Week of July 1, 2024: Sonic Automotive Discloses CDK Fallout, CISA Flags Exploited Cisco Flaw

Security leaders watched Sonic Automotive disclose a likely material earnings hit tied to the CDK Global dealer-software incident, while CISA added an actively exploited Cisco NX-OS flaw to its Known Exploited Vulnerabilities Catalog and pushed out seven ICS advisories plus an election-security OPSEC guide. Juniper Networks also patched a denial-of-service flaw in its SRX series, and the industry saw fresh CISO hires at Tools for Humanity and Vectra AI.

Sonic Automotive Discloses Likely Material Hit from CDK Global Incident

Auto dealership group Sonic Automotive filed an 8-K updating investors on disruptions to its dealer management and customer relationship systems, which had been offline since June 19, 2024 due to a cybersecurity incident at vendor CDK Global. Basic dealer management functionality had been restored, but other affected systems, including the CRM, remained offline. The company said it expected the incident to adversely affect second-quarter earnings, citing slower vehicle sales during the outage period. (SEC EDGAR)

CISA Adds Cisco NX-OS Flaw to Known Exploited Vulnerabilities Catalog

CISA added CVE-2024-20399, a Cisco NX-OS command injection vulnerability, to its Known Exploited Vulnerabilities Catalog after finding evidence of active exploitation. The agency's Binding Operational Directive 22-01 requires federal civilian agencies to remediate catalog entries by set deadlines, and CISA urged all organizations to prioritize timely patching of the flaw as part of standard vulnerability management practices. (CISA)

CISA Publishes Seven Industrial Control Systems Advisories

CISA released seven ICS advisories covering products from Johnson Controls, mySCADA, ICONICS and Mitsubishi Electric. The bundle included new findings on Johnson Controls Kantech door controllers, mySCADA myPRO, and ICONICS/Mitsubishi Electric products, along with updates to earlier advisories on Johnson Controls Illustra Essentials Gen 4 cameras. CISA encouraged asset owners and administrators to review the advisories for technical details and mitigations relevant to operational technology environments. (CISA)

Juniper Networks Patches Denial-of-Service Flaw in Junos OS SRX Series

Juniper Networks published a security bulletin addressing a vulnerability in Junos OS for its SRX Series firewalls that a threat actor could exploit to trigger a denial-of-service condition. CISA relayed the bulletin, pointing administrators to Juniper's JSA83195 advisory and urging prompt application of the available updates to reduce exposure on perimeter network devices. (CISA)

CISA Issues Operational Security Guide for Election Officials

CISA released a Guide to Operational Security for Election Officials aimed at reducing exposure of sensitive election data and internal systems ahead of the 2024 election cycle. The guide covers identifying and protecting sensitive information, assessing threats from an adversary's perspective, and embedding OPSEC habits into daily election operations, with CISA framing it as a resource to help election workers manage aggregated risk. (CISA)

Tools for Humanity and Vectra AI Add Security and Privacy Executives

Worldcoin developer Tools for Humanity hired Adrian Ludwig as Chief Information Security Officer alongside Damien Kieran as Chief Privacy Officer, with Ludwig arriving after security leadership roles at Google and Atlassian. Separately, XDR provider Vectra AI appointed Sailesh Munagala as CFO with oversight spanning financial, legal, IT and business operations functions, while managed security platform Deepwatch named John DiLullo CEO, succeeding Charlie Thomas, who moved to board chairman. (SecurityWeek)