In this month’s information security monthly report, there are three major information security issues that are the focus of attention, including the follow-up of the 3CX VoIP supply chain attack incident, the increase in the application of generative AI-enhanced information security solutions, and employees inputting corporate sensitive data for convenience. Problem uploading to ChatGPT. First of all, the 3CX VoIP system software supply chain incident disclosed by CrowdStrike, SentinelOne, Sophos and other information security companies at the end of March not only brought the software supply chain issue into focus again, but also found another An X_Trader software supply chain attack led to 3CX being hacked.
