Supply Chain Attack | OSG: Bits, Bytes and Packets

Category Archives: Supply Chain Attack

U.S. Federal Agencies and other countries release advisory that Russian Foreign Intelligence Service (SVR) is exploiting vulnerability in Jetbrains TeamCity globally

December 13, 2023 – 5:50 pm
Posted in Attacks, CISA, Community, Computers and Internet, Cyber security, HAck, Insider threat, Malware, Supply Chain, Supply Chain Attack, Technology, Vulnerability
Tagged APT 29, Authentication bypass, Cozy Bear, CVE-2023-42793, Dukes, IOCs, JetBrains, Nobelium, TeamCity
Leave a Comment

According to CISA, FBI, NSA, Polish Military Counterintelligence, CERT Polska, and UK’s National Cyber Security Centre, Russian actors known by names including APT 29 are and have been exploiting servers hosting JetBrains TeamCity software since at least September, 2023. This software is used for software compilations, including building, testing and releasing software. The potential impact is pretty large, including supply chain operations (think Solarwinds). The article details IOCs

https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-347a

Click to access aa23-347a-russian-foreign-intelligence-service-svr-exploiting-jetbrains-teamcity-cve-globally_0.pdf

Joint advisory

https://nvd.nist.gov/vuln/detail/cve-2023-42793

60 Credit Unions affected by ransomware in likely supply chain attack

December 2, 2023 – 5:52 pm
Posted in Attacks, Business Continuity, Cloud, Computers and Internet, Cyber security, Disaster Recovery, Exploit Warning, HAck, Malware, Outage, Patch Available, ransomware, Supply Chain Attack, Technology, Vulnerability, Vulnerability Management
Tagged ABC7, Citrix Bleed, CNN, Credit Union, msn.com, PII, theregister, Trellence
Leave a Comment

https://www.theregister.com/2023/12/02/ransomware_infection_credit_unions/

https://www.cnn.com/2023/12/01/politics/ransomware-attack-credit-unions/index.html

https://abc7.com/ransomware-attack-in-us-credit-union-outages-trellance-cyberattack-ncua/14133374/

https://www.msn.com/en-us/money/other/60-us-credit-unions-offline-after-ransomware-infects-backend-cloud-outfit/ar-AA1kRVhA

Android Framework vulnerability allows bad actors to escalate privileges on unpatched devices. CISA states Chinese app exploiting to spy on users

April 17, 2023 – 11:29 am
Posted in Android, Attacks, CISA, Computers and Internet, Cyber security, Exploit Warning, Google, Privacy Alert, Smartphones, Supply Chain Attack, Technology, Vulnerability
Tagged Android Framework, Bleepingcomputer.com, CVE-2023-20963, Privilege escalation
Leave a Comment

https://www.bleepingcomputer.com/news/security/cisa-warns-of-android-bug-exploited-by-chinese-app-to-spy-on-users/

In the wake of security products flagging 3CX software where users thought this to be false positives, Microsoft Defender (unrelated) falsely flags legitimate URLs. Fix has been released.

March 31, 2023 – 6:06 pm
Posted in Anti-Virus, Computers and Internet, Cyber security, Malware, Microsoft, Microsoft Patches, Supply Chain Attack, Technology
Tagged False Positive, Microsoft Defender, theregister
Leave a Comment

https://www.theregister.com/2023/03/29/microsoft_defender_url_alerts/

Lessons learned: One of the factors in the LastPass breach was an Engineer’s failure to update Plex on a home computer

March 8, 2023 – 9:41 am
Posted in Attacks, Computers and Internet, Cyber security, Exploit Warning, HAck, Leaked Credentials, Patch Available, Supply Chain Attack, Technology, Vulnerability
Tagged CVE-2020-5741, LastPass, Plex Media Server, thehackernews.com
Leave a Comment

https://thehackernews.com/2023/03/lastpass-hack-engineers-failure-to.html

LastPass completes investigations into their most recent breaches and shares findings. You can read them below but we’ll detail them in coming days about necessary actions

March 1, 2023 – 3:12 pm
Posted in Attacks, Business Continuity, Computers and Internet, Cyber security, HAck, Privacy Alert, Security Education, Social Engineering, Supply Chain Attack, Technology, Work Life Balance
Tagged breach, LastPass
Leave a Comment

https://blog.lastpass.com/2023/03/security-incident-update-recommended-actions/

Booking.com (function(d, sc, u) { var s = d.createElement(sc), p = d.getElementsByTagName(sc)[0]; s.type = ‘text/javascript’; s.async = true; s.src = u + ‘?v=’ + (+new Date()); p.parentNode.insertBefore(s,p); })(document, ‘script’, ‘//cf.bstatic.com/static/affiliate_base/js/flexiproduct.js’);