COMPANY BLOGPOSTED May 12, 2023

Threat Intelligence Report - May 12, 2023.

The NetFire Threat Intelligence Report contains a weekly collection of key developments to be aware of along with action tips from NetFire.

NetFire Threat Intelligence Team

ChatGPT Confirms Data Breach Raising Security Concerns

ChatGPT experienced a data breach due to a flaw in the Redis open-source library, exposing chat logs and possibly some payment information for under 1% of users.

NetFire Action Tip: Be extra vigilant when working with open-source libraries and be wary about feeding AI code since it may not yet have safeguards in place to protect against the generation of malicious code.

WordPress Elementor Plugin Bug Let Attackers Hijack Accounts On 1 Million Sites

A vulnerability in the popular WordPress plugin, "Essential Addons for Elementor," allows remote attackers to gain administrator rights by exploiting an unauthenticated privilege escalation flaw in the plugin's password reset functionality, potentially leading to unauthorized access to private information, website defacement, malware distribution, and other brand reputation issues.

NetFire Action Tip: Companies should update plugins promptly, specifically to version 5.7.2 for this addon, and enforce validation checks for password reset requests to prevent unauthorized access.

Multinational Tech Firm ABB Hit By Black Basta Ransomware Attack

Swiss multinational ABB, a leading electrification and automation technology provider, suffered a Black Basta ransomware attack, impacting its business operations and affecting customers like Volvo, Hitachi, and local governments.

NetFire Action Tip: Combine early threat detection with the right training and vigilance among your human workforce. If your business is in industrial controls, critical infrastructure, or energy space, expand your threat radius to protect against direct and indirect threats.

Universities Are Taking Steps to Integrate Cybersecurity Into Research Projects At Their Earliest Stages

Universities like the University of Cincinnati and Indiana University are adopting tailored cybersecurity measures to protect research data without compromising efficiency. They are bridging the gap between research and cybersecurity teams, utilizing tools like encryption and multi-factor authentication, providing optional cybersecurity services, and involving researchers early in projects to ensure proper security while maintaining a balance between strong cybersecurity and smooth research operations.

NetFire Action Tip: Get researchers and cybersecurity teams collaborating early in projects to ensure proper security while maintaining a balance between strong cybersecurity and smooth research operations. Utilize encryption, multi-factor authentication, and other tools to gain maximum protection while maintaining momentum.

Kingston’s SSD Firmware Has Coldplay Lyrics Hidden Within It

A researcher found Coldplay lyrics in Kingston's SSD firmware, raising concerns about potential security or functionality issues. Although not directly harmful, the incident highlights the need for rigorous software auditing and quality control to avoid the inclusion of unauthorized or detrimental code in future products.

NetFire Action Tip: The incident, while humorous, highlights the need for rigorous software auditing and quality control to avoid the inclusion of unauthorized or detrimental code in future products.

#NetFireIntelligence #SecureCloud #AI #Wordpress #Ransomware #Cybersecurity #ThreatIntelligence