The Good, the Bad and the Ugly in Cybersecurity - Week 43

Oct. 28, 2024, 12:55 p.m.

Description

CISA proposes new security measures to protect sensitive data from adversary nations, following President Biden's Executive Order. A free file recovery tool for early Mallox ransomware victims is released. A novel macOS ransomware, macOS.NotLockBit, is discovered abusing AWS S3 for data exfiltration. A critical Fortinet zero-day vulnerability (CVE-2024-47575) has been exploited in-the-wild since June, potentially affecting over 50 servers. Fortinet has released a patch and provided mitigation strategies for affected customers.

Date

  • Created: Oct. 25, 2024, 8:49 p.m.
  • Published: Oct. 25, 2024, 8:49 p.m.
  • Modified: Oct. 28, 2024, 12:55 p.m.

Attack Patterns

  • macOS.NotLockBit
  • Mallox
  • UNC5820

Additional Informations

  • Technology
  • Defense
  • Finance
  • Telecommunications
  • Government
  • United States of America