CyberSec Roundup
A synopsis of the Latest Cybersecurity News
SpiceJet Hacked
SpiceJet had its I.T. systems hit by a ransomware attack last week. The Indian budget airline confirmed the attack was mostly contained at this point, but the breach resulted in numerous flight delays, along with instances of passengers being stuck inside planes for up to 5 hours awaiting takeoff.
Zoom Update
Users of the popular video conferencing software are advised to ensure their software is at version 5.10.0. This is to patch vulnerabilities discovered by Google Project Zero, which could allow an attacker to compromise a user’s system by sending a special message via Zoom. This initial compromise allows Zoom to download a malicious update from the attacker’s server, allowing them to take control of the user’s machine.
Clop Returns?
The ransomware group responsible for the Qualys and Shell attacks seems to be back at it. After seemingly deciding to shut down operations after months of inactivity, the group has recently added over 20 victims to their data leak. Organizations in the industrial and technology sectors are the primary victims, it is unclear if these are new victims or data from previous victims being published as part of a wind-down process.
By: David Pinder
IT & Cybersecurity Consultant
Certified Ethical Hacker (Master)