Sans news bites for January 23, 2024

Hello everyone,

I got a chance to read sans news bites for yesterday. Ivanti is back in the news as a directive was put out there to fix the vulnerability, like yesterday. Or is it now?

Some of the biggest news from the newsletter talks about Microsoft. Apparently their officials have been emailed as usual for whatever reason, but that email now has been breached by state-sponsored actors.

In the rest of the news, the UK counsel has its biggest test as its IT system was targeted, a data center in Sweedon has issues due to ransomware, and one of the biggest stories of them all, a researcher fined for disclosing an e-comerce database.

There’s more, so let’s break it down.

Here’s the list for the top of the news.

• Critical Atlassian Vulnerability is Being Actively Exploited
• Known VMware Vulnerability is Under Active Exploitation
• CISA Emergency Directive to FCEB Agencies: Mitigate Ivanti Vulnerabilities Now
• Microsoft Officials’ eMail Breached by State-Sponsored Threat Actors

Here’s the rest of the news.

• Three UK Councils in Kent Say IT Systems Disrupted by Cyberattack
• Data Center Ransomware Attack Causing IT Outages in Sweden
• Researcher Fined for Disclosing e-Commerce Database Vulnerability
• Apple Updates
• SEC’s Twitter/X Account was Hijacked With a SIM Swap

I forgot about the SEC twitter fiasco. Someone either didn’t turn on two-factor, or it got disabled there. We covered the apple updates for IOS and Mac in this blog post for people if they need it.

View Sans News Bites January 23, 2024                                                         Vol. 26, Num. 06 by clicking on the link and stay safe out there!

Thanks so much for listening, reading and learning with us.