Weekly Security Roundup: Critical Vulnerabilities and Cyber Attacks
Global cybersecurity incidents and emerging threats in this week's update.
1Weekly Security Digest Begins
SecurityAffairs' weekly newsletter compiles the most critical cybersecurity incidents worldwide. This week highlights newly added vulnerabilities by US CISA, U-Boot bugs affecting millions of devices, and critical flaws in Zimbra client.
2Ransomware Threat Persists
Over 9,000 confirmed ransomware attacks have occurred since 2018. A former ransomware negotiator receiving 70 months in prison for collaborating with BlackCat gang demonstrates the scale of legal battles in this field.
3Destructive Malware: GigaWiper
A new backdoor called GigaWiper combines three malware families into a destructive threat. Meanwhile, RedWing Android spyware available for rent via Telegram also stands out among notable threats.
4International Operations and Arrests
INTERPOL's Operation First Light resulted in 5,811 arrests and $293 million seized. Spanish police apprehended a suspect linked to CARR and Z-Pentest groups.
5AI-Powered Security and Vulnerability Management
CISA is using Anthropic's Mythos AI to detect vulnerabilities in US government code. However, critical flaws like Bad Epoll being missed by this system raise concerns.
6Critical Updates for System Security
Emergency patches have been released for numerous critical vulnerabilities including Ubiquiti's UniFi OS command injection flaws, Adobe ColdFusion vulnerabilities, and a 16-year-old Linux KVM bug. Immediate application of these updates is crucial for users.
Original article: Security Affairs — Haftalık Güvenlik Gündemi: Kritik Açıklar ve Siber Saldırılar