Jun 10, 2024
1 new incident, 1 with updates.
Started
- ClosedHighPatched
Android Kernel Remote Code Execution
Android contains an unspecified vulnerability in the kernel that allows for remote code execution. This vulnerability resides in Linux Kernel and could impact other products, including but not limited to Android OS. Added to the CISA KEV catalog on 2024-08-07.
Android KernelClosed Aug 7, 2024
Updated
- ClosedCriticalNo fix needed
Snowflake customer accounts raided with infostealer credentials (Ticketmaster, AT&T and others)
A financially motivated group Mandiant tracks as UNC5537 logged into Snowflake customer accounts using credentials stolen by infostealer malware, some dating back to 2020, on accounts without MFA or network allow lists. It then stole data and extorted the victims. Mandiant and Snowflake notified about 165 potentially exposed organizations. Victims included Ticketmaster/Live Nation and AT&T, which said call and text records of nearly all its cellular customers were taken. Mandiant found no breach of Snowflake's own enterprise environment.
Snowflake customer instancesClosed Jul 12, 2024
