Infosec bits for 2024 week 13

Kgwadi Matenche | March 28, 2024, 2:40 p.m.

Cybersecurity News:

Google fixes Chrome zero-days exploited at Pwn2Own 2024 [Sergiu Gatlan, Bleeping Computer]

InfoReg slaps TransUnion with enforcement notice [Simnikiwe Mzekandaba, ITWeb]

Darcula' Phishing-as-a-Service Operation Bleeds Victims Worldwide [John Leyden, Dark Reading]

Hackers poison source code from largest Discord bot platform [Bill Toulas, Bleeping Computer]

Vulnerabilities & Patches:

17,000+ Microsoft Exchange servers in Germany are vulnerable to attack, BSI warns [Zeljka Zorz, Help Net Security]

Breaches & Leaks:

INC Ransom threatens to leak 3TB of NHS Scotland stolen data [Bill Toulas, Bleeping Computer]

South African packaging giant hit by data breach [Staff Writer, MyBroadband]

Municipalities in Texas, Georgia see services disrupted following ransomware attacks [Jonathan Greig, Recorded Future News]

Others:

Recent ‘MFA Bombing’ Attacks Targeting Apple Users [Brian Krebs, Krebs on Security]

Microsoft Edge Bug Could Have Allowed Attackers to Silently Install Malicious Extensions [Newsroom, The Hacker News]