Black Arrow Cyber Advisory 14 August 2024 – Microsoft, Adobe, Ivanti, SAP, Fortinet, Zoom, Intel and AMD Security Updates

Black Arrow Cyber Threat Intelligence Briefing 09 August 2024:

-UK Business Struggling to Prioritise Cyber Security Needs

-The C-Suite Conundrum: Are Senior Executives the Achilles’ Heel of Cyber Security?

-Ransomware in 2024: More Attacks, More Leaks, and Increased Sophistication

-Malware-as-a-Service and Ransomware-as-a-Service Lower Barriers for Cyber Criminals

-How the Theft of 40M UK Voter Register Records was Entirely Preventable

-18-Year-Old Security Flaw in Firefox and Chrome Exploited in Attacks

-99% of Global 2000 Companies Directly Connected to a Supply Chain Breach

-Email Attacks Skyrocket 293%

-Police Recover Over $40m Headed to BEC Scammers

-Russia's Priorities in Prisoner Swap Suggest Cyber Focus

-Point of Entry: Why Hackers Target Stolen Credentials for Initial Access

-FBI: BlackSuit Ransomware Behind Over $500 Million in Ransom Demands

-Survey: 78% of Ransomware Victims Paid and 74% Suffered Multiple Strikes

-Finance Should Pay Much More Attention to Undersea Cables Risk

Black Arrow Cyber Advisory 08 August 2024 – Critical WhatsUp Gold RCE Vulnerability

Black Arrow Cyber Threat Intelligence Briefing 02 August 2024:

-UK IT Leaders Feeling Less Secure Despite Cyber Security Investments

-Average Data Breach Cost Jumps to $4.88 Million, Collateral Damage Increased

-Cyber Attacks Are Inevitable, Stop Preparing for If One Happens and Start Preparing for When One Will

-How AI is Shaping Fraud as BEC Attacks Surge 20% Annually Thanks to AI Tooling

-Organisations Fail to Log 44% of Cyber Attacks. Just One in 10 Attacks Flagged by Security Tools, 40% of Environments are Vulnerable to Full Takeover

-One in Five Employees Have No Cyber Security Training

-Ferrari Exec Foils Deepfake Attempt by Asking the Scammer a Question Only CEO Benedetto Vigna Could Answer

-Half of Businesses Report an Increase in State-Sponsored Cyber Threats Amid Rising Geopolitical Tension

-New Android Malware Wipes your Device After Draining Bank Accounts

-Report Reveals how Cyber Attacks Target Organisations Depending on Size

-An 18% Increase in Ransomware Attacks Includes $75M Payment

-UK ‘Desperately Exposed’ to Cyber Threats - Is It Time for the UK to Refresh Its Cyber Strategy?

-People Overconfident in Password Habits, Overwhelmed by Too Many Passwords

Black Arrow Cyber Advisory 30 July 2024 – Proofpoint “EchoSpoofing” Phishing Campaign

Black Arrow Cyber Advisory 30 July 2024 – Critical Updates for ServiceNow, VMware ESXi and Apple Devices

Black Arrow Cyber Advisory 30 July 2024 – Secure Boot Bypass identified, 200+ models from various vendors affected by PKFail Vulnerability

Black Arrow Cyber Threat Intelligence Briefing 26 July 2024:

-CrowdStrike Insured Losses May Top $1.5B, MSP Insurance Expert Advises “Read the Fine Print” on Your Policy

-Fragmented and Multiplied Cyber Criminal Landscape, Warns New Europol Report

-Ransomware and BEC Make Up 60% of Cyber Incidents

-Over Half of UK Workers Haven’t Received Training on Avoiding Phishing Scams

-Cyber Threat Landscape is ‘The Worst it has Been in the Past Five Years

-In Cyber Security, Mitigating Human Risk Goes Far Beyond Training

-Malware Attacks Surge 30% in First Half of 2024

-AI-generated Deepfake Attacks Force Companies to Reassess Cyber Security, as Deepfakes Demean, Defraud and Disinform

-KnowBe4 Hires Fake North Korean IT Worker, Catches New Employee Planting Malware

-Low Level Cyber Criminals are Pouncing on CrowdStrike Connected Outage

-The Importance of Cyber Resilience in the Face of Global IT Failures

-Russia’s Shadow War Against Europe has Begun as Cyber Attacks Abusing Microsoft Infrastructure Increase

Black Arrow Cyber Advisory 23 July 2024 – Splunk Path Traversal Vulnerability

Black Arrow Cyber Advisory 22 July 2024 - Critical Cisco Secure Email Gateway File Write Vulnerability

Black Arrow Cyber Threat Intelligence Briefing 19 July 2024:

-Crowdstrike: Software Update Triggered Worldwide Microsoft IT Outages

-Nearly Half of SMEs Fell Victim to Cyber Attack in Last Six Months

-Cyber Criminals Exploit AI for Near-Perfect Phishing Emails

-Hotel Wi-Fi: a Hotspot for Cyber Threats

-Cyber Security Can Be a Businesses Enabler

-Navigating Insider Risks: Are your Employees Enabling External Threats?

-How Tabletop Exercises Can Sharpen Incident Response from Chaos to Calm

-Gap Found Between Data Security Perceptions and Breach Reality

-Why Top Leadership Must Foster a Security-Conscious Culture

-Hackers Use PoC Exploits in Attacks 22 Minutes After Release

-There's No Margin for Error in Cyber Security

-UK to Introduce Watered-Down Version of Mandatory Reporting for Ransomware Attacks

-CISOs Must Shift from Tactical Defence to Strategic Leadership

-One-Third of Dev Professionals Unfamiliar with Secure Coding Practices

Black Arrow Cyber Alert 19 July 2024 – IT outages causing chaos worldwide, airports, airlines, hospitals, emergency services, shipping, media, banks affected - CrowdStrike and Microsoft Azure blamed

Black Arrow Cyber Threat Intelligence Briefing 12 July 2024:

-New Study Reveals UK Businesses at Risk from Imminent Cyber Attacks

-The Escalating War Against Email-Based Espionage and Fraud

-Trade the Comfort of Security Theatre for True Security

-Traditional Cyber Security Measures are No Longer Enough

-Threats to NATO Countries Escalate, as NATO Outlines Internet Doomsday Plan

-In Ransomware Attacks, Expect to Lose 43 Percent of Affected Data Even if You Pay

-New Ransomware Scam Will Hassle You with Phone Calls Until You Pay Up

-China's APT40 Gang is Attacking Vulnerabilities Within Hours of Public Release

-New Survey: Generative AI and Phishing Concerns, Employees Put Corporate Data at Risk

-The Urgent Need for Digital Executive Protection: A CEO’s Perspective

-Businesses Must do Better to Understand Complexity of Business Email Compromise

-Ransomware Surges Annually Despite Law Enforcement Takedowns

Black Arrow Cyber Threat Intelligence Briefing 05 July 2024:

-Nearly 10 billion Passwords Leaked in the Largest Compilation of All-time

-Half of Employees Fear Punishment for Reporting Security Mistakes

-New RUSI Report Exposes Psychological Toll of Ransomware

-Cyber Extortion Soars: SMBs Hit Four Times Harder

-2024 Is Already the Year of the Cyber Attack

-Survey Reveals Growing Lack of Cyber Security Confidence

-Cyber Security is Worth the Spend

-Only 13% of Organisations are Cyber Mature

-Full-Blown Cyber War: a Hollywood Worthy Scenario

-Rising Risks Set to Drive Huge Investment in Cyber Security

-Authorised Push Payment Fraud Singled Out as Biggest Financial Crime Threat

-Setting the Tone at the Top to Manage Enterprise Risk

-Cyber Criminals are Free to Exploit Vulnerabilities Without Fear

Black Arrow Cyber Threat Intelligence Briefing 28 June 2024:

-Cyber Attacks on The Rise with Financial Sector a Top Target, Report Reveals

-Cloud Resources Have Become Biggest Targets for Cyber Attacks, Finds Thales

-Hackers Grow More Sinister and Brazen in Hunt for Bigger Ransoms

-1 Out of 3 Breaches Go Undetected

-Optiv Report Shows Nearly 60% Increase in Security Budgets as Most Organisations Experience Cyber Breaches and Incidents

-Why Are Threat Actors Faking Data Breaches?

-China-Sponsored Attackers Target 40K Corporate Users in 90 Days

-Cyber Security Neglect: The Silent Killer of Businesses

-Third of Organisations Have Suffered Three or More Data Breaches in the Last 24 Months

-75% of New Vulnerabilities Exploited Within 19 Days

-It’s a Hard Time to Be a CISO. Transformational Leadership is More Important Than Ever.

-Tackling The Role Human Error Plays in Data Breaches

Black Arrow Cyber Threat Intelligence Briefing 21 June 2024:

-Hackers Switch Focus to Cloud Apps for Data Theft, as Cloud Services Increasingly Seen as Huge Soft Target by Attackers

-The “Spammification” of Business Email Compromise Spells Trouble for Businesses Around the Globe, 1 in 10 Email-Based Attacks are Now Business Email Compromise

-Regulatory Changes Are on the Horizon. Are Companies Ready?

-How Hackers Can Crack Your Password in an Hour

-US Bans Kaspersky Software, Citing National Security Risks

-Quarter of Firms Suffer an API-Related Breach

-More than 70% of Companies Increased Spending on Proactive Security

-The Resurgence of Major Data Breaches?

-Is Cyber Becoming a Primary Domain of Warfare?

-Cyber Threats Present Ever Greater Risks to International Peace and Security: UK Statement at UN Security Council

-Cyber Security and AI at Top of Risk List for UK Trustees

-Qilin: We Knew Our Synnovis Attack Would Cause a Healthcare Crisis at London Hospitals

-Ransomware Attacks Are Getting Worse