Este reporte corresponde a una selección de las últimas noticias, alertas de seguridad, vulnerabilidades, ataques y casos de estudio observados durante las últimas horas. Esta información ha sido recopilada para entregar un panorama general de las amenazas más importantes del momento. El objetivo principal es dar visibilidad rápida sobre los cambios en la tendencia y la evolución del cibercrimen para generar conciencia y estrategias de protección en base a estos riesgos emergentes.
Noticias y Casos de Estudio
- The metaverse brings a new breed of threats to challenge privacy and security gatekeepers | CSO Online
- Cybersecurity Worries Around Hybrid Working Drop, but Many IT Leaders Still Concerned Over Cyber-Skills Gap (darkreading.com)
- Supply Chain Security Global Market Report 2022: Sector to Reach $3.5 Billion by 2027 at an 11% CAGR (darkreading.com)
- International Counter Ransomware Task Force kicks off – The Record from Recorded Future News
- ChatGPT Can Be Used to Create Dangerous Polymorphic Malware (gbhackers.com)
- Google Ads invites being abused to push spam, adult sites (bleepingcomputer.com)
- GTA Online bug exploited to ban, corrupt players’ accounts (bleepingcomputer.com)
- US Supreme Court leak investigation highlights weak and ineffective risk management strategy | CSO Online
Ciberataques e Incidentes
- Riot Games hacked, now it faces problems to release contentSecurity Affairs
- PLAY ransomware group claims attack on Arnold Clark, one of Britain’s largest car dealerships – The Record from Recorded Future News
- Los Angeles Unified School District confirms SSNs leaked in September ransomware attack – The Record from Recorded Future News
- Riot Games to pause updates after social engineering attack – The Record from Recorded Future News
Vulnerabilidades
- Unified CM SQL Injection Flaw Let Attackers Execute SQL Queries (gbhackers.com)
- Detect CVE-2022-47966 Exploits: Critical Zoho ManageEngine RCE Vulnerability Under Active Exploitation – SOC Prime
- CISA warns of critical ManageEngine RCE bug exploited in attacks (bleepingcomputer.com)
- About the security content of iOS 15.7.2 and iPadOS 15.7.2 – Apple Support
Ransomware (nuevas víctimas publicadas)
| Fecha de Publicación | Título de la Publicación | Actor de Amenazas |
|---|---|---|
| 2023-01-23 | A?????L S?????????? ???? | play |
| 2023-01-23 | CloudCall & | vicesociety |
| 2023-01-22 | miguelmechanical.com | lockbit3 |
| 2023-01-22 | ibb-business-team.de | lockbit3 |
| 2023-01-21 | payroll2u.com | lockbit3 |
| 2023-01-21 | https://www.pillar.ca | royal |
| 2023-01-21 | HRL Technology Group | bianlian |
| 2023-01-21 | N**** | bianlian |
| 2023-01-21 | A | bianlian |
| 2023-01-21 | mfa.gov.ua | freecivilian |
| 2023-01-21 | minagro.gov.ua | freecivilian |
| 2023-01-21 | mon.gov.ua | freecivilian |
| 2023-01-21 | kmu.gov.ua | freecivilian |
| 2023-01-21 | gkh.in.ua | freecivilian |
| 2023-01-21 | bdr.mvs.gov.ua | freecivilian |
| 2023-01-21 | kyivcity.com | freecivilian |
| 2023-01-21 | motorsich.com | freecivilian |
| 2023-01-21 | mtsbu.ua - OVER 3 TB | freecivilian |
| 2023-01-21 | health.mia - 96.7 GB | freecivilian |
| 2023-01-21 | minregion.gov.ua - 904 GB | freecivilian |
| 2023-01-21 | wanted.mvs.gov.ua - 3.29 GB | freecivilian |
| 2023-01-21 | e-driver.hsc.gov.ua - 431 GB SOLD | freecivilian |
| 2023-01-21 | diia.gov.ua - 765 GB *NEW* | freecivilian |
| 2023-01-21 | https://cadmet.com/ | royal |
| 2023-01-21 | Jeppesen | blackbasta |
| 2023-01-21 | The Exchange Bank | blackbasta |
| 2023-01-21 | Sterling | blackbasta |
| 2023-01-21 | NatureWorks | blackbasta |
| 2023-01-20 | SOFTEQ.COM FILES PART7 - Projects\ PUBLISHED | clop |
| 2023-01-20 | LOESCHGROUP.DE FILES PART14 - 192.168.101.34\DATEN\Media\Img\ PUBLISHED | clop |
| 2023-01-20 | ORDEREXPRESS.COM.MX FILES PART15 - 10.10.2.246\CCOECUMPLIMIENTO\ PUBLISHED | clop |
Alerta Temprana de Riesgos Cibernéticos (ATRc®)
Attack Surface Management
Cyber Threat Intelligence
