Cyber Daily 1/14: Schools' Data Breach, Ivanti Zero-Day Alert, Cyber Risks in Sex Toys, Microsoft Discloses macOS Vulnerability, Fortinet Firewalls Exploited
Welcome to your daily dose of ONSEC Cyber Daily. Today, we're diving into the world of isolated risk management and how Bitsight is expanding its threat intelligence with the Cybersixgill deal, offering MSSPs a deeper pool of data to assess clients' security postures. In other news, schools are under fire for exposing sensitive information, highlighting the economic implications of the sustained rise in cybercrime. Meanwhile, the cybersecurity community is on high alert as Ivanti zero-day leaves researchers scrambling and a UK government-funded paper warns of cyber risks associated with sex toys. We also cover the recent macOS Kernel Extension Vulnerability disclosed by Microsoft and the exploitation of Fortinet firewalls. In the realm of vulnerabilities, we discuss GPU Driver Vulnerabilities in Imagination, the abuse of Aviatrix Controller bug, and the urgent need to patch BeyondTrust bug. We also touch on the latest patches for Ivanti and Juniper Networks vulnerabilities. In the human aspect of cybersecurity, we feature an exclusive piece by Vishal Parekh, COO of CyberPowerPC India, and announce a job opening for a Production Assistant at CISO Series. Finally, we delve into the world of podcasts, discussing the latest episodes from APDR, CIO, and CISO series, and exploring Big Tech's bet on Trump. Stay tuned for more updates on the global cybersecurity outlook and AI privacy policies. Stay safe and informed with ONSEC Cyber Daily.
Exploits Alert
- Breaking the Cycle of Isolated Risk Management | MSSP Alert: Bitsight is set to expand its threat intelligence with the Cybersixgill deal. This will provide Managed Security Service Providers (MSSPs) with a larger pool of data to assess their clients' security postures. Source: MSSP Alert.
- Data Breach Alert! Schools Expose Sensitive Information - Kuhinje EWE Daily: The sustained rise in cybercrime can have significant economic implications. Schools, in particular, are at risk, with sensitive information being exposed repeatedly. Source: Kuhinje EWE Daily.
- Ivanti zero-day has researchers scrambling | Cybersecurity Dive: Threat hunters are on high alert as 900 Ivanti Connect Secure instances are vulnerable. Licensing rights are being purchased to mitigate the risk. Source: Cybersecurity Dive.
- Are sex toys the new hacking frontier? - DIGIT: A UK government-funded paper has issued a warning about the cyber risks associated with sex toys, highlighting a new potential cyber vulnerability surface. Source: DIGIT.
Vulnerabilities & Patches
- Microsoft Discloses macOS Kernel Extension Vulnerability: Microsoft has disclosed a vulnerability in macOS, identified as CVE-2024-44243, which was patched by Apple in their December 11, 2024 security updates. This flaw specifically affects the macOS kernel extension. Source: Cyber Kendra.
- Snoops exploited Fortinet firewalls with 'probable' 0-day: Fortinet firewalls have been exploited by unknown attackers. The networking gear maker has yet to link the malicious activity to a specific flaw, assign a CVE, or patch a related hole. Source: The Register.
- GPU Driver Vulnerabilities in Imagination Let Attackers Gain Kernel Access Remotely: Imagination's GPU drivers have critical vulnerabilities that allow attackers to gain kernel access remotely. A patch update was released on 10th Jan addressing these vulnerabilities. Source: Cybersecurity News.
- Cryptojacking, backdoors abound as attackers abuse Aviatrix Controller bug: Attackers are abusing a bug in Aviatrix Controller to facilitate cryptojacking and backdoor attacks. Compromised environments were exposed to the internet and had the patches for the last known Aviatrix Controller RCE (CVE). Source: The Register.
- CISA orders agencies to patch BeyondTrust bug exploited in attacks: CISA has ordered agencies to patch a command injection vulnerability (CVE-2024-12686) in BeyondTrust's Privileged Remote Access (PRA) and Remote Support (RS) that has been exploited in attacks. Source: Bleeping Computer.
Podcasts
- BRIEF25: Vishal Parekh, COO of CyberPowerPC India: Vishal Parekh, the COO of CyberPowerPC India, shares his insights and experiences in the cybersecurity industry in this exclusive series. Source: MediaBrief
- APDR Podcast Episode 78 with host Kym Bergmann: This episode delves into the details of the upgraded Mogami frigate and the complexities of the SEA 3000 process. Source: Asia Pacific Defence Reporter
- Big Tech's Big Bet on Trump: This podcast explores how the biggest names in tech are supporting Donald J. Trump, both during his candidacy and now. Source: The New York Times
- CIO Podcast – Episode 88: A Healthcare Perspective on Southern California Wildfires with Ray Lowe: In this episode, Ray Lowe, SVP and CIO at AltaMed, discusses the impact of Southern California wildfires from a healthcare perspective. Source: Healthcare IT Today
- AI Privacy Policies: Unveiling the Secrets Behind ChatGPT, Gemini, and Claude: This episode unveils the secrets behind the privacy policies of AI technologies like ChatGPT, Gemini, and Claude. Source: Security Boulevard
Final Words
And that's a wrap for today's edition of 'ONSEC Cyber Daily'. From the expanding threat intelligence of Bitsight to the new hacking frontier of sex toys, we've covered a lot of ground. We've also delved into the latest vulnerabilities and patches, and explored the world of cybercrime through the lens of various podcasts. Remember, the world of cybersecurity is ever-evolving, and staying informed is your first line of defense. So, let's break the cycle of isolated risk management together. Share this newsletter with your friends and colleagues to keep them in the loop too. Stay safe, stay informed, and see you in the next edition of 'ONSEC Cyber Daily'.
