The National Security Agency (NSA) and US federal partners have released cybersecurity guidance to promote understanding Open-Source Software (OSS) implementation and to provide best practices for securing Operational Technology (OT) and Industrial Control Systems (ICS) environments.

Fortinet researchers have found a large-scale attack campaign targeting routers, turning thousands into bots for Distributed Denial-of-Service (DDoS) attacks. The new variant of Mirai, a relatively old malware that targets networked Linux devices and converts them into remotely controlled bots, contained thirteen payloads. Each new payload targets D-Link devices, Netis wireless routers, Sunhillo SureLine software, Geutebruck IP cameras, Yealink Device Management, Zyxel devices, TP-Link Archer, Korenix Jetwave, and Totolink routers.

The University of Alabama in Huntsville (UAH) recently announced its creation of cybersecurity software for the US Army Space and Missile Defense Command (USASMDC). The software initiated performance testing on one of Lockheed Martin's In-space Upgrade Satellite System (LM LINUSS) technology demonstrator CubeSats. The software, called Small Satellite Defender, is a small satellite-specific Intrusion Detection System (IDS). The Small Satellite Defender functions with relatively low power, monitors satellite-specific threats, and requires little bandwidth.

Flagstar Bank, a prominent Michigan-based financial services provider, has recently warned 837,390 of its US customers about a data breach that occurred through a third-party service provider, Fiserv.  It was traced back to vulnerabilities in MOVEit Transfer, a file transfer software used by Fiserv for payment processing and mobile banking services.

Two vulnerabilities have been announced by the maintainers of a popular open-source tool that provides foundational support for multiple network protocols, including SSL, TLS, HTTP, FTP, and SMTP. The problems revolve around curl, an open-source command-line tool that researchers say is widely used by developers and system administrators to interact with Application Programming Interfaces (APIs), download files, and create automated workflows.

According to security researchers at Sucuri, a recently patched vulnerability affecting a plugin associated with the Newspaper and Newsmag themes has been exploited to hack thousands of WordPress websites as part of a long-running campaign named Balada Injector.  The researchers noted that an exploited vulnerability (CVE-2023-3169) was discovered in the TagDiv Composer front-end page builder plugin of the Newspaper and Newsmag premium themes, which have been sold nearly 140,000 times.