The Monthly Threat Report by Hornetsecurity brings you monthly insights into M365 security trends, email-based threats, threat-actor info and commentary on current events in the cybersecurity space. This edition of the Monthly Threat Report focuses on information from the month of July 2024.
Executive Summary
- The CrowdStrike incident continues to have fallout within the cybersecurity industry.
- Microsoft is moving forward with some changes and guidance on kernel access as a direct response to the CrowdStrike incident
- Over the last month there has been some ongoing discussions around cybersecurity regulations and whether something like the CrowdStrike incident can happen again.
- There is a new AI Jailbreak Attack in the wild known as a Skeleton Key attack that allows users to generate normally censored content
- There is a new critical vulnerability in the VMware ESXi Hypervisor that allows authentication bypass. Broadcom has released a patch
HealthEquity, a US Health Savings Account Provider in the US suffered a breach of sensitive records for 4.5 million individuals - This month’s report includes some information regarding the threat actor group Anonymous Sudan, including their Tactics, Techniques, and Procedures.
- This report also includes some commentary on cybersecurity for the ongoing Olympic games.
