07.01.2022
NEWS AND UPDATES
A New Year Will Bring New Targets: What to Look for in 2022
While the sky just may be the limit (or actually, it may not be), when it comes to cybercriminals, three key areas where we expect to see more activity in the coming year are space, digital wallets and esports.
A New Year Will Bring New Targets: What to Look for in 2022 | SecurityWeek.Com
7 Predictions for Global Energy Cybersecurity in 2022
We now live in a world where cyberattacks can shut down critical infrastructure. Those who follow the mega-trends driving the global economy — like the convergence of the digital revolution and the energy transition — understand that with more and more critical infrastructure remotely operated or digitally managed, it was only a matter of time before a cyberattack caused disruptions that crossed over into the physical world.
INCIDENTS:
New Attack Campaign Exploits Microsoft Signature Verification
Security researchers are observing a new campaign in which attackers abuse the Microsoft e-signature verification to deploy Zloader, a banking malware designed to steal user credentials and private information.
Attackers Hitting VMWare Horizon Servers With Log4j Exploits
Threat hunters in the U.K.’s National Health Service have raised an alarm for an unknown threat actor hitting vulnerable VMWare Horizon servers with exploits for the ubiquitous Log4j security flaw.The warning comes almost exactly one month after the first disclosure of a Log4j remote code execution vulnerability that threatens major damage on the internet and heightens the urgency for enterprise defenders to find and fix the issue.
https://www.securityweek.com/attackers-hitting-vmware-horizon-servers-log4j-exploits
Over 3.7 million accounts were compromised in the FlexBooker data breach
The appointment scheduling service FlexBooker discloses a data breach that impacted over 3.7 million accounts. Threat actors compromised the FlexBooker accounts of more than 3.7 million users, the attack took place before the holidays.
https://securityaffairs.co/wordpress/category/data-breach
MALWARE:
How to Proactively Limit Damage From BlackMatter Ransomware
Logic flaw exists in malware that can be used to prevent it from encrypting remote shares, security vendor says.
The BlackMatter ransomware strain that’s been used in numerous attacks against US critical infrastructure entities and other large organizations in recent months has a serious logic flaw in its code that limits the malware’s effectiveness in some situations.
The Week in Ransomware – January 7th 2022 – Watch out for USB drives
With the holidays these past two weeks, there have been only a few known ransomware attacks and little research released.At the end of December, a new enterprise-targeting ransomware operation called Night Sky was launched, but it is not very active so far.
FBI: Hackers use BadUSB to target defense firms with ransomware
The Federal Bureau of Investigation (FBI) warned US companies in a recently updated flash alert that the financially motivated FIN7 cybercriminal group targeted the US defense industry with packages containing malicious USB devices to deploy ransomware.
VULNERABILITIES:
Log4Shell-Like Vulnerability Found in Popular H2 Database:
The critical vulnerability in the open source Java SQL database can be exploited for remote code execution without authentication.
Log4Shell-Like Vulnerability Found in Popular H2 Database | SecurityWeek.Com
VMware Plugs Security Holes in Workstation, Fusion and ESXi
A critical, unauthenticated remote code execution vulnerability has been impacting the H2 database console since 2008.
An open-source Java SQL database, H2 is an in-memory solution that eliminates the need to store data on disk, and is one of the most popular Maven packages, having roughly 7,000 artifact dependencies
https://www.securityweek.com/vmware-plugs-security-holes-workstation-fusion-and-esxi
CDN Cache Poisoning Allows DoS Attacks Against Cloud Apps
A Romanian researcher discovers more than 70 vulnerabilities in how applications and their content delivery networks handle cache misses that open the doors to denial-of-service attacks.
A Romanian vulnerability researcher has discovered more than 70 flaws in combinations of cloud applications and content delivery networks (CDNs) that could be used to poison the CDN caches and result in denial-of-service (DoS) attacks on the applications.
https://www.darkreading.com/cloud/cache-poisoning-of-cdns-allows-dos-attacks-against-cloud-apps
Cyber4Dev collates data from Open Source websites, any opinions or attributions expressed in the articles are not those of Cyber4Dev and are not endorsed by the project or the EU.
