Threat Intelligence Cybersecurity Hacking News August 05, 2021


In recent vulnerabilities, millions of OT devices are at high risk of supply chain attack as a set of 14 new vulnerabilities unearthed in the widely used NicheStack TCP/IP stack. Target against most major telecommunications companies in Southeast Asia, the campaigns were launched by three distinct Chinese threat actor groups - SoftCell, Naikon, and Emissary Panda.


Top Breaches Reported in the Last 48 Hours


Misconfigured Elasticsearch database


Comparitech researchers published a report that revealed details of Elasticsearch's unsecured marketing database that leaked private details of about 35 million residents across Chicago, San Diego, and Los Angeles.



School District No. 73 hacked


KAMLOOPS — School District No. 73 (SD73, Kamloops-Thompson) insurance provider for international students suffers cybersecurity breach. The exposed sophisticated data included the identity and contact information of students.


Ransomware attack

In a recent attack, Lazio region in Italy has published are report of a ransomware attack that has disabled the regions' IT system including the COVID-19 vaccination registration portal.


Top Malware Reported in the Last 48 Hours


APT31 deploys new RAT


A new series of attacks linked with Chinese hacking group APT131 has been found using a new RAT to target Mongolia, Belarus, Canada, the United States.


Top Vulnerabilities Reported in the Last 48 Hours


INFRA:HALT vulnerability


Cybersecurity researchers on Wednesday disclosed 14 vulnerabilities affecting a commonly-used TCP/IP stack used in millions of Operational Technology (OT) devices manufactured by no fewer than 200 vendors and deployed in manufacturing plants, power generation, water treatment, and critical infrastructure sectors. These flaws can enable hackers to achieve remote code execution DOS, information leak, TCP spoofing, and DNS cache poisoning.


Google high-risk Patches


Google this week pushed a major security-themed Android update with fixes for more than 30 security flaws that expose mobile users to a range of malicious hacker attacks. The critical security vulnerability in the Media Framework component could enable a local malicious application to bypass operating system protections that isolate application data from other apps.


Chromium critical bugs


Security researchers found a dangerous bug in chromium that allowed malicious parties to inject malicious code into embedded site pages. This can further enable attackers to steal sophisticated information from the victim's device.


New Cobalt Strike bugs

Security researchers have disclosed Cobalt Strike denial of service (DOS) vulnerabilities that could allow blocking beacon command and control c2 communication channels and new deployments. DoS vulnerabilities collectively tracked as Hotcobalt (CVE-2021-36798) were patched in the Cobalt Strike beacon with the release of version 4.4.



161 views0 comments

Recent Posts

See All