Phishing for the News - Daily Edition - December 10, 2024

Phishing for the News

Here are some highlights from today's information security brief. The Phishing for the News Podcast covers some of the items from our daily brief. For more information email [e-mail]:
●Drupal has patched a critical vulnerability (AV24-698).

●CISA has issued a critical security advisory, AV24–697.

●Dell has released a security advisory (AV24-696).

●Multiple critical vulnerabilities have been found in QNAP products.

●Microsoft's monthly security update addresses 85 vulnerabilities, including 10 zero-day vulnerabilities.

●Critical vulnerabilities have been patched in Qlik Sense Enterprise for Windows.

●Mitel has addressed multiple vulnerabilities in its MiCollab software.

●QNAP has patched critical vulnerabilities in its operating systems.

●Artivion, a heart surgery device maker, was hit by a ransomware attack.

●A critical vulnerability has been discovered in the OpenWrt network operating system.

●Radiant Capital lost $50 million in cryptocurrency due to a cyber attack attributed to North Korean hackers.

●An international cybercrime ring has been dismantled

●Romanian energy supplier Electrica Group has been hit by a ransomware attack.

●Cisco Talos has discovered critical vulnerabilities in MC LR Router and GoCast service.

●A massive botnet called Socks5Systemz has been uncovered.

●A zero-day vulnerability in Windows NTLM leaves systems vulnerable to relay attacks and credential theft.

●QR codes can be used to bypass browser isolation security.

●A surge in suspected fraudulent e-commerce transactions occurred during the Thanksgiving to Cyber Monday shopping period.

●Google has released an open-source patch validation tool called Vanir.

For more information in the SecureResearch Daily Cyber Intelligence Brief, email [e-mail]