Cyber Bits · · 2 min read

Cyber Bits: June 17, 2024

London hospitals canceled 800+ operations due to ransomware, fake Chrome errors trick users into running malicious scripts, KeyTronic confirms a data breach after ransomware leaks, high-severity vulnerabilities affect ASUS routers, and Microsoft announces new security changes for Outlook.

Cyber Bits: June 17, 2024

In this week's Cyber Bits, we cover significant developments and threats affecting various sectors. London hospitals faced severe disruptions, canceling over 800 operations due to a ransomware attack. Fake Google Chrome error messages trick users into running malicious PowerShell scripts, highlighting new phishing tactics. KeyTronic experienced a data breach after ransomware attackers leaked stolen files. High-severity vulnerabilities in multiple ASUS router models pose serious security risks, prompting urgent firmware updates. Lastly, Microsoft announced new security changes for personal Outlook accounts to enhance user protection.

Ransomware Attack Forces London Hospitals to Cancel Over 800 Operations

Link: Bleeping Computer

A ransomware attack on Barts Health NHS Trust in London led to the cancellation of over 800 operations and medical appointments. The cyberattack affected multiple hospitals, causing significant disruptions to patient care. Emergency treatments and critical services continued, but routine surgeries and outpatient appointments were postponed. The hospital's IT systems were severely impacted, and efforts to restore normal operations are ongoing.

Fake Google Chrome Errors Deceive Users into Executing Malicious PowerShell Scripts

Link: Bleeping Computer

Cybercriminals are tricking users into running malicious PowerShell scripts through fake Google Chrome error messages. These errors prompt users to download a purportedly necessary update, which actually executes harmful scripts. The attack exploits user trust in browser alerts, highlighting the need for vigilance and proper security measures when encountering unexpected browser messages.

KeyTronic Confirms Data Breach After Ransomware Gang Leaks Stolen Files

Link: Bleeping Computer

KeyTronic, an electronics manufacturing company, has confirmed a data breach following the leak of stolen files by a ransomware gang. The cybercriminals posted sensitive information online after KeyTronic refused to pay the ransom. The breach highlights ongoing threats to corporate data security and the severe consequences of ransomware attacks. KeyTronic is working with cybersecurity experts to investigate and mitigate the impact of the breach.

High-Severity Vulnerabilities Discovered in Multiple ASUS Router Models

Link: Arstechnica

Security researchers have identified several high-severity vulnerabilities affecting a wide range of ASUS router models. These flaws could allow attackers to execute arbitrary code, access sensitive information, and disrupt network operations. ASUS has been notified and is working on releasing firmware updates to address these security issues. Users are advised to update their routers as soon as patches become available to mitigate potential risks.

Microsoft Announces Upcoming Security Changes for Personal Outlook Accounts

Link: Bleeping Computer

Microsoft has announced new security enhancements for personal Outlook accounts, aimed at improving user protection. These changes include stronger authentication protocols, enhanced phishing detection, and increased account recovery options. The updates are part of Microsoft's ongoing efforts to bolster security and safeguard users against evolving cyber threats. Users are encouraged to enable multi-factor authentication and stay informed about these updates to ensure their accounts remain secure.

Read next

Cyber Bits: September 2
Cyber Bits ·

Cyber Bits: September 2

This week, we take a look at SQLi vulnerabilities within TSA software, researchers being sued, and a staggering 200+ victims of RansomHub's Ransomware-as-a-Service.