Security Leftovers

posted by Roy Schestowitz on Feb 16, 2023

Belgium launches nationwide safe harbor for ethical hackers

Belgium has become the first European country to adopt a national, comprehensive safe harbor framework for ethical hackers, according to the country’s cybersecurity agency.

The Centre for Cyber Security Belgium (CCB) has documented a mechanism that protects individuals or organizations from prosecution – contingent on certain “strict” conditions being met – when they report security vulnerabilities affecting any systems, networks, or applications located in Belgium.

The framework applies regardless of whether vulnerable technologies are owned by private or public sector organizations.

• Remote code execution flaw patched in Apache Kafka

  Possible RCE and denial-of-service issue discovered in Kafka Connect

• Royal Mail refused to pay ‘absurd’ LockBit ransom, chat logs say [Ed: Microsoft Windows TCO]

  The LockBit ransomware gang has published what it claims is the full transcript of its negotiations with Royal Mail, which continues to experience disruption due to last month’s cyberattack.

  The chat logs negotiating the ransom is the first data that LockBit has published following the cyberattack on Royal Mail, which left the British postal service unable to dispatch certain items overseas. This is despite the Russia-linked ransomware gang’s earlier threats to publish all stolen data on February 9. The logs appear to suggest that this is the day that negotiations between LockBit and Royal Mail came to an end.

• Healthcare giant CHS reports first data breach in GoAnywhere hacks

  Community Health Systems (CHS) says it was impacted by a recent wave of attacks targeting a zero-day vulnerability in Fortra’s GoAnywhere MFT secure file transfer platform.

• Cloudflare thwarts largest reported HTTP DDoS attack

  Cloudflare stated that it had managed to mitigate multiple “hyper-volumetric” DDoS attacks that originated from more than 30,000 IP addresses.

• Airline SAS network hit by hackers, says app was compromised

  Scandinavian airline SAS (SAS.ST) said it was hit by a cyber attack Tuesday evening and urged customers to refrain from using its app but later said it had fixed the problem.

  News reports said the hack paralysed the carrier's website and leaked customer information from its app.

  Karin Nyman, head of press at SAS, told Reuters at 2035 GMT that the company was working to remedy the attack on its app and website.