{"id":27170,"date":"2022-04-22T15:25:10","date_gmt":"2022-04-22T15:25:10","guid":{"rendered":"https:\/\/easydmarc.com\/blog\/?p=27170"},"modified":"2025-05-08T21:15:54","modified_gmt":"2025-05-08T21:15:54","slug":"weekly-email-security-news-recap-3-april-2022","status":"publish","type":"post","link":"https:\/\/easydmarc.com\/blog\/weekly-email-security-news-recap-3-april-2022\/","title":{"rendered":"Weekly Email Security News Recap #3 [April 2022]"},"content":{"rendered":"

Today, we live in a cyber-world that never remains static. Each second, a new cybercrime takes place somewhere, damaging a big company’s sensitive data or targeting individuals.<\/span><\/p>\n

This is why EasyDMARC<\/a> stays up-to-date with the weekly news on email security and cybersecurity.<\/span><\/p>\n

Check out our latest email security and cybersecurity news recap for reports on malicious code targeting the WordPress website builder plugin, an Encryption Implementation Error creating fake credentials, and cybersecurity attacks impacting governments and big companies.<\/span><\/p>\n

Massive Vulnerability Found in Elementor Website Builder<\/b><\/a><\/h2>\n

An authenticated remote code implementation flaw was found in a WordPress website builder plugin, Elementor, which has over five million active installations.<\/span><\/p>\n

The flaw was disclosed last week; approximately 37% of users of the plugin are on version 3.6.x. The bug was found in version 3.6.0, released last month.<\/span><\/p>\n

The flaw allows the website to run malicious code provided by the attacker. The vulnerability might be exploitable by a person not logged into WordPress.\u00a0<\/span><\/p>\n

Code execution can happen if someone uploads a random file to an affected website.<\/span><\/p>\n

The bug has been addressed in the latest version of Elementor. However, this exposure could allow an authenticated user to change the site title and logo, and\u00a0 Elementor’s theme.<\/span><\/p>\n

And one of the worst scenarios is that a user can upload arbitrary files to the site, regardless of their authorization.<\/span><\/p>\n

Java Suffered a Serious Encryption Implementation Error<\/b><\/a><\/h2>\n

Attackers can easily make fake credentials due to the Java JDK’s critical flaw that handles some encryption techniques.<\/span><\/p>\n

The cryptographic flaw resolved by Oracle affects Java JDK versions 15.<\/span><\/p>\n

On April 19, a patch was distributed as part of its standard quarterly patch set.<\/span><\/p>\n

Oracle, Java, and OpenJDK need an update because of problems in implementing typically used Elliptic Curve Digital Signature Algorithm signatures.<\/span><\/p>\n

The cause for this issue was a coding error rather than a flaw in the encryption technique.<\/span><\/p>\n

The issues allow man-in-the-middle attacks by faking specific SSL certificates and handshakes.<\/span><\/p>\n

Because of the cryptographic error, hackers can steal signed JWTs, SAML claims, WebAuthn authentication messages, and much more.<\/span><\/p>\n

A security architect at ForgeRock said that it’s hard to determine the bug’s severity.<\/span><\/p>\n

Attackers can easily bypass any security features if a particular server uses any Java 15, 16, 17, or 18 version before the April 2022 Critical Patch Update (CPU).<\/span><\/p>\n

United Government Data Centers Impacted by a Cybersecurity Attack<\/b><\/a><\/h2>\n

Over the Easter weekend, another cybersecurity breach news story transpired. A cyberattack was discovered on data centers of the Unified Government of Wyandotte County and Kansas City.<\/span><\/p>\n

The United Government is working with the U.S. Department of Homeland Security, the FBI, and the Mid-America Regional Council cybersecurity task force to investigate the attack.<\/span><\/p>\n

The UG announced it’s still restoring data services.<\/span><\/p>\n

The United Government also said the agencies are working to resolve any compromised data.<\/span><\/p>\n

The FBI is aware of the attack and has contacted local authorities.<\/span><\/p>\n

People who want information or updates about which services have been impacted should call 311 or get their answer on UG’s website.<\/span><\/p>\n

Final Thoughts<\/b><\/h2>\n

Threat actors never stop their various malicious activities. Therefore, businesses need to understand how crucial it is to develop a future-proof email security and cybersecurity strategy.<\/span><\/p>\n

You can also check this news from the third week of April by following the links:<\/span><\/p>\n