Storm⚡️Watch | Cyber Podcast | Disney Menus Hacked, Pacific Rim APT Campaign Exposed, and Zero-Days Found Using AI
Summary: This episode covers a terminated Disney World employee who allegedly hacked into the park's menu system to alter critical peanut allergy information, alongside Sophos research on a multi-year nation-state APT campaign targeting edge devices across the Pacific Rim. GreyNoise also reports finding zero-day vulnerabilities in live streaming cameras with AI assistance, CVE-2024-8956 and CVE-2024-8957, which CISA has added to its Known Exploited Vulnerabilities catalog.
Why it matters: An insider altering allergen data on a menu is a direct physical-safety attack, not a data breach, and the two camera zero-days are already in CISA's exploited catalog, meaning the window for patching has closed.
Read the original at GreyNoise Blog ↗
- Topics
- Threat Actors & Nation-State
- Mentions
- CVE-2024-8956CVE-2024-8957
- Related
- Grey Noise Intelligence Discovers Zero-Day Vulnerabilities in Live Streaming Cameras with the Help of AI Cyber Risks ·Grey Noise Intelligence Discovers Zero-Day Vulnerabilities in Live Streaming Cameras with the Help of AI | Grey Noise Blog Cyber Risks ·CVE-2024-8957: PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability Known Exploited Vulnerabilities · Nov 04, 2024