Advisories

Hotel Operator Hoya Resort Hotel Group Confirms Cyberattack on Branch IT Systems

According to iThome, hotel operator Hoya Resort Hotel Group (富野) issued a material information filing on April 8 stating that a branch office's IT system had suffered a cyberattack; upon detection, cybersecurity personnel immediately activated defense mechanisms, collaborated with external experts, and restored systems from daily backups with no material impact on daily operations .

According to iThome, biotech firm Baiyan (佰研) issued a material information filing on April 7 stating that member data from the e-commerce website of its nutrition and health brand "Toxin-Free Home" (無毒的家) had been leaked .

On 2024-03-30, AT&T confirmed that a dataset found on the dark web contains AT&T-specific fields, while stating it is still evaluating whether the data originated from the company or one of its vendors .

According to LOG, citing a public notice from Turkey's Personal Data Protection Authority (KVKK), a service desk platform used by Allianz Sigorta agents to submit requests and complaints suffered unauthorized access .

On 2024-03-26, CISA added CVE-2023-24955 (Microsoft SharePoint Server) to its Known Exploited Vulnerabilities (KEV) catalog .

On 2024-03-25, CISA added CVE-2023-48788 (Fortinet FortiClient EMS) to its Known Exploited Vulnerabilities (KEV) catalog .

On 2024-03-25, CISA added CVE-2021-44529 (Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA)) to its Known Exploited Vulnerabilities (KEV) catalog .

Cybersecurity media outlets reported that multiple Ukrainian internet service providers (ISPs) were hit by cyberattacks causing connectivity disruptions .

According to iThome, as publicly traded companies in Taiwan face frequent cyberattacks, how enterprises determine whether a cybersecurity incident is material enough to require public disclosure has been a key question over the past two years .

On 2024-03-04, CISA added CVE-2024-21338 (Microsoft Windows) to its Known Exploited Vulnerabilities (KEV) catalog .

In March 2024, JetBrains disclosed CVE-2024-27198, an authentication bypass vulnerability affecting TeamCity On-Premises servers .

The City of Hamilton in Ontario, Canada published cybersecurity incident updates stating that municipal IT systems had been hit by a cyberattack .

On February 22, 2024, CISA added ConnectWise ScreenConnect vulnerability CVE-2024-1709 to its Known Exploited Vulnerabilities (KEV) catalog .

In February 2024, UnitedHealth Group publicly disclosed that its subsidiary Change Healthcare had suffered a cyberattack, disrupting related healthcare claims and payment services .

On 2024-02-15, CISA added CVE-2024-21410 (Microsoft Exchange Server) to its Known Exploited Vulnerabilities (KEV) catalog .

On 2024-02-15, CISA added CVE-2020-3259 (Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)) to its Known Exploited Vulnerabilities (KEV) catalog .

France's National Commission on Informatics and Liberty (CNIL) announced that two third-party healthcare payment operators suffered data breaches and that it has opened an investigation .

On 2024-02-13, CISA added CVE-2024-21412 (Microsoft Windows) to its Known Exploited Vulnerabilities (KEV) Catalog .

According to LOG, citing a public announcement from Turkey's Personal Data Protection Authority (KVKK), Karel İletişim suffered a ransomware attack on February 3, 2024 .

Fortinet published a security advisory detailing CVE-2024-21762, a vulnerability in FortiOS that can lead to remote code execution .