06 OCTOBER 2023 WEEKLY NEWSLETTER

BOCRA website

     

NEWSLETTER

 

Apple Warns of Newly Exploited iOS 17 Kernel Zero-Day


                                                     LATEST CYBER HACKS 

 
 
icon

Lyca Mobile Suffers Cyber Attack, Investigating Ransomware Possibility

Lyca Mobile, a mobile virtual network operator (MVNO) that provides services in over 23 countries with over 16 million customers, has confirmed that it has been the victim of a cyber attack. The attack affected all Lyca Mobile markets over the weekend except for the United States, Australia, Ukraine, and Tunisia.

icon

Cyberattacks in Arizona, Missouri limit access to community services

In Arizona, a cyberattack brought down the systems of Mt. Graham Regional Medical Center (MGRMC). The 25-bed hospital in Safford, Arizona, is the primary source of healthcare for both Graham and Greenlee Counties, which have a combined population of about 50,000.

icon

Microsoft Warns of Cyber Attacks Attempting to Breach Cloud via SQL Server Instance

Microsoft has detailed a new campaign in which attackers unsuccessfully attempted to move laterally to a cloud environment through an SQL Server instance.


                                                      VULNERABILITIES

 
 
icon

Cisco Releases Urgent Patch to Fix Critical Flaw in Emergency Responder Systems

Cisco has released updates to address a critical security flaw impacting Emergency Responder that allows unauthenticated, remote attackers to sign into susceptible systems using hard-coded credentials.

icon

Apple Rolls Out Security Patches for Actively Exploited iOS Zero-Day Flaw

Apple on Wednesday rolled out security patches to address a new zero-day flaw in iOS and iPadOS that it said has come under active exploitation in the wild.


                                     MALWARES

 
 
icon

Analysis and Config Extraction of Lu0Bot, a Node.js Malware with Considerable Capabilities

Nowadays, more malware developers are using unconventional programming languages to bypass advanced detection systems. The Node.js malware Lu0Bot is a testament to this trend.

icon

GoldDigger Android Trojan Drains Victim Bank Accounts

Security researchers have discovered a prolific new Android Trojan designed to covertly harvest user information including banking app credentials, with a view to hijacking and draining their accounts.

icon

The evolutionary tale of a persistent Python threat

In the vast landscape of the open-source ecosystem, shadows occasionally move. While this realm thrives on collaboration and knowledge sharing, it's also a playground for predators, from novice hackers to well-coordinated nation-state actors. Over recent months, one such threat has been emerging, growing, and refining its arsenal


                               GENERAL NEWS

 
 
icon

Tripwire Patch Priority Index for September 2023

Tripwire's September 2023 Patch Priority Index (PPI) brings together important vulnerabilities for Microsoft. First on the patch priority are patches for Microsoft Edge (Chromium-based) that resolve 5 vulnerabilities such as out of bounds memory access, type confusion, and use after free.

icon

Combating AI-Generated Fake Images with JavaScript Libraries, by Kate Sills at QCon San Francisco

At the recent QCon San Francisco conference Kate Sills gave a talk about combating AI-generated fake images using existing JavaScript libraries. She advocated for using cryptographic timestamping to ensure the time photos were taken, and using digital signatures to verify that the image was made by a legitimate source.