Summary
This document is a Threat Highlight Report for June 2024, detailing significant cybersecurity incidents and vulnerabilities that have emerged during the month. It outlines the ban on Kaspersky software in the United States due to national security concerns, which affects all affiliates and subsidiaries of the company. The report describes a new critical vulnerability in MOVEit Transfer software that was disclosed and exploited shortly after, allowing unauthorized access to servers. Additionally, it discusses a data theft campaign targeting Snowflake customers, where attackers exploited stolen credentials to access terabytes of sensitive data. The report also highlights a Chinese APT's compromise of over 20,000 Fortinet devices, which involved a zero-day vulnerability and resulted in the installation of persistent malware. Lastly, it notes a ransomware attack on CDK, a SaaS provider for the automotive industry, which has led to significant operational disruptions for its customers. The report emphasizes the ongoing threats and vulnerabilities in the cybersecurity landscape.
