CISO Talk by James Azar
CyberHub Podcast
🚨 Cyber News: Apple Patches Zero Day, Ivanti Woes Continue, AerCap Ransomware, MOVEit News & Easterly Swatted
1×
0:00
Current time: 0:00 / Total time: -14:02
-14:02

🚨 Cyber News: Apple Patches Zero Day, Ivanti Woes Continue, AerCap Ransomware, MOVEit News & Easterly Swatted

Expert Insights on Apple Zero-Day Vulnerability, Confluence Flaws, and the Growing Threat Landscape

In the latest episode of the CyberHub Podcast, host James Azar addresses critical cybersecurity vulnerabilities and incidents, offering insights into the rapidly evolving digital threat landscape.

The podcast begins with an urgent call for users to patch all Apple products due to a zero-day vulnerability identified as CVE-2024-23222, affecting iOS, macOS, tvOS, and Safari. This WebKit confusion issue poses a significant threat to a wide range of devices, both old and new, and is potentially exploitable by nation-states in targeted attacks.

Furthermore, Azar discusses a critical vulnerability in Confluence Data Center and Server, specifically in versions released before December 5th, 2023. The vulnerability, tracked as CVE-2023-22527, has seen over 40,000 exploitation attempts, indicating a heightened risk for the 11,000 Confluence instances exposed to the internet.

The podcast also sheds light on the challenges faced by Ivanti customers due to two zero-day vulnerabilities. The issue is compounded by a race condition in pushing configurations that nullifies applied mitigations, leaving devices vulnerable to ongoing attacks. This situation underscores the complexity of cybersecurity and the importance of proper mitigation strategies.

In a significant development, AirCap, an aircraft leasing giant, confirmed a ransomware attack, with responsibility claimed by the emerging group SLUG. Despite the attack, AirCap assures no financial loss and continues to investigate the incident.

The episode also touches on the SEC's recent SIM swapping incident, which led to unauthorized control over an SEC cell phone number. This breach highlights the vulnerabilities in even high-level government entities.

Lastly, the podcast reports on the stability of Move-it customer retention levels despite attacks against its zero-day vulnerability last spring. While Progress Software, the parent company, shows revenue growth, the long-term loyalty of Move-it customers in the wake of these attacks remains uncertain.

In a concerning final note, Azar reports the swatting incident at the home of CISA Director Jen Easterly, an alarming example of the risks faced by cybersecurity professionals.

Listeners are reminded of the ever-present and evolving nature of cybersecurity threats, emphasizing the need for vigilance and timely action in this dynamic digital landscape.

Show Notes and Story Links:

https://www.bleepingcomputer.com/news/apple/apple-fixes-first-zero-day-bug-exploited-in-attacks-this-year/

https://www.securityweek.com/hackers-start-targeting-critical-atlassian-confluence-vulnerability-days-after-disclosure/

https://www.bleepingcomputer.com/news/security/ivanti-vpn-appliances-vulnerable-if-pushing-configs-after-mitigation/

https://www.bleepingcomputer.com/news/security/sec-confirms-x-account-was-hacked-in-sim-swapping-attack/

https://www.securityweek.com/aircraft-lessor-aercap-confirms-ransomware-attack/

https://www.cybersecuritydive.com/news/progress-software-shakes-moveit-financial-impact/704900/

https://cyberscoop.com/north-korean-government-hackers-scarcruft/

https://therecord.media/cisa-jen-easterly-swatting-incident

Thank you for watching and Please Don't forget to Like this video and Subscribe to my Channel!

Apply now to be a featured partner on the show: https://www.cyberhubpodcast.com/contact

******

Listen here: https://linktr.ee/cyberhubpodcast

SubStack:

******

Website: https://www.cyberhubpodcast.com

Youtube: https://www.youtube.com/c/TheCyberHubPodcast

Rumble: https://rumble.com/c/c-1353861

Facebook: https://www.facebook.com/CyberHubpodcast/

Linkedin: https://www.linkedin.com/company/cyberhubpodcast/

Twitter: https://twitter.com/cyberhubpodcast

Instagram: https://www.instagram.com/cyberhubpodcast

The Hub of the Infosec Community.

Our mission is to provide substantive and quality content that’s more than headlines or sales pitches. We want to be a valuable source to assist those cybersecurity practitioners in their mission to keep their organizations secure.

Discussion about this podcast

CISO Talk by James Azar
CyberHub Podcast
Today’s top cybersecurity news and the latest from Practicing CISO James Azar, tune in to hear how practitioners read, view and work after hearing the latest headlines and how these stories help keep practitioners sharp and ready.