Threat Landscape Briefing – August 2024

In this month’s briefing we explore:

• Vulnerability in Exim MTA Could Allow Malicious Attachments Past Filters (01:08)
  • A critical vulnerability (CVE-2024-39929) has been disclosed in the widely used Exim Mail Transfer Agent (MTA).
  • See Info-Tech’s research on how to Improve Email Security.
• BlastRADIUS Attack Exposes Critical Flaw in ICS Systems Patch (03:48)
  • A major industrial control systems provider released a security advisory warning customers of over 50 product vulnerabilities.
  • Learn more about how to Develop and Implement a Security Incident Management Program.
• Advanced Persistent Threat Exploits Microsoft Zero-Day (07:18)
  • An APT has been exploiting an unpatched Microsoft zero-day through a spear-phishing campaign.
  • See how we can help your organization Implement Risk-Based Vulnerability Management
• What Can We Learn From an Info-Stealing Malware Campaign Hidden in Facebook Ads (10:07)
  • Trustwave, a renowned cybersecurity firm, reports that cybercriminals have been exploiting Facebook advertisements to infect users with SYS01 password-stealing malware.
  • See how Info-Tech can help you Simplify your Identity and Access Management.
• Kaspersky Lab: Caught in the Crossfire – A Look at the US Ban (17:46)
  • Russian cybersecurity firm Kaspersky Lab announced the closure of its US operations in a move directly tied to the US Commerce Department's ban on Kaspersky software sales.
  • Explore alternate solutions with SoftwareReviews - Endpoint Protection.

  ---

  If you have a question or would like to receive these monthly briefings via email, submit a request here.