Police Service of Northern Ireland, from a nationalist background in West Belfast. I couldn’t join the RUC because it would have been too dangerous because of who I was and where I was from. Nevertheless, I took the plunge and eventually joined the PSNI. My immediate family had to be schooled with an elaborate backstory. Wider family were not told – I made my siblings lie to their children for years because I couldn’t trust who they would tell.For 18 years I’ve relied on my family to help me protect my identity. I’ve denied myself a social life, and gave up sports I loved. I can’t stay in touch with old friends on social media as I need to avoid the footprint. Now this is all taken away at the click of a button (Northern Ireland police officers’ details exposed in ‘monumental’ breach, 8 August). I am worried terrorists will target my parents because it’ll be easier than getting at me. Continue reading...

---

Multiple Flaws in CyberPower and Dataprobe Products Put Data Centers at Risk

Multiple security vulnerabilities impacting CyberPower's PowerPanel Enterprise Data Center Infrastructure Management (DCIM) platform and Dataprobe's iBoot Power Distribution Unit (PDU) could be potentially exploited to gain unauthenticated access to these systems and inflict catastrophic damage in target environments. The nine vulnerabilities, from CVE-2023-3259 through CVE-2023-3267, carry

---

PSNI data breach: 200 officers and staff not informed about theft for month

Police-issued laptop, radio and documents stolen from car in Northern Ireland on 6 July About 200 police officers and staff were not informed about the theft of devices and documents with data potentially affecting them for almost a month, the Police Service of Northern Ireland (PSNI) has confirmed.A police-issued laptop, radio and documents were stolen on 6 July from the car which is understood to belong to a superintendent. Continue reading...

---

AI could have bigger impact on UK than Industrial Revolution, says Dowden

Deputy PM says technology may aid faster government decisions – but warns of massive hacking risksArtificial intelligence could have a more significant impact on Britain than the Industrial Revolution, the deputy prime minister has said, but warned it could be used by hackers to access sensitive information from the government.Oliver Dowden said AI could speed up productivity and perform boring aspects of jobs. Continue reading...

---

Zoom ZTP & AudioCodes Phones Flaws Uncovered, Exposing Users to Eavesdropping

Multiple security vulnerabilities have been disclosed in AudioCodes desk phones and Zoom's Zero Touch Provisioning (ZTP) that could be potentially exploited by a malicious attacker to conduct remote attacks. "An external attacker who leverages the vulnerabilities discovered in AudioCodes Ltd.'s desk phones and Zoom's Zero Touch Provisioning feature can gain full remote control of the devices,"

---

Multiple Flaws Found in the Avada WordPress Theme and Plugin

These security flaws in the widely used Avada theme and the Avada Builder plugin, uncovered by Patchstack’s security researcher Rafie Muhammad, expose a significant number of WordPress websites to potential breaches.

---

MacOS Systems Turned Into Proxy Exit Nodes by Adload

AdLoad malware is still infecting Mac systems and has been observed turning infected systems into a giant proxy botnet. AT&T Alien Labs has identified over 10,000 IPs behaving as proxy exit nodes, indicating a potentially widespread infection.

---

Honor Among Cybercriminals? Why a Canadian Firm Paid Ransom

A nonprofit firm that administers government dental programs in Canada is notifying nearly 1.5 million individuals that their data, including banking information for some, was compromised in a ransomware incident last month.

---

Lolek Bulletproof Hosting Servers Seized, 5 Key Operators Arrested

European and U.S. law enforcement agencies have announced the dismantling of a bulletproof hosting service provider called Lolek Hosted, which cybercriminals have used to launch cyber-attacks across the globe. "Five of its administrators were arrested, and all of its servers seized, rendering LolekHosted.net no longer available," Europol said in a statement. "The service facilitated the

---

JanelaRAT: Repurposed BX Rat Variant Targeting LATAM FinTech

Zscaler ThreatLabz has discovered a threat actor targeting FinTech users in the LATAM region with a malware called JanelaRAT. This malware uses tactics such as DLL side-loading and dynamic C2 infrastructure.

---

New SystemBC Malware Variant Targets Southern African Power Company

An unknown threat actor has been linked to a cyber attack on a power generation company in South Africa with a new variant of the SystemBC malware called DroxiDat as a precursor to a suspected ransomware attack.

---

New Python URL Parsing Flaw Enables Command Injection Attacks

A high-severity security flaw has been disclosed in the Python URL parsing function that could be exploited to bypass domain or protocol filtering methods implemented with a blocklist, ultimately resulting in arbitrary file reads and command execution. "urlparse has a parsing problem when the entire URL starts with blank characters," the CERT Coordination Center (CERT/CC) said in a Friday

---

UK: Cumbria Police Admit Huge Breach of Data of Officers and Staff

Cumbria police have admitted accidentally publishing the names and salaries of every one of its more than 2,000 employees and have apologized. The data breach happened in March and has not previously been publicized.

---

Magento Shopping Cart Attack Targets Critical Vulnerability

Security researchers at Akamai say they have identified a server-side template injection campaign aimed at Magneto 2 shops that have yet to address CVE-2022-24086, an input validation flaw with a CVSS score of 9.8.

---

Data leaks have given Irish republican groups ‘upper hand’ against police, analysts warn

Breaches hurt police morale and may help republican paramilitaries intimidate officers and their familiesPolice data breaches in Northern Ireland have given republican paramilitaries a powerful tool to intimidate, demoralise and target officers and their families for years to come, according to security experts.The New IRA and other groups have gained the “upper hand” and will be able to use the unprecedented leaks of officers’ personal information to carry out psychological and possibly physical attacks, the analysts warned. Continue reading...

---

16 New CODESYS SDK Flaws Expose OT Environments to Remote Attacks

The remote code execution bugs, in particular, could be abused to backdoor OT devices and interfere with the functioning of programmable logic controllers (PLCs) in a manner that could pave the way for information theft.

---

Gafgyt Malware Exploits Five-Years-Old Flaw in EoL Zyxel Router

Fortinet has issued an alert warning that the Gafgyt botnet malware is actively trying to exploit a vulnerability in the end-of-life Zyxel P660HN-T1A router in thousands of daily attacks.

---

Charming Kitten Hackers Target Iranian Dissidents in Germany

The Federal Office for the Protection of the Constitution (BfV) reported it had found concrete attempts by the group known as Charming Kitten to target the Iranian opposition and exiles based in Germany.

---

Ukrainian Official Touts Country’s Wartime Cyber Intelligence Efforts

Intelligence gathered in cyberspace is helping Ukraine understand Russia's plans and stop the enemy from carrying them out, according to the country’s top cyber and information security official.