#191 - Intel Chat: Lumma Stealer, xWorm, WSDOT & FortiOS

#191 - Intel Chat: Lumma Stealer, xWorm, WSDOT & FortiOS

In this episode of The Cybersecurity Defenders Podcast, we discuss some cutting-edge intel coming out of LimaCharlie's community Slack channel.

  • Lumma Stealer, an information-stealing malware, has been observed using new evasion techniques to avoid detection.
  • Researchers at CloudSEK have uncovered a trojanized version of the xWorm Remote Access Trojan (RAT) builder that is being secretly distributed among cybercriminals.
  • A recent disclosure by security researcher Zach Latta highlights how the Washington State Department of Transportation (WSDOT) inadvertently exposed sensitive server credentials on its public website.
  • A critical authentication bypass vulnerability (CVE-2024-21762) in Fortinet’s FortiOS has been actively exploited in the wild, allowing attackers to execute arbitrary code or gain unauthorized access to affected systems.