Attacks, Vulnerabilities and Actors 29 July to 04 August 2024

For a detailed threat digest, download the pdf file here

Summary

HiveForce Labs has recently made significant advancements in identifying cybersecurity threats. Over the past week alone, HiveForce Labs has detected fourteen executed attacks, reported two vulnerabilities, and identified five active adversary. These findings highlight the relentless and escalating danger of cyber intrusions.

Additionally, multiple ransomware groups exploit CVE-2024-37085, an authentication bypass vulnerability in VMware ESXi hypervisors, to gain elevated permissions and deploy file-encrypting malware, despite the flaw being patched on June 25, 2024.

Furthermore, Andariel, a North Korean cyber espionage group since 2009, has shifted from destructive attacks to specialized espionage and ransomware, threatening global industries like critical infrastructure and healthcare. These rising threats pose significant and immediate danger to users worldwide.

Subscribe?to receive our weekly threat digests and newsletters directly in your inbox.