DCTIB ‐ November 3, 23 ‐ Kazuar upgraded, Clop ransomware gang gets 600,000 federal employees PII

Daily Cyber Threat Intelligence Brief

In this episode:

First up, we'll explore how the upgraded Kazuar backdoor Trojan has resurfaced with stealthier moves, targeting Ukraine's defense sector. Could your data be at risk from these advanced espionage tactics? Next, we dive into the latest CVE-2023-36022 vulnerability in Microsoft Edge. With remote code execution on the table, what does this mean for the everyday user? And in our main segment, we unravel the alarming breach by the Clop ransomware gang that's exposed over half a million US federal employees' email addresses.

Arm yourself with knowledge and join us at the vanguard of digital defense. Subscribe for a front-row seat to the ongoing battle in the binary world of zeros and ones. 💻⚔️🛡️ #CybersecurityUpdate #ransomware #InfoSec

🔗LINKS

Threat Landscape Overview:

https://www.darkreading.com/remote-workforce/okta-employee-data-exposed-third-party-vendor

https://www.bleepingcomputer.com/news/security/new-macos-kandykorn-malware-targets-cryptocurrency-engineers/

https://krebsonsecurity.com/2023/11/russian-reshipping-service-swat-usa-drop-exposed/

https://www.darkreading.com/endpoint/upgraded-kazuar-backdoor-offers-stealthy-power

Vulnerabilities:

https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2023-36022

Ransomware:

https://securityaffairs.com/153486/data-breach/clop-group-us-federal-employees.html