QuoIntelligence’s Weekly Intelligence Snapshot for the week of 3 – 11 November is now available! Find a summary here and subscribe to our mailing list below if you want to receive regular updates from us!
Want to read the full story? Subscribe to our newsletter to access the complete Weekly Intelligence Snapshot. Don’t miss out on more intelligence!
Cyber Highlights
Microsoft Patches Actively Exploited Zero Day Vulnerabilities, and Other Major Flaws Impacting Citrix, Palo Alto Products, vCenter, and More
In its November Patch Tuesday release, Microsoft patched 55 vulnerabilities impacting Office products, including two actively exploited zero day vulnerabilities in Microsoft Exchange Server and Microsoft Excel. In addition, we highlight other vulnerabilities in VMware, Citrix, and Palo Alto products worth prioritizing due to their criticality and threat exposure.
Zebra2104: Newly Discovered Initial Access Broker Servicing Multiple Threat Actors
Researchers at BlackBerry discovered an Initial Access Broker dubbed as Zebra2104, providing services to at least three threat actor groups including StrongPity, MountLocker, and Phobos.
Rollups
Industry impacted: Consumer Discretionary, Energy, Financials, Government, Health Care, Industrials, Information Technology
- Zoho ManagedEngine ADSelfService Plus Exploited in Targeted Attacks
- Robinhood Discloses Security Breach Affecting 5 Million Users
- Mediamarkt Victim of Ransomware Attack
Geo Highlights
US Approves Infrastructure Plan that Includes Cybersecurity and Crypto Provisions
Industry impacted: Energy, Financials, Industrials, Information Technology, Utilities
On 5 November, the US passed the Infrastructure Investment and Jobs Act, which will lead to EUR 1 trillion (USD 1.2 trillion) investment in transportation, roads and rail, broadband, waterways, energy systems, and cybersecurity.
Rollups
Industry impacted: Industrials
- EU Offers Solidarity to Poland as Tensions at Border to Belarus Escalate
- US Treasury Sanctions Ransomware Operators and Virtual Currency Exchange
- US Convicts Chinese Intelligence Officer of Espionage Crimes, Attempting to Steal Trade Secrets
