Artificial Intelligence In Other News: Linux Kernel Exploits, Update on BEC Losses, Cybersecurity Awareness Act
Introduction
This week’s cybersecurity roundup brings attention to several significant stories that may have flown under the radar. From a ransomware attack on Kaiserslautern University in Germany to the release of the 2023 State of Offensive Security report by Bishop Fox, these developments provide valuable insights into the evolving cybersecurity landscape. Additionally, newsworthy updates include the FBI’s report on Business Email Compromise (BEC) scam losses, the passage of the Cybersecurity Awareness Act, and Google’s payments for Linux kernel exploits. Furthermore, the European Parliament’s vote on the AI Act and advancements in quantum-sourced random number generation and AWS security measures are also covered. These stories shed light on the ongoing challenges and advancements in cybersecurity that impact organizations and individuals worldwide.
Kaiserslautern University Ransomware Attack
On June 8, Kaiserslautern University in Germany fell victim to a ransomware attack that impacted its entire IT infrastructure. As a result, the university has struggled to restore services, leading to the unavailability of online services. To prevent further damage, employees and students have been advised not to turn on their business IT devices. This incident highlights the ongoing threat posed by ransomware attacks and the importance of robust cybersecurity measures in educational institutions.
GravityRAT Spyware Targets WhatsApp Backups
Recent reports from ESET indicate that a new version of the GravityRAT spyware is targeting WhatsApp backup files on Android devices. This malware is capable of stealing these backups and receiving commands to delete files. Attackers have been distributing the spyware through trojanized versions of popular applications. This development underscores the need for mobile device users to remain vigilant and adopt best practices to protect their personal data.
Strava Fitness-Tracking App Leaks User Location
Researchers at North Carolina State University have discovered a vulnerability in the Strava fitness-tracking app. The app’s heatmap feature, intended to aggregate user activities for anonymous mapping, can be exploited by attackers to identify the home addresses of highly active users in remote areas. This privacy breach highlights the need for app developers to prioritize user data protection and privacy.
FBI Report on BEC Scam Losses
The FBI has released an updated report on the significant losses resulting from Business Email Compromise (BEC) and Email Account Compromise (EAC) scams. The report reveals that estimated losses have surpassed $50 billion, with over 200,000 victims in the US alone, amounting to reported losses of over $30 billion. These figures serve as a stark reminder of the financial impact these scams have on individuals and organizations. Protecting against BEC and EAC scams requires a combination of technological solutions, employee training, and robust cybersecurity practices.
Bishop Fox’s State of Offensive Security Report
Bishop Fox’s recently published 2023 State of Offensive Security report highlights the increasing adoption of Red Team deployments within organizations. The report indicates that 64% of the surveyed IT and security practitioners are currently utilizing red teaming, and more than half plan to increase their investment in this area in the next 12-24 months. Red teaming provides organizations with valuable insights into their vulnerabilities and helps them strengthen their defenses. This report emphasizes the growing recognition of offensive security measures as an essential component of comprehensive cybersecurity strategies.
Lookalike Attacks Examination by Infoblox
Infoblox, a leading cybersecurity company, has conducted a detailed examination of lookalike domain attacks. These attacks involve the use of visually similar domain names to deceive victims and facilitate phishing attempts. Infoblox provides examples of malicious domains that impersonate their legitimate counterparts, demonstrating the potential risks faced by individuals and organizations. This analysis underscores the importance of robust security measures such as domain monitoring and education to mitigate the risks associated with lookalike attacks.
Cybersecurity Awareness Act
A notable development in cybersecurity legislation is the introduction of the Cybersecurity Awareness Act. This bipartisan legislation requires the Department of Homeland Security (DHS) to provide regular guidance on cybersecurity best practices to the public and private sectors. The act also emphasizes the importance of outreach to entities frequently targeted by ransomware, such as small businesses and underserved communities. This legislation acknowledges the need for increased awareness and collaboration in the face of evolving cyber threats.
Google’s Payments for Linux Kernel Exploits
Google has disclosed that it has paid a total of $1.8 million for reports of Linux kernel exploits as part of its kCTF Vulnerability Rewards Program. More than 60% of the submissions focused on vulnerabilities in the ‘io_uring’ component. As a response, Google has disabled this component on its servers and in Chrome OS, while also limiting its usage on Android and GKE AutoPilot. The company’s commitment to addressing vulnerabilities in the Linux kernel underscores the importance of ongoing security research and collaboration within the open-source community.
European Parliament’s Vote on AI Act
The European Parliament has recently voted in favor of the AI Act by a substantial majority. While the details still need to be agreed upon by the European Council and Commission, the act is expected to heavily focus on privacy and personal rights. It could potentially outlaw areas such as emotion detection and predictive policing. The act also aims to enhance transparency in the use of AI data, with restrictions on the utilization of copyrighted material. This decision by the European Parliament reflects the ongoing debate surrounding the regulation of AI technology and its impact on various sectors.
Advancements in Quantum-Sourced Random Numbers
Quantinuum’s Quantum Origin Onboard brings quantum-enhanced key generation to edge and IoT devices’ encryption systems. By utilizing true random numbers generated by the Quantinuum H-series quantum computer, this technology embeds a quantum seed into the device, significantly improving the security and strength of encryption keys. This advancement demonstrates the potential of quantum computing to enhance existing encryption methods without requiring changes to current encryption software. It highlights the ongoing efforts to develop next-generation security solutions in the face of emerging threats.
AWS Security Measures and Partner Program Launch
Amazon Web Services (AWS) recently removed HTTP header remapping from Amazon API Gateway due to the discovery of an issue and an authorization-caching flaw. However, Velocity Template Language (VTL) transformation, which enables header remapping, remains available as it is unaffected by these flaws. This proactive security response demonstrates AWS’s commitment to addressing vulnerabilities promptly. In addition, cybersecurity firm Dragos has launched a Global Partner Program that offers OT security services, technology, threat intelligence, and training to partners. This program aims to empower organizations to enhance their OT security and strengthen their defensive capabilities.
Conclusion
The stories covered this week provide valuable insights into the evolving landscape of cybersecurity. From the impact of ransomware attacks on educational institutions to the FBI’s report on BEC scam losses, these developments highlight the ongoing challenges faced by individuals and organizations. Additionally, the passage of the Cybersecurity Awareness Act and the European Parliament’s AI Act vote highlight the regulatory efforts being made to address emerging cyber threats and the ethical implications of AI technology. Advancements in quantum-sourced random numbers and AWS’s security measures further underscore the importance of ongoing research and collaboration in the field of cybersecurity. Staying informed about these developments and adopting robust security practices are crucial for individuals and organizations to protect themselves against cybersecurity threats.
<< photo by Dan Nelson >>
The image is for illustrative purposes only and does not depict the actual situation.
