Infosec bits for 2024 week 9

Kgwadi Matenche | March 1, 2024, 1:44 p.m.

Cybersecurity News:

NIST Releases Cybersecurity Framework 2.0 [Dark Reading Staff, Dark Reading]

New Silver SAML Attack Evades Golden SAML Defenses in Identity Systems [Newsroom, The Hacker News]

Japan warns of malicious PyPi packages created by North Korean hackers [Bill Toulas, Bleeping Computer]

Vulnerabilities & Patches:

Cisco Patches High-Severity Vulnerabilities in Data Center OS [Ionut Arghire, SecurityWeek]

Breaches & Leaks:

Discount Retail Giant Pepco Loses €15 Million to Cybercriminals [Eduard Kovacs, SecurityWeek]

Pharmaceutical giant Cencora says data was stolen in a cyberattack [Lawrence Abrams, Bleeping Computer]

Rhysida ransomware wants $3.6 million for children’s stolen data [Bill Toulas, Bleeping Computer]

Others:

Citrix, Sophos software impacted by 2024 leap year bugs [Bill Toulas, Bleeping Computer]

Vulnerabilities in business VPNs under the spotlight [Márk Szabó, WeLiveSecurity]