News
S.Africa’s Port Terminals Restored Following Cyber-Attack
Operating systems have been restored at South Africa’s state-owned logistics firm, the company said Thursday following a cyber-attack last week that hit the country’s key port terminals. The attack began on July 22 and lasted for days, forcing Transnet to switch to manual systems.
https://www.securityweek.com/safricas-port-terminals-restored-following-cyber-attack
Estonia arrests hacker who stole 286K ID scans from govt database
A Tallinn man was arrested a week ago in Estonia under suspicion that he has exploited a government photo transfer service vulnerability to download ID scans of 286,438 Estonians from the Identity Documents Database (KMAIS).
https://www.bleepingcomputer.com/news/security/estonia-arrests-hacker-who-stole-286k-id-scans-from-govt-database/
Israeli Government Agencies Visit NSO Group Offices
Authorities from multiple agencies of the Israeli government paid a visit the offices of the NSO Group as part of a new investigation into claims that the secretive firm is selling its spyware to threat actors for targeted attacks, according to the Israeli Ministry of Defense.
https://threatpost.com/government-nso-offices/168241/
US Government Unlikely to Ban Ransomware Payments
The US government is unlikely to make it illegal for organizations to pay ransoms to regain access to data following a ransomware incident or to keep cybercriminals from releasing sensitive data following a breach.
https://www.darkreading.com/risk/us-government-unlikely-to-ban-ransomware-payments
Incidents
Northern Ireland suspends vaccine passport system after data leak
Northern Ireland’s Department of Health (DoH) has temporarily halted its COVID-19 vaccine certification online service following a data exposure incident. Some users of the COVIDCert NI service were presented with data of other users, under certain circumstances, says the Department. As seen by BleepingComputer, neither the web service nor the mobile app functionality is accessible at the time of writing.
https://www.bleepingcomputer.com/news/security/northern-ireland-suspends-vaccine-passport-system-after-data-leak/
https://www.health-ni.gov.uk/news/covid-certification-service-temporarily-interrupted
Chinese Hackers Implant PlugX Variant on Compromised MS Exchange Servers
A Chinese cyberespionage group known for targeting Southeast Asia leveraged flaws in the Microsoft Exchange Server that came to light earlier this March to deploy a previously undocumented variant of a remote access trojan (RAT) on compromised systems.
https://thehackernews.com/2021/07/chinese-hackers-implant-plugx-variant.html
Hackers Posed as Aerobics Instructors for Years to Target Aerospace Employees
An Iranian cyberespionage group masqueraded as an aerobics instructor on Facebook in an attempt to infect the machine of an employee of an aerospace defense contractor with malware as part of a years-long social engineering and targeted malware campaign.https://thehackernews.com/2021/07/hackers-posed-as-aerobics-instructors.html
Malware
A New Wiper Malware Was Behind Recent Cyberattack On Iranian Train System
A cyber attack that derailed websites of Iran’s transport ministry and its national railway system earlier this month, causing widespread disruptions in train services, was the result of a never-before-seen reusable wiper malware called “Meteor.”
https://thehackernews.com/2021/07/a-new-wiper-malware-was-behind-recent.html
Ransomware: These are the two most common ways hackers get inside your network
Two attack methods are the most popular – and most successful – techniques ransomware gangs are using to lay the foundations for their cyber-extortion campaigns. Email phishing attacks and brute force attacks against exposed remote desktop protocol (RDP) services are the most common methods cyber criminals are using to gain an initial foothold in corporate networks to lay the foundations for ransomware attacks.https://www.zdnet.com/article/ransomware-these-are-the-two-most-common-ways-hackers-get-inside-your-network/
Vulnerabilities
Top 30 Critical Security Vulnerabilities Most Exploited by Hackers
Intelligence agencies in Australia, the U.K., and the U.S. issued a joint advisory on Wednesday detailing the most exploited vulnerabilities in 2020 and 2021, once again demonstrating how threat actors are able to swiftly weaponize publicly disclosed flaws to their advantage.
https://thehackernews.com/2021/07/top-30-critical-security.html
Apple Patches Actively Exploited Zero-Day in iOS, MacOS
Company urges iPhone, iPad and Mac users to install updates to fix a critical memory corruption flaw that can allow for attackers to take over a system. Apple patched a zero-day flaw on Monday, found in both its iOS and macOS platforms that’s being actively exploited in the wild and can allow attackers to take over an affected system.https://threatpost.com/apple-patches-actively-exploited-zero-day-in-ios-macos/168177/
Cyber4Dev collates data from Open Source websites, any opinions or attributions expressed in the articles are not those of Cyber4Dev and are not endorsed by the project or the EU.
