Cyber Bits · · 1 min read

Cyber Bits: March 11, 2024

Cyber Bits: March 11, 2024

There are no slow weeks in Cyber. This week we’ve seen some additional disclosure from Microsoft, a serious Fortinet flaw and proof that no organization is invulnerable to being breached.

More fallout from Microsoft’s January breach

Links: The Hacker News; Arsetechnica

Following Microsoft’s January breach, the company published an update on March 8th disclosing they had uncovered evidence that the data exfiltrated in January has been used to gain further unauthorized access to their systems and some of their source code repositories.

CISA falls victim to Ivanti vulnerabilities

Links: CNN; The Record

Cybersecurity and Infrastructure Security Agency (CISA) was breached back in February using the widely reported Ivanti vulnerabilities.

Fortinet flaw being actively exploited

Links: Bleeping Computer; Bleeping Computer

A critical Fortinet flaw may impact 150,000 exposed devices, and has been confirmed as being actively exploited by CISA.

Read next

Cyber Bits: July 8, 2024
Cyber Bits ·

Cyber Bits: July 8, 2024

In this week's Cyber Bits, we look into Cloudflare's BGP incident, a Go-based ransomware variant targeting VMs, Ticketmaster struggling with a ransomware incident, hackers leaking Twilio data, and Cobalt Strike servers being shutdown by the feds.

Cyber Bits: June 24, 2024
Cyber Bits ·

Cyber Bits: June 24, 2024

This week - VMware's urgent security patches, a UEFI vulnerability in Intel PCs, US sanctions on Kaspersky, ransomware attacks on old Android phones, and a breach of 1,590 crypto wallets by North Korean hackers. Stay updated with the latest cybersecurity news and tips.