Fortinet customers remain protected through the IPS service and has blocked all the known hashes and Indicators of Compromise (IoCs) in the related campagins. FortiGuard Labs advises organizations to apply the latest Jenkins security updates and patches to fully mitigate any risks.
- August 01, 2024: CloudSEK's threat research team has uncovered a ransomware attack disrupting banking system in India, targeting banks and payment providers.https://www.cloudsek.com/blog/major-payment-disruption-ransomware-strikes-indian-banking-infrastructure
- July 23, 2024: IntelBroker Threat Actor exploited Jenkins vulnerability to exfiltrate sensitive data, impacting multiple clients.https://www.cloudsek.com/blog/born-group-supply-chain-breach-in-depth-analysis-of-intelbrokers-jenkins-exploitation
- March 12, 2024: FortiGuard Labs released the Threat Signal Report on CVE-2024-23897.https://www.fortiguard.com/threat-signal-report/5401/jenkins-arbitrary-file-read-vulnerability-cve-2024-23897
- January 24, 2024: Jenkins released a security advisory about the vulnerability.https://www.jenkins.io/security/advisory/2024-01-24/
Countermeasures across the security fabric for protecting assets, data and network from cybersecurity events:
Detects known malware related to the Outbreak
Detects end-user devices running the vulnerable application.
Find and correlate important information to identify an outbreak, the following updates are available to raise alert and generate reports:
Develop containment techniques to mitigate impacts of security events:
Services that can automaticlly respond to this outbreak.
Experts to assist you with analysis, containment and response activities.
Improve security posture and processes by implementing security awareness and training, in preparation for (and recovery from) security incidents:
Train your network and security professionals and optimize your incident response to stay on top of the cyberattacks.
Raise security awareness to your employees that are continuously being targeted by phishing, drive-by download and other forms of cyberattacks.
Identify processes and assets that need protection:
Check Security Fabric devices to build actionable configuration recommendations and key indicators.
Security reconnaissance and penetration testing services, covering both internal & external attack vectors, including those introduced internally via software supply chain.
Reduce the attack surface on software vulnerabilities via systematic and automated patching.
Learn more about FortiGuard Outbreak Alerts
