Cyber Security Today, June 5, 2024 - New threat actor going after American IT firms, Canada's Auditor General slams federal cybercrime-fighting agencies

This episode reports on a warning to patch Serv-U applications, the workings of the Rafel trojan, and more 

This episode features a discussion on an undiscovered three-year hack, the cause of Snowflake attacks and allegations of how an Australian health insurer was compromised Join Howard Solomon and David Shipley in the weekend review edition of Cybersecurity Today for insights into major cybersecurity incidents.   Topics include a three-year undetected hack by the Velvet Ant gang, major breaches involving personal data theft, the Medibank hack, misuse of Snowflake passwords, and the recent CDK Global cyberattack affecting car dealerships. Learn about the latest developments and cybersecurity lessons from these significant events.   00:00 Introduction and Overview 00:40 Weekly Headlines Recap 04:15 In-Depth Analysis: Three-Year Undetected Hack 14:27 Medibank Data Breach Investigation 25:18 Snowflake Data Breaches Update 30:04 CDK Global Cyber Attack 33:47 Conclusion and Final Thoughts    

This episode reports on how gullible employees are falling for a scam and cutting and pasting malware into their organization's IT systems, and more 

This episode reports on how outdated software played a role in a lengthy hack, the latest VMware security update, and more

This episode reports on complaints about the proposed UN cybercrime treaty, servers used by Islamic State terrorists shut, and more 

This episode includes a discussion on Microsoft and Google's offer to help U.S. rural hospitals tighten their cybersecurity, a report on top network vulnerabilities found by penetration testers and the latest news on hacks of Snowflake customers.

This episode reports on the latest ransomware news, another North Korean threat actor putting  malicious packages on the NPM registry, vulnerabilities in some open source AI apps, and more

This episode reports on the latest patches from Microsoft, Nvidia, JetBrains and ARM, as well as action by the Privacy Commissioner of Canada 

Microsoft has listened to criticism about the supposedly helpful tool, and more

This episode features a discussion of data thefts from Snowflake data stores, more on the controversy over Microsoft Recall and the Auditor-General's report on Canada's cyber fighting agencies