What security media and vendors’ research teams have published, newest first. A brief is written from what the publisher puts in its feed, says who reports what, and links to the original; where the feed has only a headline, so do we. These are not authorities: read the claims as theirs.
Krebs on Security · News ·
Widespread PHP Flaw May Cause Many Site Outages Today
PHP flaws may cause site outages, affecting 70% of websites.
Krebs on Security reports that nearly 70% of websites need to update PHP to fix vulnerabilities. Experts say working exploits exist and are being used. The flaws affect PHP 5.4 or later, including Drupal, Magento, Joomla and WordPress sites. Cloudflare has detected some exploitation.
Recommended by the publisher: Websites should update PHP to fix the vulnerabilities, according to security experts.
Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site
Feds suspect ransom negotiator ran ShinyHunters extortion site.
KrebsOnSecurity reports that US federal investigators found executives at two ransomware negotiation firms had close relations with ShinyHunters. One executive allegedly helped operate the extortion site. ShinyHunters has extorted over $70 million from victims this year. The FBI is investigating after the group hacked the FBI recruitment website.
Recommended by the publisher: The FBI recommends no specific action.
UK sanctions Cryptomus for Russian money laundering.
Krebs on Security reports the UK has sanctioned Cryptomus, a cryptocurrency platform, for processing payments that benefit the Russian government. The sanctions freeze Cryptomus assets at UK banks and bar British companies from doing business with it. Chainalysis says Cryptomus has been a key payment processor for dozens of Russian cryptocurrency exchanges and websites hawking cybercrime services. TRM Labs found Cryptomus processed over $7 billion in transactions since 2022, including those associated with child sexual abuse material vendors and terrorist financing networks.
Recommended by the publisher: The UK sanctions aim to disrupt Cryptomus's operations, according to Richard Sanders, a blockchain analyst.
Krebs on Security reports Microsoft fixed more than 1,400 security vulnerabilities in Windows and other software. At least 78 flaws are rated critical. Satnam Narang at Tenable says the number of flaws fixed this month far surpasses the previous record.
Recommended by the publisher: Krebs on Security recommends prioritizing patching known exploited vulnerabilities.
FBI Arrests Executive at Ransomware Negotiation Firm
FBI arrests Canadian cybersecurity firm co-founder.
KrebsOnSecurity reports the FBI arrested a Canadian man in Pennsylvania, allegedly for assisting the ShinyHunters hacking group. The man's company specialized in ransomware negotiations. The FBI declined to comment.
Recommended by the publisher: KrebsOnSecurity will update this post if more information becomes available.
ShinyHunters Extorted Boeing Spin-off Prior to Arrests
ShinyHunters extorted Boeing spin-off.
KrebsOnSecurity reports ShinyHunters extorted a Boeing spin-off, Jeppesen ForeFlight, before the group's leader was detained. The group exploited a PeopleSoft vulnerability to steal data. The FBI is investigating.
Recommended by the publisher: Boeing and Jeppesen ForeFlight are reviewing the matter.