4th November – Threat Intelligence Report

Category	Details
Top Attacks and Breaches	– Free (France): Cyberattack exposed personal data of up to 19M customers; no passwords or bank details compromised. – San Joaquin County Superior Court: Disrupted court services, affecting case management and public records. – AEP (Germany): Ransomware attack disrupted medicine supplies to over 6,000 pharmacies. – HACLA (USA): Targeted by Cactus ransomware; 861GB of personal and financial data claimed stolen. – Ukrainian Cyber Alliance: Disrupted parking payment systems in Tver, Russia, amid ongoing conflict. – French Ministry of Labor: Cyberattack on service provider exposed personal data of individuals aged 16–25. – Interbank (Peru): Data breach exposed financial information; investigations ongoing.
Vulnerabilities and Patches	– Synology RISK:STATION (CVE-2024-10443): Zero-day remote code execution flaws patched within 48 hours. – QNAP SQL Injection (CVE-2024-50387): Critical zero-day vulnerability patched in SMB Service v4.15.002. – AI Power Complete AI Pack Plugin (CVE-2024-10392): Arbitrary file upload flaw patched; affected ~10,000 WordPress sites.

Read full article:https://research.checkpoint.com/2024/4th-november-threat-intelligence-report/

Disclaimer: The above summary has been generated by an AI language model