Cyber Security Newsletter

Critical Vulnerabilities

Atlassian CISO announced: Improper authorization vulnerability detected on Confluence Data Center and Server CVE-2023-22518
Veeam warns of critical bugs in Veeam ONE monitoring platform CVE-2023-38547, CVE-2023-38548, CVE-2023-38549, and CVE-2023-41723
Critical RCE vulnerability in Apache ActiveMQ is targeted by HelloKitty ransomware CVE-2023-46604
QNAP fixed two critical vulnerabilities in QTS OS and apps CVE-2023-23368, and CVE-2023-23369
New high-severity vulnerability discovered in the Service Location Protocol (SLP) CVE-2023-29552

Important Cyber security News

Microsoft will roll out MFA-enforcing policies for admin portal access
Apple 'Find My' network can be abused to steal keylogged passwords
Microsoft: SysAid zero-day flaw exploited in Clop ransomware attacks
Russian hackers switch to LOTL technique to cause power outage
Cloudflare dashboard, API service feeling poorly due to datacenter power snafu
OpenAI confirms DDoS attacks behind ongoing ChatGPT outages
WhatsApp now lets users hide their location during calls

Dark Web Insights

Clop group obtained access to the email addresses of about 632,000 US federal
BlackCat strikes again - and this time it's breached a healthcare giant
Dark Peep #4: Ransomware for sale
Ransomware disrupts American Airlines pilot union
Toronto Public Library outages caused by Black Basta ransomware attack

Trending Threat Actors

Attackers use Google Calendar RAT to abuse Calendar service as C2 infrastructure
Multiple WhatsApp mods spotted containing the CanesSpy Spyware
New macOS 'KandyKorn' malware targets cryptocurrency engineers
Kinsing actors exploiting recent Linux flaw to breach cloud environments
Socks5Systemz proxy service delivered via PrivateLoader and Amadey
Israeli entities under attack by MuddyWater’s advanced tactics

Versa Networks, VOS, and Versa Titan are or may be registered trademarks of Versa Networks, Inc. All other marks and names mentioned herein may be trademarks of their respective companies.