Cyber Bits · · 1 min read

Cyber Bits: March 11, 2024

Cyber Bits: March 11, 2024

There are no slow weeks in Cyber. This week we’ve seen some additional disclosure from Microsoft, a serious Fortinet flaw and proof that no organization is invulnerable to being breached.

More fallout from Microsoft’s January breach

Links: The Hacker News; Arsetechnica

Following Microsoft’s January breach, the company published an update on March 8th disclosing they had uncovered evidence that the data exfiltrated in January has been used to gain further unauthorized access to their systems and some of their source code repositories.

CISA falls victim to Ivanti vulnerabilities

Links: CNN; The Record

Cybersecurity and Infrastructure Security Agency (CISA) was breached back in February using the widely reported Ivanti vulnerabilities.

Fortinet flaw being actively exploited

Links: Bleeping Computer; Bleeping Computer

A critical Fortinet flaw may impact 150,000 exposed devices, and has been confirmed as being actively exploited by CISA.

Read next

Cyber Bits: September 23
Cyber Bits ·

Cyber Bits: September 23

This week, we cover software-breaking updates, major security vulnerabilities including a Mediatek 0day, data breaches at Deloitte and Dell, cyber-espionage activities and Disney affected by Slack.