Weekly Cyber Security News 14/11/2024

Let’s catch up on the more interesting vulnerability disclosures and cyber security news gathered from articles across the web this week. This is what we have been reading about on our coffee break!

Stand-by for a whole lot more spam and phishing emails. It never ends does it?

• Leaked info of 122 million linked to B2B data aggregator breach – The business contact information for 122 million people circulating since February 2024 is now confirmed to have been stolen from a B2B demand generation platform.

I hope you’ve not left the door open to your home NAS? Might want to close that, though it could well be too late if you have an old D-Link one:

• D-Link won’t fix critical flaw affecting 60,000 older NAS devices – More than 60,000 D-Link network-attached storage devices that have reached end-of-life are vulnerable to a command injection vulnerability with a publicly available exploit.

We do like a good car hack don’t we?

• Unpatched Mazda Connect bugs let hackers install persistent malware – Attackers could exploit several vulnerabilities in the Mazda Connect infotainment unit, present in multiple car models including Mazda 3 (2014-2021), to execute arbitrary code with root permission.