Security Bulletin

Security Bulletin: AnyDesk Security Incident

Perry Tsao

Feb 6, 2024 — 1 min read

What is it?

On February 2, 2024, AnyDesk, a widely used remote access solution provider, disclosed that it suffered a cyberattack that allowed hackers to gain access to the company’s production systems. Specifically, it’s been reported that hackers obtained access to the company’s source code and private code signing keys. Although AnyDesk assures users that their session authentication token remains secure, we strongly recommend AnyDesk users take the recommended actions below.

Specifically, it’s been reported that hackers obtained access to the company’s source code and private code signing keys.

Recommendations

Upgrade to the New Software Version: All users should promptly switch to the latest version of the software. The old code signing certificate will soon be revoked, making the new version essential for security.

Change AnyDesk Passwords: Although AnyDesk reports that passwords were not stolen in the attack, threat actors gained access to production systems. Therefore, it is strongly advised that all AnyDesk users change their passwords.

Review Passwords Across Sites: If users use the same password for AnyDesk and other sites, they should update those passwords as well to mitigate potential risks.

Learn More: To learn more about the incident, please refer to the AnyDesk public statement here.

Disclaimer: Elpha Secure hopes you found the general information provided in this article informative and helpful. The information contained herein is not intended to constitute legal or other professional advice and should not be relied upon in place of consultation with your own legal and security advisors. If you like to learn more about Elpha Secure, click here.

M.A.P.S. - Charting a Clearer Route to Cyber Resilience for Small Businesses

‌ Perry Tsao Vice President of Claims Safeguarding against the relentless waves of cyber-attacks has become an urgent imperative for organizations determined to thrive or, at a minimum, stay afloat in the digital economy. However, for small businesses, embarking on the journey of cyber resiliency can often feel overwhelming, much like

Deepfake Scam Costs Company $25M

Rueben Medina Head of Security This incident is the largest recorded scam utilizing deepfake technology, highlighting how powerful the combination of traditional social engineering, persistence, and emerging AI technologies can be. A Hong Kong-based multinational company lost a staggering $25 million to a deepfake scam, raising serious concerns about cybercriminals&

May the Cyber Force be with You: Elpha Secure Defends Businesses from the Dark Side of Cyber

On this May 4th, let us celebrate the timeless lessons of Star Wars and the dedicated teams at Elpha Secure who are committed to helping businesses protect themselves from the dark side of the cyber world. On this May 4th, Star Wars Day, let us reflect on the timeless lessons

Security Bulletin: Google Chrome Zero-Day Impacting 3 Billion Users

Update as of 4/18/2023: Google has released another emergency fix in response to a second zero-day. The vulnerability known as CVE-2023-2136 is a high-severity integer overflow flaw. This is fixed by updating to Chrome Version 112.0.5615.137. This vulnerability is currently being exploited by cybercriminals. This