Sep 12, 2023

2 new incidents, 1 with updates.

Started

ClosedHighPatched
Microsoft Streaming Service Proxy: Privilege Escalation (CVE-2023-36802)
Microsoft Streaming Service Proxy contains an unspecified vulnerability that allows for privilege escalation. Added to CISA KEV on 2023-09-12.
Microsoft Streaming Service ProxyClosed Sep 12, 2023updated Sep 12, 2023
ClosedMediumPatched
Microsoft Word: Information Disclosure (CVE-2023-36761)
Microsoft Word contains an unspecified vulnerability that allows for information disclosure. Added to CISA KEV on 2023-09-12.
Microsoft WordClosed Sep 12, 2023updated Sep 12, 2023

ClosedHighNo fix needed
MGM Resorts and Caesars hit by Scattered Spider
Scattered Spider, an ALPHV/BlackCat affiliate, used social engineering to breach two Las Vegas casino giants. Caesars lost its loyalty program database and reportedly paid about $15M. MGM shut down systems for days and estimated a $100M hit, with pre-March-2019 customer data stolen.
MGM Resorts International; Caesars EntertainmentClosed Oct 5, 2023updated Oct 5, 2023