Spanish airline Air Europa, the country's third-largest airline and a member of the SkyTeam alliance, recently warned customers to cancel their credit cards after attackers accessed their card information in a recent data breach.  The credit card details exposed in the breach include card numbers, expiration dates, and the 3-digit CVV (Card Verification Value) code on the back of the payment cards.

The National Security Agency (NSA) and US federal partners have released cybersecurity guidance to promote understanding Open-Source Software (OSS) implementation and to provide best practices for securing Operational Technology (OT) and Industrial Control Systems (ICS) environments.

Fortinet researchers have found a large-scale attack campaign targeting routers, turning thousands into bots for Distributed Denial-of-Service (DDoS) attacks. The new variant of Mirai, a relatively old malware that targets networked Linux devices and converts them into remotely controlled bots, contained thirteen payloads. Each new payload targets D-Link devices, Netis wireless routers, Sunhillo SureLine software, Geutebruck IP cameras, Yealink Device Management, Zyxel devices, TP-Link Archer, Korenix Jetwave, and Totolink routers.

The University of Alabama in Huntsville (UAH) recently announced its creation of cybersecurity software for the US Army Space and Missile Defense Command (USASMDC). The software initiated performance testing on one of Lockheed Martin's In-space Upgrade Satellite System (LM LINUSS) technology demonstrator CubeSats. The software, called Small Satellite Defender, is a small satellite-specific Intrusion Detection System (IDS). The Small Satellite Defender functions with relatively low power, monitors satellite-specific threats, and requires little bandwidth.

Flagstar Bank, a prominent Michigan-based financial services provider, has recently warned 837,390 of its US customers about a data breach that occurred through a third-party service provider, Fiserv.  It was traced back to vulnerabilities in MOVEit Transfer, a file transfer software used by Fiserv for payment processing and mobile banking services.

Two vulnerabilities have been announced by the maintainers of a popular open-source tool that provides foundational support for multiple network protocols, including SSL, TLS, HTTP, FTP, and SMTP. The problems revolve around curl, an open-source command-line tool that researchers say is widely used by developers and system administrators to interact with Application Programming Interfaces (APIs), download files, and create automated workflows.