Security Intelligence Monthly Report April 2023

This document is a Security Intelligence Monthly Report for April 2023. It provides an overview of significant cybersecurity incidents and vulnerabilities reported during the month. The report details a data breach at Western Digital, where attackers accessed multiple systems and stole approximately 10 terabytes of data, demanding a ransom. Additionally, it discusses a breach involving Taiwanese PC manufacturer MSI, where sensitive data was stolen, and a ransom was demanded. The report also highlights a joint advisory from CISA regarding a sophisticated malware threat used by Russian cyber actors. Furthermore, it outlines various vulnerabilities, including a critical exploit in PaperCut software and a default configuration issue in Apache Superset that could lead to remote code execution. The report emphasizes the importance of monitoring and updating security measures in response to these threats and vulnerabilities.