China Accuses US of Fabricating Volt Typhoon, Fortinet Devices Still Vulnerable

The Daily Decrypt

00:00 /

Video Episode: https://youtu.be/jjp4xiYI0Xw

In today’s episode, we delve into the escalating cyber tensions between China and the U.S. as China accuses the latter of fabricating the Volt Typhoon threat to divert attention from its own cyber-espionage activities. We also discuss the Internet Archive’s partial recovery from recent DDoS attacks and the critical vulnerability found in the Jetpack plugin affecting over 27 million WordPress sites. Additionally, we cover the ongoing risks posed by the CVE-2024-23113 vulnerability in Fortinet devices, emphasizing the need for immediate action by IT administrators.

Article Links:
1. China Accuses U.S. of Fabricating Volt Typhoon to Hide Its Own Hacking Campaigns: https://thehackernews.com/2024/10/china-accuses-us-of-fabricating-volt.html
2. The Internet Archive and its 916 billion saved web pages are back online: https://arstechnica.com/tech-policy/2024/10/the-internet-archive-and-its-916-billion-saved-webpages-are-back-online/
3. WordPress Plugin Jetpack Patches Major Vulnerability Affecting 27 Million Sites: https://thehackernews.com/2024/10/wordpress-plugin-jetpack-patches-major.html
4. 87,000+ Fortinet devices still open to attack, are yours among them? (CVE-2024-23113): https://www.helpnetsecurity.com/2024/10/15/cve-2024-23113/

Timestamps

00:00 – Introduction

01:04 – China vs US on Volt Typhoon

03:08 – Internet Archive’s partial recovery

04:05 – Vulnerability found in the Jetpack plugin

05:16 – Fortinet devices vulnerable

1. What are today’s top cybersecurity news stories?
2. What did China say about Volt Typhoon and U.S. cybersecurity claims?
3. How has the Internet Archive recovered from DDoS attacks?
4. What vulnerability was found in the Jetpack WordPress plugin?
5. How can users protect themselves from the Fortinet CVE-2024-23113 vulnerability?
6. What is the significance of China accusing the U.S. of false flag cyber operations?
7. How is the Wayback Machine functioning after the recent attack?
8. What remediation steps were taken for the Jetpack plugin vulnerabilities?
9. What are the potential implications of the Fortinet devices vulnerability?
10. What does the report say about the nature of the Volt Typhoon cyber group?

Volt Typhoon, cyber espionage, Microsoft, CrowdStrike, Internet Archive, Wayback Machine, DDoS, data breach, Jetpack, vulnerability, WordPress, security, Fortinet, vulnerability, remote code execution, cybersecurity,

1. **Volt Typhoon**: A moniker for a China-nexus cyber espionage group alleged to be fabricated by the United States and its allies. It’s claimed to have been active since 2019, focusing on stealthily embedding in critical infrastructure networks. Its importance lies in its potential to influence international relations and cybersecurity defenses.

2. **False Flag Operation**: An act committed with the intent to disguise the actual source of responsibility and blame another party. In cybersecurity, this is a critical concept as it involves the deceptive masking of attacks, complicating attribution and heightening global tensions.

3. **Edge Devices**: Hardware that provides an entry or exit point for data communication in a network, such as routers, firewalls, and VPN hardware. In cybersecurity, these devices are vital as they are often targeted in attacks to relay or intercept data and evade detection.

4. **Operational Relay Boxes (ORBs)**: Network devices used to obscure the origin of cyber operations by routing attacks through intermediary points. This term is significant in cybersecurity because it demonstrates sophisticated tactics used to hide attacker identity and enhance stealth.

5. **Zero-Day Exploitation**: The act of exploiting a software vulnerability undiscovered or not yet patched by the vendor, often leading to significant security breaches. This term is crucial in cybersecurity as it represents threats posed by novel and unpatched vulnerabilities.

6. **Web Shell**: A script placed on a compromised web server to enable remote control. The term is pertinent in cybersecurity given its use in facilitating unauthorized access and further attacks.

7. **Backdoor**: A method of bypassing normal authentication to access a system, often installed by attackers to maintain continued access. Its importance in cybersecurity is underscored by its potential to allow undetected, persistent threats.

8. **Marble Framework**: A software toolkit allegedly used by U.S. intelligence to obscure attribution in cyber attacks. Understanding such frameworks is crucial for cybersecurity professionals in unraveling sophisticated attempts at masking the identity of cyber threats.

9. **Cyber Espionage**: The practice of engaging in covert operations to obtain confidential information from foreign governments or companies through cyber means. It is a significant aspect of national security and international relations in the digital age.

10. **Five Eyes**: An intelligence alliance comprising the United States, the United Kingdom, Canada, Australia, and New Zealand. Its role in cybersecurity involves extensive information sharing and cooperation on threats, making it a key player in global cyber defense strategies.