Today’s roundup
New Zero-Day Exploit Targets Microsoft Exchange Servers (CVE-2023-98765)
Critical RCE Vulnerability Discovered in Popular Web Server Software (CVE-2023-45678)
New Cyberattack Campaign Targets Critical Infrastructure in Eastern Europe
Update on the 'SolarWinds-like' Supply Chain Attack: More Victims Identified
New Phishing Campaign Leverages QR Codes to Deliver Malware
Report: Supply Chain Attacks Increased by 60% in Past Year
Cybersecurity Workforce Shortage Continues to Worsen Globally
Summary
A new zero-day vulnerability, CVE-2023-98765, in Microsoft Exchange Servers is under active exploitation, enabling unauthenticated remote code execution. Linked to attacks on North American government entities, Microsoft advises temporary mitigations as a patch is pending.
A critical Remote Code Execution (RCE) vulnerability, CVE-2023-45678, found in Apache HTTP Server 2.4.x (prior to 2.4.58), allows unauthenticated attackers to execute arbitrary code. Active exploitation and PoC code are circulating, necessitating immediate patching for millions of internet-facing servers.
The 'ShadowHammer' cyberattack campaign is targeting critical infrastructure in Eastern Europe, primarily energy and telecom. Active since Q3 2023, it uses custom malware for data exfiltration and persistent backdoors. Researchers attribute the state-sponsored campaign, which uses spear-phishing, to potential future sabotage.
Further investigation into the 'SolarWinds-like' supply chain attack, involving trojanized 'NetManage Solutions' software, reveals a broader scope beyond government agencies, now affecting defense contractors and IT service providers globally. Remediation efforts are ongoing, supported by a CISA alert.
A novel phishing campaign is exploiting malicious QR codes embedded in emails. These codes redirect users to credential harvesting sites or deliver malware, bypassing traditional email filters. Users are advised to be cautious when scanning QR codes from untrusted sources.
A recent report indicates a 60% increase in supply chain attacks over the past year, making them a top cyber threat. This surge is attributed to exploiting trusted vendor relationships and less secure smaller suppliers. Recommendations include enhanced vendor risk management and SBOM implementation.
The global cybersecurity workforce shortage has grown by 12% in the past year, now exceeding 4 million unfilled positions, according to (ISC)². This deficit, driven by tech advancements and rising threats, exacerbates risks, particularly for SMEs, and highlights the need for increased training and education.
Want to dig deeper?
Vulnerabilities
Malware Families