Supplemental Cyber Highlights – November 02, 2023

The following posts are useful for general awareness of current threats, vulnerabilities, guidance, and other cyber-related news or updates. These resources have been curated by the WaterISAC analyst team as items of broad relevance and benefit that do not need supplemental analysis at this time.

IT Vulnerabilities, Malware & Threats

• FBI ‘keeping a close eye’ on Iranian hackers as Israel-Hamas war intensifies (The Record)
• Palo Alto Reveals New Features in Russian APT Turla’s Kazuar Backdoor (Infosecurity Magazine)
• Atlassian CISO warns that new vulnerability can cause ‘significant data loss’ (The Record)
• Could a threat actor socially engineer ChatGPT? (Security Intelligence)
• Suspected Exploitation of Apache ActiveMQ CVE-2023-46604 (Rapid 7)

Ransomware

• Boeing Confirmed Its Services Division Suffered a Cyberattack (Security Affairs)
• The dangers of dual ransomware attacks (Help Net Security)
• Companies scramble to integrate immediate recovery into ransomware plans (Help Net Security)
• Ransomware attacks set to break records in 2023 (Help Net Security)
• Step-by-step through the Money Message ransomware (Sophos)

General Awareness

• MITRE Releases ATT&CK v14 With Improvements to Detections, ICS, Mobile (Security Week)
• Cyber attacks cause revenue losses in 42% of small businesses (Help Net Security)
• A Ukrainian Company Shares Lessons in Wartime Resilience (Dark Reading)