Infosec Wrap Up - August 25, 2023

Service Providers Servers Wiped https://www.theregister.com/2023/08/23/ransomware_wipes_cloudnordic/ Critical Zoho Vuln Exploited https://thehackernews.com/2023/08/lazarus-group-exploits-critical-zoho.html Virtual CISO Services https://vcisoserices.com Wiffy Recon Malware https://thehackernews.com/2023/08/new-whiffy-recon-malware-triangulates.html JupiterX WordPress Plugin Vuln https://www.bleepingcomputer.com/news/security/jupiter-x-core-wordpress-plugin-could-let-hackers-hijack-sites/ Duolingo’s Vulnerable API Exploited https://www.infosecurity-magazine.com/news/data-26m-duolingo-users-leaked/ Unplug Barracuda ESG Now https://www.scmagazine.com/news/fbi-unplug-exploited-barracuda-esg-appliances-now Spear Phishing https://www.esecurityplanet.com/networks/how-to-prevent-spear-phishing-attacks/