Threat Source newsletter (Feb. 2, 2023): I bid you all adieu
Summary: Cisco Talos reported a new Lazarus campaign exploiting unpatched Zimbra devices to target medical research and energy industries and their supply chain partners, gaining network access and escalation privileges. The newsletter also noted that Google Fi suffered a customer data breach via T-Mobile, reported to have occurred in November 2022 but not discovered until early January 2023.
Why it matters: Lazarus is reaching into medical research and energy supply chains through unpatched Zimbra appliances, and the Google Fi breach sat undetected from November 2022 into January 2023 - two reminders that the gap between compromise and discovery is where the damage accumulates.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026