IKEA breach, Agco attack, BIG-IP PoC, and more.

Infosec Overnights - Daily Security News

Episode 235 - 07 May 2022
IKEA breach - https://www.infosecurity-magazine.com/news/data-breach-ikea-canada/
Agco attack -
https://www.securityweek.com/ransomware-attack-hits-production-facilities-agricultural-equipment-giant-agco
DCRat upgrade - https://www.zdnet.com/article/beware-this-cheap-and-homemade-malware-is-surprisingly-effective/
Trend Micro miss - https://www.bleepingcomputer.com/news/security/trend-micro-antivirus-modified-windows-registry-by-mistake-how-to-fix/
BIG-IP PoC- https://portswigger.net/daily-swig/big-ip-proof-of-concept-released-for-rce-vulnerability-in-f5-network-management-tool
Hi, I’m Paul Torgersen. It’s Monday May 9th, 2022, and this is a look at the information security news from overnight.
From Infosecurity-Magazine.com:
IKEA has notified the Canadian government about a data breach involving the personal information of about 95,000 customers. The company said that no financial or banking information was involved. How and why the data got out is not known. IKEA says there is no action required by their customers at this time.
From SecurityWeek.com:
Agco announced that it has been the victim of a ransomware attack that impacted some of its production facilities. The company has launched an investigation but says it will be at least several days before they can repair their systems and return operations to normal. No word yet on the threat actor or the malware strain involved.
From ZDNet.com:
The DCRat backdoor malware has been redesigned and relaunched, and it is quite the little Swiss Army knife. It can steal a variety of information, take screenshots, clipboard contents, even has a keylogger. But the two really amazing things? This baby was developed and maintained by one person, not a big syndicate. And you can buy it on the dark web for about $5 bucks.
From BleepingComputer.com:
Trend Micro antivirus has fixed a false positive affecting its Apex One endpoint security solution that caused Microsoft Edge updates to be tagged as malware and the Windows registry to be incorrectly modified. Trend Micro says they have updated the pattern to alleviate the problem, and also published a work around in case the pattern fix didn’t. Details in the article.
And last today, from PortSwigger.net:
We talked last week about the critical vulnerability in F5’s BIG-IP networking software. Well, now a proof-of-concept has been released. If you are one of the more than 35,000 companies using this network management software, get your updates taken care of. And App developers using BIG-IP services should immediately take steps to mitigate the vulnerability until the patch is installed.
That’s all for me today. Remember to LIKE and SUBSCRIBE. And as always, until next time, be safe out there.