Storm Watch | Cyber News | New Relic Breach Update, Word Press Phishing Scam, and more.
Summary: New Relic identified unauthorized access to its staging environment after an employee account was compromised through stolen credentials and social engineering, and the actor used those credentials to view certain customer data in that environment. The episode also covers a WordPress phishing campaign that poses as the WordPress team, cites the invalid identifier CVE-2023-45124, and installs a plugin with the slug wpress-security-wordpress that adds a hidden administrator user named wpsecuritypatch.
Key Takeaway: IRGC-affiliated actors using the persona "CyberAv3ngers" are actively compromising Israeli-made Unitronics Vision Series PLCs used in the Water and Wastewater Systems Sector and in energy, food and beverage manufacturing, and healthcare, with the PLCs possibly rebranded to appear as different manufacturers.
Read the original at GreyNoise Blog ↗
- Topics
- Phishing & Social Engineering
- Mentions
- CVE-2023-42916CVE-2023-42917CVE-2023-45124CVE-2023-49103CVE-2023-6345
- Related
- CVE-2023-42916: Apple Multiple Products Web Kit Out-of-Bounds Read Vulnerability Known Exploited Vulnerabilities · Dec 04, 2023CVE-2023-42917: Apple Multiple Products Web Kit Memory Corruption Vulnerability Known Exploited Vulnerabilities · Dec 04, 2023CVE-2023-49103: own Cloud graphapi Information Disclosure Vulnerability Known Exploited Vulnerabilities · Nov 30, 2023