CyberNews: 14/10/2026 Edition

Today’s roundup

Summary

CDK Global, a major cloud computing provider for thousands of car dealerships in North America, experienced a significant cyberattack on June 19, 2024, leading to widespread system outages that crippled operations including sales and service appointments. The incident prompted many dealerships to revert to manual processes while investigations are ongoing.

Microsoft has confirmed that the Russia-linked state-sponsored threat group Strontium (APT28), also known as Fancy Bear or Forest Blizzard, exploited a zero-day vulnerability in Outlook as part of a sophisticated phishing campaign. This campaign specifically targeted government, defense, and technology organizations in Europe and the United States, utilizing malicious DLL files and PowerShell scripts for post-exploitation activities.

A critical privilege escalation vulnerability, CVE-2024-30080, has been identified in Microsoft Defender for IoT and Microsoft Defender for Endpoint. This flaw allows an authenticated attacker to elevate privileges to SYSTEM without user interaction, posing a significant risk to affected systems and underscoring the importance of timely patching.

State-backed hackers have been exploiting a critical remote code execution (RCE) vulnerability, CVE-2024-24919, in Check Point VPNs since at least April 2024. The flaw affects Security Gateway appliances with activated Identity Awareness or Mobile Access blades, allowing attackers to access sensitive information on networks and underscoring the urgent need for patches.

A new variant of the Akira ransomware has emerged, specifically designed to target VMware ESXi servers. This new strain encrypts virtual machines and other files on ESXi systems, posing a severe threat to organizations relying on VMware virtualization infrastructure and adding to the evolving landscape of ransomware tactics.

The EU Council has officially approved the Cyber Solidarity Act, a landmark legislative initiative aimed at strengthening the European Union's cybersecurity resilience and response capabilities. The act establishes a European Cybersecurity Shield, a new mechanism for joint detection and response to large-scale cyber incidents across member states.

The FBI and CISA have issued a joint advisory warning organizations about the growing threat posed by the BlackSuit ransomware. The advisory highlights the group's tactics, techniques, and procedures (TTPs), urging critical infrastructure sectors to implement robust security measures to prevent and mitigate attacks.

The UK National Cyber Security Centre (NCSC) has issued a warning to UK firms regarding sophisticated social engineering attacks employing new techniques. These attacks leverage personalized communications and advanced psychological manipulation to trick employees into revealing sensitive information or granting unauthorized access to systems.

Want to dig deeper?

Cyber Groups

Malware Families