More organizations have been expressing alarm regarding multi-stage security attacks, with 78% of technologists in IT firms across 13 countries, including the U.S., reporting their businesses' vulnerability to such attacks over the next year, according to ZDNET.
WithSecure details the tactics of an ongoing campaign against unpatched devices in medical research and energy sectors, deployed by Lazarus, a notorious group with ties to North Korea.
CNN reports that Nantucket Public Schools in Massachusetts had its safety and security systems, as well as student and staff devices, shut down following a ransomware attack, which also prompted the early dismissal of 1,700 students.
BleepingComputer reports that 29,968 QNAP network-attached storage devices could be compromised with potential attacks leveraging a critical SQL injection flaw, tracked as CVE-2022-27596, which has been patched by QNAP on Monday.
While not a stark enterprise threat, security experts warn that if an unenrolled Chromebook at a school district or a retailer does not get detected, a hacker could potentially install malware on the network.
Attempts to exploit the Realtek Jungle SDK vulnerability, CVE-2021-35394, was observed by Palo Alto’s Unit 42 researchers an eye-popping 134 million times as of December 2022 and is still ongoing.
Fast Five
Selected by the SC Media Editorial team every Tuesday.
Sign up now for the top five issues cybersecurity pros need to know this week.
