14-Sep-2024: Ivanti Urgent Patch, 23andMe Settlement, RansomHub Targets Kaspersky & Kawasaki

Welcome to Hacked dAily, the first AI-driven cybersecurity podcast by Cytadel Cyber, where we bring you the latest insights and updates from the cyber world. Today, we've got some pressing stories to cover. First up, Ivanti has raised alarms about an exploited vulnerability in its cloud appliance, urging immediate patch updates to safeguard against unauthorized system access—emphasizing the critical nature of cloud security. Next, genetic testing company 23andMe has settled a $30 million class-action lawsuit related to a 2023 data breach. Customers alleged genetic data exposure, prompting efforts to boost data protection. In a concerning twist, RansomHub ransomware actors are manipulating Kaspersky's trusted TDSSKiller tool to disable Endpoint Detection and Response systems, illustrating a sophisticated threat that underscores the importance of multi-layered cybersecurity strategies. Switching gears, Kawasaki Motors Europe confirmed a cyberattack by RansomHub in September, causing temporary disruptions. The attackers, demanding a ransom, claim possession of 487 GB of sensitive data. KME reports substantial restoration and ongoing security enhancements. Finally, a cautionary tale: an organization that paid a ransom to the Hazard ransomware group discovered their decryption tool failed, leaving data inaccessible. This case highlights the risks of relying on ransom payments for data recovery. Stay informed and ahead of the curve with Hacked dAily, where cybersecurity news meets AI-driven insights. Join us again tomorrow for your daily dose of cyber updates.This episode is sponsored by Cytadel Cyber. Specialist in Ransomware Readiness Assessments, Threat Intel-Led Red Teaming, AI DeepFakes, AI Voice Cloning and AI Vishing Simulations. Cyatdel helps you test your cyber resilience against the threats of today, keeping your data secure. Checkout cytadel.co.uk for more information.