This month Scott and Paul discuss the inevitability of attacks against certain sectors, UEFI vulnerabilities galore and so much more! Get the full report here: https://eclypsium.com/2022/10/03/september-firmware-threat-report/ This segment is sponsored by Eclypsium. Visit https://securityweekly.com/eclypsium to learn more about them!
Security pros say the move by the Center for Internet Security amplifies patches released by Google, an indication that companies should install the patches because the vulnerabilities could cause privilege escalation.
Windows devices are being targeted by a novel hacking campaign leveraging two exploits in Chinese remote control software Sunlogin to facilitate Sliver post-exploitation toolkit deployment and Bring Your Own Vulnerable Driver attacks, BleepingComputer reports.
Several financial institutions in Brazil have been targeted by the novel Android banking trojan PixPirate that exploits the PIX payments platform for fraudulent activities, according to The Hacker News.
More organizations have been expressing alarm regarding multi-stage security attacks, with 78% of technologists in IT firms across 13 countries, including the U.S., reporting their businesses' vulnerability to such attacks over the next year, according to ZDNET.
WithSecure details the tactics of an ongoing campaign against unpatched devices in medical research and energy sectors, deployed by Lazarus, a notorious group with ties to North Korea.
CNN reports that Nantucket Public Schools in Massachusetts had its safety and security systems, as well as student and staff devices, shut down following a ransomware attack, which also prompted the early dismissal of 1,700 students.
Fast Five
Selected by the SC Media Editorial team every Tuesday.
Sign up now for the top five issues cybersecurity pros need to know this week.
