Cyber Briefing: 2024.05.17

👉 What are the latest cybersecurity alerts, incidents, and news?

Kimsuky, Linux, GoBear Backdoor, South Korea, Espionage Campaign, Symantec,, ThroughTek, Kalay Vulnerabilities, IoT, Bitdefender, Darkgate, Forcepoint, Norway, VPN,, Norwegian National Security Authority, NSM, Reliaquest, Chicago Fire FC, CTV News, Montreal’s Collège Ahuntsic, Cyberattack, WoodTV, Rockford Public Schools, Ransomware, NRS Healthcare, Bucks radio, Arup Engineering Firm, Scam, Deepfake, US Securities and Exchange Commission, Financial, Texas Attorney General, Car Companies, Harvard, Hacker-Proof Quantum Network, Harvard Gazette, Cybersecurity Infrastructure Security Agency, Encrypted DNS Guidelines, U.S. Department of Justice, North Korea Cyber Scheme.

Welcome to Cyber Briefing, the newsletter that informs you about the latest cybersecurity advisories, alerts, incidents and news every weekday.

First time seeing this? Please subscribe.

🚨 Cyber Alerts

1. Kimsuky Deploys Linux GoBear in Korea

The Kimsuky APT group, linked to North Korea’s RGB, is using a Linux version of its GoBear backdoor, named Gomir, to target South Korean organizations. Gomir shares extensive code with the Windows variant GoBear, reimplementing OS-dependent functions for Linux. The campaign leverages trojanized security programs and rogue installers, highlighting software packages as key infection vectors.

2. ThroughTek Kalay Flaws Endanger IoT Devices

Researchers found four major vulnerabilities in the ThroughTek Kalay Platform, affecting 100 million IoT devices. These vulnerabilities can lead to remote code execution and unauthorized root access, compromising security cameras like Roku Indoor Camera SE, Wyze Cam v3, and Owlet Cam. The widespread impact underscores the critical need for improved IoT device security.

3. Darkgate Malware Phishing Threat

Hackers exploit XLSX, HTML, and PDF files in phishing emails, distributing…