CISO Talk by James Azar
CyberHub Podcast
Xerox Data Breach, Orbit Chain Loses $86 Million, OT Cyberattacks on the Rise, 21 Mac Malware
0:00
Current time: 0:00 / Total time: -16:21
-16:21

Xerox Data Breach, Orbit Chain Loses $86 Million, OT Cyberattacks on the Rise, 21 Mac Malware

Cybersecurity Highlights from the Cyber Hub Podcast, January 3, 2024, a Comprehensive Look at the Latest Cybersecurity Issues and Incidents and how practitioners can mitigate the risks

Good Morning Cyber Gang,

In the latest episode of the Cyber Hub podcast, aired on January 3rd, 2024, host James Azar provides a detailed insight into various cybersecurity incidents and trends. The episode starts with a reminder of the upcoming presidential election in November and a promotion for the podcast's Substack subscription, which includes a special espresso travel mug offer.

Xerox Data Breach: A Deep Dive

The podcast reports on a data breach at Xerox Business Solutions, a subsidiary of the larger Xerox corporation. The breach, which did not affect corporate systems or operations, potentially compromised limited personal information. The breach's details, including its nature and whether it affected clients, employees, or partners, remain undisclosed.

Orbit Chain's $86 Million Crypto Loss

In a significant crypto-related incident, the South Korean blockchain platform Orbit Chain lost approximately $86 million in Ether, DAI, Tether, and USD Coin. The loss occurred due to a series of unauthorized transactions on December 31st, suspected to be a North Korean state-sponsored attack.

OT Cyber Attacks: A Rising Concern

The podcast shifts focus to the increasing cyber attacks on Operational Technology (OT) systems, particularly in water facilities. James Azar emphasizes the lack of federal and state government support for local utilities and suggests that states should take more control over their local utilities' cybersecurity.

Share

Israeli Cyber Attacks: A Critical Analysis

The episode also discusses the barrage of cyber attacks against Israel, particularly targeting OT systems like water and energy. These attacks have led to physical shutdowns and damage, highlighting the growing concern of cyber warfare.

Vulnerability Alerts and macOS Malware

Further in the episode, Azar talks about the addition of new vulnerabilities to CISA's KEV catalog, including flaws in Google Chrome and a Perl library for Excel files. The episode also notes a significant rise in macOS-targeted malware, with 21 new families identified in 2023, signaling an increase in threats to Apple devices.

Leaksmas: Cyber Criminals Share Data During Holidays

Lastly, the podcast covers an unusual activity where cybercriminals collectively leaked around 50 million records during the Christmas period, in what seemed like a show of mutual gratitude among threat actors.

Closing Remarks

The episode concludes with a reminder for listeners to tune in the next day and a message to stay cyber safe, underscoring the importance of cybersecurity vigilance in the current digital landscape.

Leave a comment

Show Notes and Story Links:

https://www.securityweek.com/xerox-confirms-data-breach-at-us-subsidiary-following-ransomware-attack/

https://www.bleepingcomputer.com/news/security/orbit-chain-loses-86-million-in-the-last-fintech-hack-of-2023/

https://www.securityweek.com/states-and-congress-wrestle-with-cybersecurity-after-iran-attacks-small-town-water-utilities/

https://www.darkreading.com/cyberattacks-data-breaches/israel-cyberattacks-and-conflict-partnerships-and-acquisitions

https://www.bleepingcomputer.com/news/security/cisa-warns-of-actively-exploited-bugs-in-chrome-and-excel-parsing-library/

https://www.securityweek.com/21-new-mac-malware-families-emerged-in-2023/

https://www.darkreading.com/cyberattacks-data-breaches/cybercriminals-freely-share-millions-of-stolen-records-over-holiday-break

Thank you for watching and Please Don't forget to Like this video and Subscribe to my Channel!

Apply now to be a featured partner on the show: https://www.cyberhubpodcast.com/contact

******

Listen here: https://linktr.ee/cyberhubpodcast

SubStack:

******

Website: https://www.cyberhubpodcast.com

Youtube: https://www.youtube.com/c/TheCyberHubPodcast

Rumble: https://rumble.com/c/c-1353861

Facebook: https://www.facebook.com/CyberHubpodcast/

Linkedin: https://www.linkedin.com/company/cyberhubpodcast/

Twitter: https://twitter.com/cyberhubpodcast

Instagram: https://www.instagram.com/cyberhubpodcast

The Hub of the Infosec Community.

Our mission is to provide substantive and quality content that’s more than headlines or sales pitches. We want to be a valuable source to assist those cybersecurity practitioners in their mission to keep their organizations secure.

Discussion about this podcast

CISO Talk by James Azar
CyberHub Podcast
Today’s top cybersecurity news and the latest from Practicing CISO James Azar, tune in to hear how practitioners read, view and work after hearing the latest headlines and how these stories help keep practitioners sharp and ready.