Jul 12, 2024

I just received urgent news about a critical PHP vulnerability being exploited to spread malware and launch DDoS attacks. This poses a significant threat to the security of systems and networks, requiring immediate attention. In addition, there are other concerning cybersecurity developments, such as GitLab patching a critical flaw, a new ransomware group exploiting a Veeam Backup Software vulnerability, and Microsoft patching 143 security flaws, including two actively exploited ones. These all need to be addressed promptly to prevent further exploitation and damage.

There’s also a report of a hacktivist group targeting the conservative Heritage Foundation and posting chat logs between one of its hackers and the Executive Director. The breach, though widely covered, does not appear to contain sensitive data from the organization, but the exchange between the hacktivist group and the Heritage Foundation Executive Director is a cause for concern and should be investigated further. Additionally, there are reports of health-related scam campaigns and cybercriminals looting millions of dollars from the South African Department of Public Works and Infrastructure over a 10-year period. These highlight the urgent need for stronger security measures and vigilance.

In recent news, the South African government has pledged to crack down on cybercrime syndicates and their collaborators, both internal and external. The US Cybersecurity and Infrastructure Security Agency (CISA) and the FBI have issued an advisory urging software companies to address OS command injection vulnerabilities in their products. GitLab has warned of a critical vulnerability in its Community and Enterprise editions, which requires immediate attention from admins to upgrade installations. These issues all require immediate attention to prevent further damage and exploitation.

Stay Well!