Supported by 1Password.
Hi folks,
Another week, another digest of security news.
Nothing Earth-shattering, although the "issues" list looks pretty rough, with a lot of recent high-visibility vulnerabilities being actively targeted. Please make sure that your systems are all patched up.
Best of luck out there and have a good one!
Nice write-up on a hacking group known as GoldenJackal which seems to specialise in breaching air-gapped systems, with two succesfull attacks that we know off.
They created malware that, when on a system, will install itself on inserted USB drives in the hopes of being inserted into a airgapped system afterwards. When it does it starts collecting a bunch of sensitive files, store it in a hidden folder, and then send that data home once inserted in the Internet-connected infected system again.
The complete research by ESET can be found here, fun Hackernews discussion here.
Well helloo pet-peeve. Another water utility company breached, although the article doesn't really talk about any impact on the water itself, just the backend systems. Still, ugh.
A scanner has been released by MalwareTech (Marcus Hutchins, from WannaCry fame) to scan your network for CUPS servers that might be vulnerable to the RCE and the 600x DDoS attack.
It's worth noting that it's probably unlikely that CUPS is exposed to the outside world (but you still should check), but even if it's just advertising within your own network it can be used for lateral movement and privilege escalation.
If you're an engineer, it's really worth checking out 1Password's developer tools. It can manage secrets for your infrastructure and CI/CD pipeline, manage SSH keys, and inject tokens into CLI scripts. Play around with it and see how it can fit in your development flow. (Sponsored)