Security Leftovers

posted by Roy Schestowitz on May 17, 2023

• Security advisory: Qt SVG

  A recent potential divide by zero in Qt SVG has been reported and has been assigned the CVE id CVE-2023-32573.

• Brightly Software Notifying 3 Million SchoolDude Users of Data Breach

  Brightly Software has started informing roughly three million users that their personal information was compromised in a recent data breach.

• Discord Informs Users of Data Breach Involving Customer Support Provider

  Communications and social platform Discord is notifying users of a cyber incident involving a third-party services provider.

• WordPress Field Builder Plugin Vulnerability Exploited in Attacks Two Days After Patch

  PoC exploit targeting an XSS vulnerability in the Advanced Custom Fields WordPress plugin started being used in malicious attacks two days after patch.

• PharMerica Discloses Data Breach Impacting 5.8 Million Individuals

  The personal information of more than 5.8 million was compromised in a data breach at national pharmacy network PharMerica.

• Capita Cyberattack Hits UK Pension Funds

  The recent ransomware attack on Capita may impact millions of customers of hundreds of pension funds in the UK.

• Mozilla Privacy Blog: Mozilla weighs in on the EU Cyber Resilience Act

  Cybersecurity incidents and attacks have been on the rise in the past years. Enhancing security and trust is more relevant than ever to protect users online. Legislators worldwide have been contemplating new rules to ensure that hardware and software products become more secure, with the latest example being the EU’s Cyber Resilience Act. Below we present our concrete recommendations on how legislators can ensure that the CRA can effectively achieve its objectives.

  In recent years, the European Commission has taken concrete steps to boost its cyber security capabilities across Europe. After successfully adopting the NISD2 and the EU Cybersecurity Act, the last missing piece of the puzzle is the Cyber Resilience Act (CRA). This latest proposal aims to bolster the security capabilities of hardware and software products in the EU market while ensuring a more coherent framework that facilities compliance.

• Philadelphia Inquirer Hit by Cyberattack Causing Newspaper’s Largest Disruption in Decades

  The Philadelphia Inquirer experienced the most significant disruption to its operations in 27 years due to a cyberattack on Sunday, May 14, 2023.

• Transportation Department breach exposes data of federal employees

  The incident may have affected a total of 237,000 current and former staff across government, according to Reuters.

• We’re celebrating our 10th anniversary!

  From 5 people to almost 220 people. From working from our founders’ apartment to five offices in four countries. From an unknown challenger to being a reference in multiple fields in cyber security. As a company, NVISO has come a long way since 2013 and we want to take a moment to celebrate what we have accomplished together so far.