Ninth Salt Typhoon Victim Identified, HIPPA Security Rule Update, Cyberhaven Hack, Zagg Credit card Skimming Breach

CyberHub Podcast

1×

0:00

Current time: 0:00 / Total time: -17:43

-17:43

Ninth Salt Typhoon Victim Identified, HIPPA Security Rule Update, Cyberhaven Hack, Zagg Credit card Skimming Breach

Unpacking the Latest in Cybersecurity: Chinese Cyberattacks, Healthcare Data Breaches, New Federal Rules, and Critical Infrastructure Threats

James Azar

Dec 30, 2024

Transcript

Good morning, Security Gang! With only two episodes left this year, we’re diving into a packed episode filled with critical cybersecurity updates, ongoing investigations, and industry insights. For those who’ve taken a holiday break, welcome back!

For the rest of us who stayed glued to the news, here’s what unfolded over the weekend. Grab your espresso and buckle up for today’s detailed recap.

China’s Salt Typhoon Campaign Expands

Deputy National Security Advisor Ann Neuberger disclosed a ninth telecom company victimized by China’s Salt Typhoon campaign. This revelation came after federal guidance helped identify the breach. Notably, AT&T and Verizon confirmed their involvement but reassured the public that their networks have been cleansed of the threat.

The FCC plans to vote on new cybersecurity regulations next month. However, criticism looms over their failure to enforce the 1994 Telecommunications Security Act effectively. China remains a persistent adversary, and calls are growing for offensive measures to address the ongoing cyber threats.

HHS Steps Up Cybersecurity for Healthcare

Healthcare breaches remain a significant issue, with attackers targeting sensitive patient data. The Department of Health and Human Services (HHS) is proposing new encryption and compliance mandates under HIPAA.

Breaches at Ascension and United Health spotlight the vulnerabilities in healthcare. The healthcare industry often self-regulates with frameworks like HITRUST, leaving HHS lagging. Weak healthcare security exacerbates fraud, increasing costs for consumers and eroding trust.

DOJ Finalizes Rule on Bulk Data Protection

The Department of Justice issued a rule enforcing Executive Order 14117 to safeguard Americans’ bulk sensitive data from foreign adversaries like China and Russia. Overlapping regulations create confusion for companies, while federal agencies struggle with enforcement. Centralize cybersecurity efforts under CISA to streamline compliance and oversight.

CyberHaven Breach Over Christmas

Cybersecurity startup CyberHaven fell victim to a Christmas Day attack, distributing malicious Chrome extensions. The company acted swiftly, removing the malicious package within 60 minutes. Researchers suspect a phishing attack compromised an admin account. The incident highlights the risks of trusted security tools being weaponized.

Critical Vulnerabilities Patched

Palo Alto Networks: Fixed a zero-day vulnerability (CVE-2024-3393) that allowed denial-of-service attacks on their firewalls.
Fort Faith Routers: A command injection flaw (CVE-2024-12856) in industrial routers was exploited to deploy reverse shells. Firmware updates are now available.

E-Commerce Skimming Attack Targets Zag

Zag, known for mobile accessories, reported a breach via their e-commerce provider’s third-party application. Malicious code was injected, exposing customer credit card data. More cases of skimming attacks may emerge as the holiday fallout unfolds.

Flagstar Bank Fined for Misleading Cyber Breach Statements

Flagstar Bank agreed to pay a $3.5 million SEC fine for misrepresenting the impact of a 2021 breach affecting 1.5 million customers. Transparent communication during breaches remains critical for maintaining trust and compliance.

Suspected Russian Sabotage in the Baltic Sea

Finland seized a Russian ship suspected of severing submarine cables in the Baltic Sea. The act is believed to be part of Russia’s economic warfare against NATO-aligned nations. Cable disruptions increase latency and weaken critical communications.

Action List for Security Professionals

Review Telecom Guidance: Ensure your organization is monitoring for Salt Typhoon techniques and securing supply chains.
Strengthen Healthcare Data Encryption: Adopt industry best practices like HITRUST for compliance.
Centralize Cyber Efforts: Advocate for streamlined federal oversight to reduce regulatory confusion.
Validate Security Tools: Audit browser extensions and admin controls to minimize risks.
Patch Critical Vulnerabilities: Apply the latest updates for Palo Alto firewalls and Fort Faith routers.
Enhance Incident Communication: Develop transparent breach response protocols to maintain stakeholder trust.
Monitor Geopolitical Risks: Stay informed about potential infrastructure sabotage and prepare contingency plans.

Discussion about this podcast

CyberHub Podcast

Today’s top cybersecurity news and the latest from Practicing CISO James Azar, tune in to hear how practitioners read, view and work after hearing the latest headlines and how these stories help keep practitioners sharp and ready.

Listen on