Cyber Security Briefing: Power Outages, Iran Cyberattack, SAP Vulnerabilities, and NSO Group Trial

Major Cyber Incidents and Vulnerabilities

• ⚡ A massive power outage struck the Iberian Peninsula, impacting Spain, Portugal, and southern France, with a cyber attack suspected as the cause.
• 🇮🇷 Iran reported repelling a complex cyber attack targeting national infrastructure, though details are scarce.
• 💻 SAP NetWeaver systems are vulnerable to a critical zero-day flaw allowing unauthenticated file uploads and system compromise, with an emergency patch issued.
• 🇬🇧 A British retailer, Marks & Spencer, paused online operations and told warehouse workers to stay home due to a cyber attack.
• 📄 VeriSource Services disclosed a breach exposing personal data of 4 million individuals, including names, birth dates, and social security numbers.
• 📈 Global automated scanning surged 16.7% in 2024, with threat actors targeting various services and driving a rise in stolen credentials.
• 🔌 CISA disclosed critical vulnerabilities in Planet Technology's industrial switches and network management products, allowing remote attackers admin access.

Legal and Operational Developments

• 🛡️ A Greek court upheld a VPN provider's no-logs policy, acquitting its founder and reaffirming that privacy providers are not responsible for user actions when no data is collected.
• 🎣 Law enforcement dismantled the JokerOTP phishing tool, arresting two individuals involved in over 28,000 attacks and stealing millions.
• ⚖️ In the NSO Group trial, a judge restricted evidence related to clients and victims, shifting focus to NSO Group's conduct and making it harder for them to claim they are not responsible.
• 🇺🇸 Tim Starks from Cyber Scoop discussed developments in the NSO Group trial and the appointment of a new deputy director at CISA with a tech background.

AI and Scientific Urban Legends

• 🤖 A made-up scientific term, "vegetative electron microscopy," has spread into real academic papers due to scanning errors, translation mix-ups, and AI models like GPT-3 and GPT-4 faithfully regurgitating it.