Canary Trap’s Bi-Weekly Cyber Roundup

The Canary Trap bi-weekly roundup details a high-severity, actively exploited Palo Alto PAN-OS zero-day (CVE-2024-3400, CVSS 10.0) used by a tracked actor (UTA0218/Operation MidnightEclipse) to deploy a Python backdoor (UPSTYLE) and achieve root code execution and exfiltration; it also reports large-scale data breaches at Giant Tiger and Roku impacting millions of records/accounts, and confirms APT29/Russian activity that exfiltrated U.S. federal emails via a Microsoft attack, while highlighting JIT privileged access as a mitigation strategy.