Cyber security news of the day – 2024 May 31

Cyber security news by Alexandre Blanc Cyber

2024 Friday 31

Here is what you should be aware of today :

BBC Breach Puts 25K Pension Scheme Members at Risk

Though information such as dates of birth, email addresses, and home addresses were compromised, « the Beeb » assures individuals that financial information is still protected. The cloud leaks, as usual, can’t trust systems you don’t own and manage ! #cloud #clowd #cybersecurity

CISA warns of actively exploited Linux privilege elevation flaw

It’s linux patch time !The U.S. Cybersecurity & Infrastructure Security Agency (CISA) has added two vulnerabilities in its Known Exploited Vulnerabilities (KEV) catalog, including a Linux kernel privilege elevation flaw. (Oh by the way, the stupid cloud mostly runs on Linux, so you can just pray that they patch your workloads, otherwise, privilege escalation in shared hosting like public cloud, good luck ! !)

Snowflake compromised? Attackers exploit stolen credentials

Seems that the cloud is leaking and leaking and leaking again ! Have attackers compromised Snowflake or just their customers’ accounts and databases? Conflicting claims muddy the situation.

The linked article share recommendation for Snowflake users to try to reduce the impact of the incident, aside of only praying, as this is the only thing you can do when you use public cloud, and it won’t fix much ! LOL … The cloud is a JOKE !

Another link on this deeply corrupted cloud topic : https://www.bleepingcomputer.com/news/security/snowflake-account-hacks-linked-to-santander-ticketmaster-breaches/

Mysterious Cyber Attack Took Down 600,000+ Routers in the U.S.

This is bad, while LinkedIn and Microsoft are busy blocking account from certified and verified security people like me, the real threat actors are taking down more than half a millions routers in the US ! (I’m a bit pissed, yes)

« More than 600,000 small office/home office (SOHO) routers are estimated to have been bricked and taken offline following a destructive cyber attack staged by unidentified cyber actors, disrupting users’ access to the internet. »

And that’s about it for now ! Thanks in advance for sharing, as I’m now the enemy No 1 on Linkedin :P Feel free to share the news yourself using the share buttons below ! Enjoy !