[Weekly Security News] Cyber Threat right under your nose
[February 14 2024]
1. Chinese hackers hid in US infrastructure network for 5 years
Chinese hackers have at times secretly hidden in U.S. infrastructure for up to five years, ready to conduct a potentially destructive cyberattack if the two countries were to go to war, federal agencies said Wednesday.Over the past year, U.S. officials have repeatedly issued warnings that hackers working for China’s intelligence services keep gaining stealthy access to U.S. infrastructure.
Source : Bleeping Computer
2. Dutch military attributes RAT attack on its network to Chinese hackers
On 6th Feb, The Military Intelligence and Security Service (MIVD) of the Netherlands revealed the incident that the Dutch military suffered an attack from Chinese hackers last year, leading to malware being deployed on a number of devices on its network. The hackers gained access through a known FortiGate vulnerability (CVE-2022-42475) before deploying a specially designed remote access Trojan (RAT) the MIVD and General Intelligence and Security Service of the Netherlands (AIVD) refer to as COATHANGER.
Source : Cyber Daily
3. Verizon says 63K employees’ info fell into the wrong hands – an insider this time
Verizon is notifying more than 63,000 people, mostly current employees, that an insider, accidentally or otherwise, had inappropriate access to their personal data. Of the 63,206 people to receive privacy breach notifications and most are current Verizon employees. There is no indication of malicious intent nor do we believe the information was shared externally.
Source : The Register
Check out Penta Security’s Cloudbric product lines:
Cloud-based Fully Managed WAAP: Cloudbric WAF+
Agent based Zero Trust Network Access Solution: Cloudbric PAS
Agentless Zero Trust Network Access Solution: Cloudbric RAS
Blockchain: Blockchain Security Solution
Click here for inquiries regarding the partner system of Cloudbric
Make sure to follow us on our social media platforms (LinkedIn, Twitter, and Facebook)
Check out Penta Security’s product lines:
Web Application Firewall: WAPPLES
Database Encryption: D’Amo
Identity and Access Management: iSIGN+
Car, Energy, Factory, City Solutions: Penta IoT Security
Click here for inquiries regarding the partner system of Penta Security
Make sure to follow us on our social media platforms (LinkedIn)