Coffee Talk with SURGe: 2023-JUNE-13 Fortinet, Barracuda, MOVEit Transfer, CISA Directive, DPRK
Grab a cup of coffee and join Mick Baccio, Ryan Kovar and Audra Streetman for another episode of Coffee Talk with SURGe. The team from Splunk will discuss the latest security news, including:
- Fortinet fixes critical RCE flaw in Fortigate SSL-VPN devices, patch now:
- https://www.bleepingcomputer.com/news/security/fortinet-fixes-critical-rce-flaw-in-fortigate-ssl-vpn-devices-patch-now/
- Barracuda Urges Replacing — Not Patching — Its Email Security Gateways:
- https://krebsonsecurity.com/2023/06/barracuda-urges-replacing-not-patching-its-email-security-gateways/
- MOVEit Transfer Vulnerability Advisory from CISA:
- https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-158a
- STRT Analytic Story for MOVEit Transfer vulnerability:
- https://research.splunk.com/stories/moveit_transfer_critical_vulnerability/
- Americans should prepare for cyber sabotage from Chinese hackers, US official warns:
- https://www.reuters.com/world/americans-should-prepare-cyber-sabotage-chinese-hackers-us-official-warns-2023-06-12/
- Binding Operational Directive 23-02:
- https://www.cisa.gov/news-events/directives/binding-operational-directive-23-02
- How North Korea’s Hacker Army Stole $3 Billion in Crypto, Funding Nuclear Program:
- https://www.wsj.com/articles/how-north-koreas-hacker-army-stole-3-billion-in-crypto-funding-nuclear-program-d6fe8782