CISO Talk by James Azar
CyberHub Podcast
🚨 Azure Outage Attributed to DDoS Response, Digicert revokes Certs, $75M Paid to Ransomware
0:00
Current time: 0:00 / Total time: -19:54
-19:54

🚨 Azure Outage Attributed to DDoS Response, Digicert revokes Certs, $75M Paid to Ransomware

Today’s top cybersecurity news and the latest threats from Practicing CISO James Azar, tune in to hear how practitioner’s breakdown the latest to bolster their cybersecurity programs

In today's episode of the CyberHub Podcast, several critical cybersecurity issues were discussed, each with significant implications and necessary actions for organizations.

Azure Outage

The podcast began with a major Azure outage that lasted approximately 10 hours, impacting users primarily in Europe and Asia. This outage affected essential services like Azure App Services, Microsoft 365, and Purview services, among others. It was triggered by a DDoS attack that exploited an implementation bug in Microsoft's defense mechanisms.

Action Item: Organizations relying on Azure services should review their disaster recovery plans and consider multi-cloud strategies to mitigate similar risks.

DigiCert TLS Certificate Revocation

DigiCert faced a significant issue requiring the revocation of TLS certificates due to a domain validation error involving CNAME-based validations. This incident potentially disrupts websites and services.

Action Item: Businesses using DigiCert certificates must promptly check and replace any affected certificates to maintain secure communications.

Record Ransomware Payment Made

Zscaler reported a record-breaking $75 million ransomware payment made to the Dark Angels group. This unprecedented amount highlights the growing threat and impact of ransomware.

Action Item: Companies should strengthen their cybersecurity defenses, particularly against ransomware, and consider cyber insurance and incident response plans.

CISO Talk by James Azar is a reader-supported publication. To receive new posts and support my work, consider becoming a free or paid subscriber.

VMware ESXi Vulnerability Exploitation

A critical vulnerability in VMware ESXi, rated CVE-2024-37085, is being actively exploited by multiple ransomware groups. This vulnerability, though rated at 6.8, is dangerous due to the potential for widespread damage.

Action Item: Organizations using VMware ESXi should prioritize patching this vulnerability and ensure their systems are fully secured.

Android Devices Targeted by Malware

A large-scale campaign targeting Google Android devices was uncovered, utilizing thousands of Telegram bots to spread SMS-stealing malware and capture two-factor authentication codes. This campaign has been active since February 2022.

Action Item: Users should ensure their Android devices have the latest security updates and use strong, unique passwords for their accounts.

SentinelOne and CrowdStrike Incident

The CEO of SentinelOne criticized CrowdStrike's infrastructure and response to a recent incident where a bad update affected millions of endpoints. The issue raised questions about the architecture and security measures employed by endpoint protection providers.

Action Item: Businesses should evaluate their cybersecurity vendors' architecture and response plans, ensuring they meet robust standards.

Meta's Legal Settlement

Meta agreed to a $1.4 billion settlement with the state of Texas over the illegal collection of biometric data, marking one of the largest penalties for such a violation.

Action Item: Companies handling sensitive data must ensure compliance with data privacy laws and transparently communicate their data collection practices to users.

Kids Online Safety Act (KOSA) Legislation

The U.S. Senate passed the Kids Online Safety Act, focusing on protecting children from harmful online content and giving parents more control over their children's online experiences. The bill awaits approval from the House.

Action Item: Businesses in the online sector should prepare for potential new regulations affecting content and data handling for users under 17.

The podcast ended with reminders for cybersecurity practitioners attending the upcoming Black Hat conference to take security precautions, such as disabling Bluetooth and Wi-Fi on devices.

Stay tuned for more cybersecurity news and updates on the next episode.

Leave a comment

✅ Story Links: 

https://www.securityweek.com/microsoft-says-azure-outage-caused-by-ddos-attack-response/

https://www.securityweek.com/digicert-revoking-many-certificates-due-to-verification-issue/

https://www.securityweek.com/company-paid-record-breaking-75-million-to-ransomware-group-report/

https://www.darkreading.com/cloud-security/ransomware-gangs-exploit-esxi-bug-for-instant-mass-encryption-of-vms

https://www.bleepingcomputer.com/news/security/cisa-warns-of-vmware-esxi-bug-exploited-in-ransomware-attacks/

https://www.bleepingcomputer.com/news/security/massive-sms-stealer-campaign-infects-android-devices-in-113-countries/

https://www.crn.com/news/security/2024/sentinelone-ceo-on-crowdstrike-outage-not-just-an-honest-mistake

https://thehackernews.com/2024/07/meta-settles-for-14-billion-with-texas.html

https://therecord.media/senate-passes-landmark-bill-children

🔔 Subscribe now for the latest insights from industry leaders, in-depth analyses, and real-world strategies to secure your digital world. https://www.youtube.com/@TheCyberHubPodcast/?sub_confirmation=1  

✅ Important Links to Follow: 

👉Substack:

👉Listen here: https://linktr.ee/cyberhubpodcast   

Stay Connected With Us.

👉Facebook: https://www.facebook.com/CyberHubpodcast/ 

👉LinkedIn: https://www.linkedin.com/company/cyberhubpodcast/ 

👉Twitter (X): https://twitter.com/cyberhubpodcast 

👉Instagram: https://www.instagram.com/cyberhubpodcast 

✅ For Business Inquiries:  info@cyberhubpodcast.com

=============================

About The CyberHub Podcast.

The Hub of the Infosec Community. 

Our mission is to provide substantive and quality content that’s more than headlines or sales pitches. We want to be a valuable source to assist those cybersecurity practitioners in their mission to keep their organizations secure. 

Tune in to our podcast Monday through Thursday at 9AM EST for the latest news.

For Collaboration and Business inquiries, please use the contact information below:

📩 Email:  info@cyberhubpodcast.com 

Discussion about this podcast

CISO Talk by James Azar
CyberHub Podcast
Today’s top cybersecurity news and the latest from Practicing CISO James Azar, tune in to hear how practitioners read, view and work after hearing the latest headlines and how these stories help keep practitioners sharp and ready.