top of page

Cyber Outlook Rundown 12/20/22

Cybersecurity News

A Cybersecurity briefing on noteworthy Cyber Attacks, Vulnerabilities, and InfoSec news.


Noteworthy Cyber Attacks Reported

  1. McGraw Hill's S3 buckets exposed 100,000 students' grades and personal info. Another example of a Cyber Breach, this one affecting 100,000 students, due to a Cloud network misconfiguration... This is why strict change management, audits and assessments are so important!

  2. Over the weekend, an infamous hacker known as Jason Brubeck succeeded in stealing approximately 850 ETH ($1+ million) worth of Bored Ape collection, leaving his victim completely devastated. The news was first broken by @serpent, who had been able to trace and identify the suspect’s activity with impressive precision through phishing tactics. Such egregious fraudulence is a stark reminder of how important it is for all users to remain vigilant when trading digital assets online.

Noteworthy Vulnerabilities / Threats Discovered

  1. The Royal ransomware group was first discovered in early 2022. At the time, it utilized third-party ransomware, such as BlackCat and custom Zeon ransomware. Since September 2022, the group has started to use its own ransomware. In November 2022, Royal ransomware was reported to be the most prolific ransomware in the e-crime landscape, overtaking Lockbit for the first time in more than a year. The ransomware leverages sophisticated encryption techniques to evade detection and defense platforms.

  2. Researchers spotted a malicious package in the Python Package Index (PyPI) repository that impersonates a software development kit (SDK) for SentinelOne.

  3. CISA released six Industrial Control Systems (ICS) advisories on December 20, 2022. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS.

Noteworthy InfoSec News

  1. In a strategy to help track repeat offenders that fail to protect customer and employee data, the UK Information Commissioner’s Office (ICO) has taken an unusual step of publishing details of personal data breaches, complaints and civil investigations on its website. The data is published from 2021 onwards, includes the organization’s name and sector, the relevant legislation and the type of issues involved, the date of completion and the outcome.

Check our Twitter and Discord Server for more information:

If you missed the last rundown, check it out here:


Additional resources:

blockchain concept illustration in 3d, connected blocks in blockchain_edited.jpg

Check out our Twitter feed!

  • Discord
  • Twitter
  • LinkedIn
bottom of page