🚨 Record Breaking DDoS Attack, Sciencelogic ZeroDay, Cyber Crime Networks Takedowns, Ransomware

In today's episode of the CyberHub Podcast, host James Azar covers several key developments in the world of cybersecurity, focusing on record-breaking DDoS attacks, ongoing vulnerabilities in major platforms, and law enforcement actions against cybercriminals.

DDoS Attack Mitigation

Cloudflare successfully mitigated a record-breaking DDoS attack, peaking at 3.8 terabytes per second and over 2 billion packets per second. This attack targeted an unnamed customer of a hosting provider, and it surpassed previous attacks both in scale and impact. The host emphasized the importance of businesses having DDoS protection at both the network and application levels.

Rackspace Data Breach

A breach occurred at Rackspace due to the exploitation of a zero-day vulnerability in a third-party tool used by ScienceLogic's SL-One platform. The breach led to the exposure of limited customer monitoring data. ScienceLogic quickly patched the vulnerability, and Rackspace is rotating credentials as a precaution.

Zimbra Vulnerability

A critical vulnerability in the Zimbra email and collaboration platform is being actively exploited. This vulnerability allows unauthenticated users to execute commands on the platform. A patch has been released, and businesses are urged to update immediately.

Old SAP and D-Link Vulnerabilities

Several years-old vulnerabilities in SAP Commerce, the GPAC multimedia framework, and D-Link routers are still being actively exploited, underscoring the need for businesses to patch older systems to prevent security risks.

Threat Intelligence Sharing Decline

The Cybersecurity and Infrastructure Security Agency’s (CISA) Automated Indicator Sharing (AIS) program has seen a dramatic 93% drop in participation due to a lack of outreach and engagement, putting critical infrastructure at greater risk.

Ransomware on the Rise

The U.S. continues to be a primary target for ransomware, with companies still paying high ransoms. Azar emphasized that without stricter action against both ransomware operators and the countries that harbor them, this trend is unlikely to change.

Law Enforcement Actions

The U.S., U.K., and other countries have made several arrests and sanctions targeting Russian cybercriminals, including those connected to LockBit and Evil Corp ransomware groups. However, the decentralized nature of ransomware makes total eradication difficult.

Action Item for IT and Cybersecurity Professionals:

Ensure DDoS Protection Across All Levels: With DDoS attacks becoming more frequent and severe, it’s crucial for businesses to have protection not only at the network level but also at the application layer. Review your organization's DDoS mitigation strategy, and ensure that protections are in place at every layer of your infrastructure to prevent potential disruptions.

This episode emphasizes the ongoing threats from cybercriminals, vulnerabilities in popular platforms, and the importance of proactive defense measures in the ever-evolving cybersecurity landscape.

✅ Story Links: 

https://www.securityweek.com/record-breaking-ddos-attack-peaked-at-3-8-tbps-2-14-billion-pps/

https://www.bleepingcomputer.com/news/security/rackspace-monitoring-data-stolen-in-sciencelogic-zero-day-attack/

https://www.securityweek.com/critical-zimbra-vulnerability-exploited-one-day-after-poc-release/

https://www.securityweek.com/organizations-warned-of-exploited-sap-gpac-and-d-link-vulnerabilities/

https://www.bankinfosecurity.com/experts-warn-cisas-threat-sharing-in-death-spiral-a-26426

https://www.cybersecuritydive.com/news/ransomware-surges-desite-global-effort/728534/

https://thecyberexpress.com/iran-threat-group-handala-targets-israel/

https://www.bankinfosecurity.com/lockbit-evil-corp-targeted-in-anti-ransomware-crackdown-a-26422

https://thecyberexpress.com/cybercriminal-activities-in-west-africa/

🔔 Subscribe now for the latest insights from industry leaders, in-depth analyses, and real-world strategies to secure your digital world. https://www.youtube.com/@TheCyberHubPodcast/?sub_confirmation=1  

✅ Important Links to Follow: 

👉Substack:

👉Listen here: https://linktr.ee/cyberhubpodcast   

✅ Stay Connected With Us.

👉Facebook: https://www.facebook.com/CyberHubpodcast/ 

👉LinkedIn: https://www.linkedin.com/company/cyberhubpodcast/ 

👉Twitter (X): https://twitter.com/cyberhubpodcast 

👉Instagram: https://www.instagram.com/cyberhubpodcast 

✅ For Business Inquiries:  info@cyberhubpodcast.com

=============================

✅ About The CyberHub Podcast.

The Hub of the Infosec Community. 

Our mission is to provide substantive and quality content that’s more than headlines or sales pitches. We want to be a valuable source to assist those cybersecurity practitioners in their mission to keep their organizations secure. 

Tune in to our podcast Monday through Thursday at 9AM EST for the latest news.