Latest News Articles



--- TLP:WHITE ---

News

− Russian Hackers Target Europe with HeadLace Malware and Credential Harvesting

The Russian GRU-backed threat actor APT28 has been attributed as behind a series of campaigns targeting networks across Europe with the HeadLace malware and credential-harvesting web pages.

https://www.recordedfuture.com/grus-bluedelta-targets-key-networks-in-europe-with-multi-phase-espionage-camp

− Information of Hundreds of European Politicians Found on Dark Web

Proton, working with Constella Intelligence, conducted a study where they searched the dark web for around 2,300 official government email addresses of British, French, and European parliament members. The study found that 918 email addresses were leaked to cybercrime marketplaces, and British parliament members were impacted the most.

https://proton.me/blog/politicians-exposed-dark-web

− New V3B phishing kit targets customers of 54 European banks

Cybercriminals are promoting a new phishing kit named 'V3B' on Telegram, which currently targets customers of 54 major financial institutes in Ireland, the Netherlands, Finland, Austria, Germany, France, Belgium, Greece, Luxembourg, and Italy.

https://www.resecurity.com/blog/article/cybercriminals-attack-banking-customers-in-eu-with-v3b-phishing-kit

− London hospitals declare emergency following ransomware attack

Attack takes out third-party testing and diagnostics provider critical to care.

https://arstechnica.com/security/2024/06/london-hospitals-declare-emergency-following-ransomware-attack/

Vulnerabilities

− PoC Published for Exploited Check Point VPN Vulnerability

PoC code targeting a recent Check Point VPN zero-day has been released as Censys identifies 14,000 internet-accessible appliances.

https://www.securityweek.com/poc-published-for-exploited-check-point-vpn-vulnerability/

− Vulnerability exists in multiple Check Point Quantum products (CVE-2024-24919)

Exploitation of this vulnerability potentially allows an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades.

https://www.ncsc.gov.ie/pdfs/2405290122_Check_Point_Quantum_Vulnerability.pdf

Community News

− NCSC Conference 2024

The National Cyber Security Centre (NCSC) is hosting its first national conference to promote cybersecurity awareness, facilitate stakeholder engagement, and share industry insights. The Conference is the premier cybersecurity event of the Irish public sector. It gathers over 280 cybersecurity leaders and professionals for a day of networking, sharing knowledge, and collaborative efforts on 25th June in Dublin Castle.

https://www.ncsc-conference.ie/conference

--- TLP:WHITE ---