Today’s roundup
Palo Alto Networks Patches Critical GlobalProtect Gateway Vulnerability CVE-2024-3400
Fortra GoAnywhere MFT Zero-Day CVE-2024-XXXXX Under Active Exploitation
Microsoft Releases Emergency Patch for Windows Privilege Escalation Flaw CVE-2024-XXXXX
New Akira Ransomware Variant Targeting Linux Systems
U.S. Government Releases Cybersecurity Alert on QakBot Malware
Andromeda Malware Campaign Resurfaces with New Obfuscation Techniques
GhostSec Group Claims Attacks on Healthcare Providers
Summary
Palo Alto Networks released an emergency hotfix for critical RCE flaw CVE-2024-3400 in PAN-OS GlobalProtect. Actively exploited by 'Operation MidnightEclipse' against U.S. government and DIB entities, immediate patching is crucial.
Fortra's GoAnywhere MFT has a new zero-day, CVE-2024-XXXXX, under active exploitation by the Clop ransomware group. The flaw compromises file transfer systems; immediate mitigation is essential for affected users.
Microsoft issued an emergency out-of-band patch for a new, actively exploited Windows privilege escalation flaw, CVE-2024-XXXXX. This vulnerability allows attackers to gain elevated privileges, requiring prompt updates.
Akira ransomware has a new ELF variant specifically targeting Linux systems, including ESXi virtual machines. This expands their capability to perform cryptographic operations on guest VMs, threatening virtualized environments.
U.S. government agencies (CISA, FBI, NSA) issued a joint alert on QakBot malware's evolving tactics. It now uses SquirrelWaffle and DarkGate loaders for initial access, continuing to facilitate ransomware deployments.
The Andromeda malware (Gamarue) has resurfaced in new campaigns utilizing advanced obfuscation. Distributed via phishing emails, it functions as an info stealer and trojan dropper, posing an ongoing threat.
Hacktivist group GhostSec claims responsibility for DDoS attacks and data breaches against global healthcare providers. The group is demanding ransoms for compromised data, escalating threats to this critical sector.
Want to dig deeper?
Vulnerabilities
Cyber Groups
| Akira | GOLD SAHARA, PUNK SPIDER, Howling Scorpius |
Malware Families