The Top Cybersecurity News Stories This Month: September 2023

Hackers played the odds and held MGM hostage, was the Lazarus Group at it again? What The Delete Act could mean for Californians. The month of September was full of cybersecurity headlines.

Here are the top 5 cybersecurity stories that emerged this month:

  1. Could North Korea’s Lazarus Group Be The Group Behind The $31 Million CoinEx Heist?

Source: The Hacker News

Working with cryptocurrency, the Lazarus Group has stolen almost $240 Million since they were introduced to the hacking scene in June 2023. Recently, on September 12, 2023, the CoinEx exchange was the target of a heist around the same time Kim Jong Un visited Russia for a suspected arms deal. 

North Korea has a history of targeting cryptocurrency to fund its weapons programs. As these cyber attacks increase in regularity and intensity, North Korea's nuclear and ballistic missile programs soar to new heights. 

Read More

2. Massive Outage At MGM Resorts Because of 10 Minute Phone Call

Source: Engadget

It was confirmed on Monday Sept 11, 2023 that MGM’s casinos were shut down by a cybersecurity issue. The next day, ALPHV/BlackCat ransomware group was claimed responsible for this event and their method was exposed on X by malware archive vx-underground.

Slot machines were reportedly taken offline and the hotel was making reservations using the phone because the website was shut down. The Las Vegas Metropolitan Police department stated that this type of incident is normally passed on to federal agencies.

Read More

3. Californian’s Digital Privacy May Significantly Improve With The Delete Act 

Sources: SecurityWeek

Many companies sell personal information that was never willingly shared with them. The California state Legislature wants to protect citizens’ data and they want to achieve this through the Delete Act. 

The Delete Act will give Californians the opportunity to request hundreds of data brokers to delete and never again acquire their information again. This is a great improvement to current legislation which requires individual requests per each broker and does not prevent brokers from rediscovering information after they delete it.

Read More

4. Microsoft’s Researchers Discovered China’s Attempts to Make Viral Propaganda Using AI

Source: Cyberscoop

Undercover from the comfort of their own homes, China’s state media employees and affiliates pose as independent influencers on major Western social media. Microsoft researchers note that using AI, the influencers’ content have become more successful. 

Focusing on political messages like gun violence and defaming/insulting U.S. political figures, this campaign can cause damage to and influence Western governments.

Read More


5. Greater Manchester Police Are The Second Major British Police Force To Be Cyber Attacked In Less Than A Month

Source: SecurityWeek

In a ransomware attack on a third party supplier, details on identity badges and warrant cards of the police officers and staff at Greater Manchester Police were stolen. Officials fear the Irish Republican Army dissidents gained access to this information and will use it in their occasional attacks on police. 

The first attack was similar but directed at London’s Metropolitan police. Both incidents were referred to Britain’s National Crime Agency which is in the process of investigating the incidents.

Read More

For all the the latest cybersecurity news download our free mobile app, Onyxia: Cybersecurity Intel, available on iOS and Google Play stores.

Previous
Previous

CISO Tip Series: Top Conferences and Events

Next
Next

CISO Tip Series: Exploring Podcasts Tailored for CISOs