Argus Cyber Solutions

Microsoft researchers have detailed a modular backdoor framework called “PipeMagic,” used by threat actors to stealthily deploy ransomware.

PipeMagic is used by the threat group known as Storm-2460 and is spread through impersonation of a legitimate open-source ChatGPT desktop application tool, according to a Microsoft blog post published Monday. - https://www.scworld.com/news/modular-pipemagic-backdoor-used-to-deploy-ransomware

Archaic Windows version saves the day during CrowdStrike outage — Southwest Airlines scrapes by with ancient OS - https://www.tomshardware.com/software/windows/windows-31-saves-the-day-during-crowdstrike-outage

Testing 123

Another security failure.

K-12 student geolocation data, names exposed via API flaws: 6M kids impacted GPS locations of K-12 students and parent contact info could be pulled from the Parent Portal API.

https://www.scmagazine.com/home/security-news/phishing/9000-employees-targeted-in-phishing-attack-against-california-agency

9,000 employees targeted in phishing attack against California agency % The incident kicked off when an employee clicked on a link that provided access to the employee’s account for some 24 hours.