A critical vulnerability in Atlassian Data Center products allows for unauthorized access to sensitive files.
With reports confirming the flaw is currently being used in real-world attacks, administrators must review their instances and apply updates immediately to secure their environments.
Critical issue in Atlassian products
Within a short time of the announcement of a critical security issue in Atlassian Data Center products, there has already been intense activity. Attackers are exploiting this vulnerability to gain unauthorized access to users' files.
Fraud and arrests
Zohar Pinhasi, owner of the company MonsterCloud, is facing charges of fraud against victims of cyberattacks. According to authorities, Pinhasi allegedly did not actually help victims recover their files, but paid the ransom demanded by the attackers and then charged his customers very high amounts.
At the same time, American authorities proceeded to arrest a third suspect linked to the ShinyHunters cybercrime group.
Certificate theft and new risks for iPhone
Unknown attackers breached third-party systems and stole Google digital certificates. The attack affected websites in countries including Ghana, American Samoa, and Sierra Leone.
Additionally, a new version of the P7 DarkSword program for iPhones has been detected. This malware can steal passwords from the user's device, as well as cryptocurrencies directly from the phone.
Artificial intelligence and other threats
OpenAI has disrupted two disinformation operations (Dark Clark and Bogus Bylines) from Russia and Iran. The perpetrators were using artificial intelligence to create fake news and influence public opinion.
In another incident, a vulnerability in an NVIDIA tool (DCGM Exporter) allowed unknown attackers to cause a service crash on thousands of computers.
Finally, the authorities note the following:
- The FBI dismantled infrastructure of the Flax Typhoon group related to China.
- The US Department of Justice has convicted Jonathan Spalletta of wire fraud and money laundering from attacks on the Uranium Finance exchange.
- New malicious programs (2CLoader, AvisLoader, Sauron Loader) were detected that spread viruses and tools for remote computer control.
Top comments (0)