2nd December – Threat Intelligence Report

Category	Details
Top Attacks and Breaches	- Blue Yonder: Ransomware attack disrupted client services (Starbucks, Sainsbury’s). - Uganda Central Bank: Cyberattack, $16.8M stolen; insiders possibly involved. - Hoboken, NJ: Ransomware attack halted municipal services. - UK NHS Trust: Cyberattack caused IT outages. - Great Plains Hospital: Ransomware exposed 130,000+ records. - IGT: Cyberattack disrupted gaming systems. - Bologna FC: Ransomware led to stolen personal and sponsor data.
Vulnerabilities and Patches	- ProjectSend (CVE-2024-11680): Critical flaw exploited; 99% unpatched instances. - WordPress Plugin (CVE-2024-8672): Arbitrary code execution vulnerability. - Jenkins: High-severity flaws (DoS, XSS) patched.
Threat Intelligence Reports	- Godot Engine Exploit: “GodLoader” malware bypasses AV detection, spreads across platforms. - Salt Typhoon: China-linked APT uses “GhostSpider” backdoor to target Southeast Asian telcos. - RomCom Group: Exploited Firefox and Windows zero-days for RCE.

Read full article:https://research.checkpoint.com/2024/2nd-december-threat-intelligence-report/

Disclaimer: The above summary has been generated by an AI language model