March 13, 2023
CyberSec Roundup
A synopsis of the Latest Cybersecurity News
$4.5 Million Ransom
Barcelona’s Hospital Clinic, one of Barcelona’s largest hospitals, was hit with a ransomware attack last week, which led to major disruptions of the health facilities’ services and the cancelation of non-urgent operations. The RansomHouse group claimed responsibility for the attack and demanded a 4.5 million USD ransom for the stolen information. Officials have already confirmed that they will not pay the threat actors.
DC Health Link Leak
DC Health, a medical insurance company, suffered a cyberattack that exposed the personal information of its clients. Among these clients are members, staff and families of the U.S. House of Representatives, as the company administers their health care plans. This led to the FBI being involved in the investigation of this breach, as some of the information from this breach has already been leaked to the dark web for sale.
Critical Fortinet CVE
Fortinet disclosed a critical vulnerability affecting their appliances that run FortiOS and FortiProxy. Tracked as CVE-2023-25610, an unauthenticated attacker could run code and take control of a device or perform a DoS attack. The vulnerability has not been exploited as yet, but admins are advised to patch their devices as soon as possible, as those who don’t will run the chance of being compromised in the coming months.
By: David Pinder
IT & Cybersecurity Consultant
Certified Ethical Hacker (Master) | CCSK | AZ-500