Cyber threats are escalating worldwide, with a recent surge in attacks targeting nations across Latin America, as well as vulnerabilities exposed in Android, Linux, and Microsoft 365. China-linked espionage groups have attacked at least a dozen nations in the region, gathering information on maritime shipping, oil production, and other geopolitical interests.
What Happened
A new denial-of-service (DoS) attack, dubbed "HTTP/2 Bomb," can be launched from a single machine to take down web servers within seconds. The technique works on default HTTP/2 configurations of major web servers, including NGINX, Apache HTTP Server, Microsoft IIS, Envoy, and Cloudflare Pingora. Researchers at OpenAI's Codex software agent discovered the vulnerability under the guidance of offensive security firm Calif.
Meanwhile, a coding gaffe exposed Microsoft 365 accounts to widespread takeover, allowing attackers to steal logins and data. The issue was caused by a disabled security setting meant to protect authentication across Android versions of key apps like Word, PowerPoint, and Excel.
Why It Matters
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that hackers are exploiting vulnerabilities in the Linux kernel and Android operating system. The most recent flaw added to CISA's Known Exploited Vulnerabilities (KEV) catalog is a high-severity integer overflow vulnerability in the Android Framework, which can be leveraged for increased privileges.
"Cyber insurance coverage is slowly changing, and some policies may not provide coverage for social engineering attacks like ClickFix," said a cybersecurity expert. "This highlights the need for organizations to reassess their security measures and ensure they have adequate coverage."
What Experts Say
"A home computer on a 100Mbps connection can render a vulnerable server inaccessible within seconds. Against Apache httpd and Envoy, a single client can consume and hold 32GB of server memory in roughly 20 seconds." — Researchers at OpenAI's Codex software agent
Key Numbers
- **12: Number of nations in Latin America targeted by China-linked espionage groups
Key Facts
Key Facts
- What: Cyber attacks on nations in Latin America, vulnerabilities in Android, Linux, and Microsoft 365
- When: Recent surge in attacks
- Where: Latin America, worldwide
- Impact: Increased risk of data breaches, cyber attacks
What Comes Next
As cyber threats continue to escalate, organizations must prioritize their security measures and ensure they have adequate coverage. This includes reassessing their cyber insurance policies and implementing measures to prevent social engineering attacks.