State of (in)security - Week 39, 2023
Take action: Another week of patch fatigue. Many critical advisories that impact a massive number of programs and libraries. It's very easy to be optimistic and say "this won't happen". But for your long term reduced stress, it's good to plan and execute the research of how vulnerable you are and possibly patch.
Learn More
In the week between Sept. 25, 2023, midnight and Oct. 2, 2023, midnight we witnessed a total of:
- 11 advisory/vulnerability events
- 20 incident/data breach events
We also shared 3 practical knowledge items
Week over Week comparison of week 39 vs week 38 is a massive dissapointment:
- The advisories and incidents are floating in the same range - 11 advisories versus the previous 10, and 20 incidents verus the previous 22.
- The known impacted individuals from data breaches in week 39 is a massive increase to oveer 47 million.
Total impacted individuals via the events of the week
There were a total of 47,265,050 impacted individuals across 8 incidents, with the largest breach being the Progressive Leasing reports cyberattack and potential data breach incident exposing 40,000,000 individuals. Since not all incidents report a number of impacted individuals, the real number is definitely higher than that.
Cause breakdown of incidents
| Cause | Number of incidents |
|---|---|
| ransomware | 9 |
| third party breach | 5 |
| denial of service | 2 |
Industry breakdown of incidents
| Industry | Number of incidents |
|---|---|
| Finance | 5 |
| Healthcare | 4 |
| Entertainment/Leisure | 2 |
| Education | 2 |
| Other | 1 |
| Aviation | 1 |
| Retail | 1 |
| Government | 1 |
| Hospitality/Events | 1 |
| Manufacturing | 1 |
Read the Event Details of the Week
Knowledge
- active exploit | Spyware injected into vulnerable iOS and Android Devices through Man-In-The-Middle Attacks
- data leak | Data source with billions of previously leaked credentials exposed once again
- active attack | Hackers try to inject password stealing code in GitHub by posing as Dependabot automated updates
Vulnerabilities
- critical vulnerability | Cisco patches critical and high severity issues in Catalyst SD-WAN
- critical vulnerability | LibreOffice releases patches for WebP vulnerability
- critical vulnerability | Google libwebp critical vulnerability impacts massive number of applications - start checking
- critical vulnerability | JetBrains TeamCity CI/CD fixes critical vulnerabilites
- critical vulnerability | Atlassian releases security updates for server instances
- critical vulnerability | Simple Membership WordPress Plugin vulnerable to account creation, account takeover
- critical vulnerability | Here we go again: Progress reports maximum severity vulnerability in WS_FTP Server
- critical vulnerability | Patch Chrome, one more time: Google fixes another actively exploited flaw
- critical vulnerability | Combining MS SharePoint Server flaws achieve Remote Code Execution
- critical vulnerability | Critical vulnerabilities expose 300k Exim mail globally, patching is terrible
- critical vulnerability | Mozilla fixes Firefox critical flaw in video codec
Incidents
- data breach | Financial Institution Service Corp. repots MOVEit related data breach
- data breach | Ontario child registry BORN reports MOVEit related data breach, impacting 3.4 million people
- data breach | PHH Mortgage Corp reports data breach, exposing SSNs
- data breach | Survey company data breach expose major UK charities and their supporters
- data breach | Crime group Ransomed.VC claims significant data breach on Sony
- data breach | LCS Financial Services debt collectors report data breach
- data breach | California Oak Valley Hospital District reports data breach
- data breach | Motel One hotel chain listed on ALPHV hack site
- data breach | Tahoe Forest Hospital District reports data breach
- data breach | Mixin Network Platform suffers security breach and theft, Suspends Deposits, Withdrawals
- denial of service | Leonardo flight booking system impacted by DDoS attack
- denial of service | UK Royal Family official site hit by Denial of Service attack
- ransomware | Johnson Controls reports data breach after severe ransomware attack
- ransomware | Hong Kong Laureate Forum impacted by ransomware
- ransomware | McLaren HealthCare reports ransomware attack
- ransomware | Let the bickering begin: Second hacker team claims responsibility for Sony breach
- ransomware | Pinal County school districts report ransomware attack, exposes employees
- ransomware | Progressive Leasing reports cyberattack and potential data breach
- ransomware | Baruch College impacted by malware, systems shutdown
- ransomware | Ransomware gang claims a hack on Leekes - Welsh furniture chain
