Risk Assessments/Management

BleepingComputer reports that vulnerable Elasticsearch databases have been targeted by threat actors who have demanded a total of $279,000 to restore 450 replaced indexes.

Foxconn Baja California in Mexico was allegedly attacked by the LockBit 2.0 ransomware gang, which has threatened the release of stolen files should the company fail to pay the demanded ransom by June 11, according to SecurityWeek.

Android malware FluBot had its infrastructure taken down following an international law enforcement operation that included authorities from the U.S. and 10 other countries, The Hacker News reports.

Boston Children's Hospital was almost impacted by an attempted cyberattack by Iranian state-sponsored hackers last year, which has been thwarted by the FBI, according to CNN.

The Hacker News reports that nearly 100,000 GitHub users had their NPM usernames and passwords, as well as email addresses compromised after GitHub's integration OAuth tokens were stolen last month.

BleepingComputer reports that Windows Subsystem for Linux has been increasingly leveraged by threat actors as an attack surface for new malware development.

Android devices could be compromised with a persistent backdoor should four high-severity security flaws in pre-installed Android System apps' mobile framework be exploited, according to SecurityWeek.

Mobile trojan detections have significantly increased in the first quarter of 2022 even though mobile malware volumes have dwindled since 2020, suggesting the increasing push toward more advanced threat campaigns, BleepingComputer reports.