ATF Confirms Serious Cybersecurity Incident in Isolated System
The U.S. ATF confirmed an incident in a system separated from its enterprise network. The agency has not yet confirmed Qilin’s involvement or any data breach.
Category Cybersecurity
News about cyberattacks, vulnerabilities, zero-day flaws, ransomware, malware, data breaches, security updates, and IT system protection.
MAG Confirms Customer Data Breach at Three UK Airports
Manchester Airports Group confirmed that an unauthorized third party obtained some customer data. The incident did not affect airport operations or payment information.
Signal Fixes Bugs in SGX Contact Discovery Service
V12 researchers identified two bugs in Signal’s Contact Discovery Service Icelake. Public commits confirm related server-side fixes, but exploitation in practice has not been confirmed.
CISA Adds ownCloud CVE-2023-49105 to Actively Exploited Vulnerabilities
The U.S. cybersecurity agency CISA added the CVE-2023-49105 vulnerability in ownCloud Server to its Known Exploited Vulnerabilities catalog. Unpatched instances may expose users’ files to unauthorized reading, modification, or deletion.
Trump Declares Emergency Over Risks from Foreign Equipment in the U.S. Power Grid
Executive Order 14420 paves the way for restricting selected foreign technologies used in the U.S. power grid, including industrial control systems and remote maintenance.
U.S. Seizes Domains of QScan and QTRouter Platforms Linked to QTFY
U.S. authorities took the QScan and QTRouter platform domains offline. According to the DOJ, they were used by the Chinese group QTFY to scan for vulnerabilities and mask its activity.