IT Security News Daily Summary 2023-02-15

• Connected vehicle data can improve traffic safety

• Lawmakers Vow To Protect Children From “Toxic Content” On Facebook

• 2023 Is the Year of Risk: 5 Ways to Prepare

• The East Palestine, Ohio Train Derailment Created a Perfect TikTok Storm

• New MortalKombat Ransomware Attack Aiming for Crypto Wallets

• Tech disruption powers smart city expansion

• Reversing the ‘Constitutional Revolution’: The Israeli Government’s Plan to Undermine the Supreme Court’s Judicial Review of Legislation

• How to build an effective crisis contact center

• Call for Speakers Now Open for the RH-ISAC Cyber Intelligence Summit

• Brivo Reveals Top Security Trends for 2023: Convenience Is King in Securing the Hybrid Workplaces of the Future

• Online Romance Scams Take Aim at Your Heart and Identity. Avoid these Red Flags

• City of Oakland issued a local state of emergency after recent ransomware attack

• Intel patches up SGX best it can after another load of security holes found

• What Twitter’s outage says about (over) zealous downsizing

• ESET PROTECT Review: Features & Benefits

• GAO Calls for Improved Data Privacy Protections

• Data protection regulations aren’t enough to safeguard your data

• Google Launches Privacy Sandbox Beta on Android 13 Devices

• 3 Ways CISOs Can Lead Effectively and Avoid Burnout

• What Purple Teams Wish Companies Knew

• What Is the Nslookup Command and How Can You Use It to Improve DNS Security?

• How data from connected cars can improve traffic safety

• Investigators uncover crypto scammers baiting ‘phish’ hooks on YouTube

• Cybersecurity Industry News Review: February 7, 2023

• Choosing the Right Passwordless Authentication Method for Maximum Benefits

• Update Now: iOS Devices Receive Vital Security Updates from Apple

• Hyundai And Kia Issue Software Upgrades To Thwart TikTok Car Theft Hack

• High Severity DLP Flaw Impacts Trellix For Windows

• Revealed: The Hacking And Disinformation Team Meddling In Elections

• Cloudflare Blocked Largest Reported DDoS Attack At 71M Requests Per Second

• We’re starting a position in a cybersecurity stock that’s been in our Bullpen watch list

• Navy looks to OTA consortium for advanced tech

• Ransomware Attack Pushes City of Oakland Into State of Emergency

• PE Firm Francisco Partners to Take Sumo Logic Private in $1.7B Deal

• Build Cyber Resiliency With These Security Threat-Mitigation Considerations

• Android Launches Another Way To Spy On Users With Privacy Sandbox Beta

• Apple Splats Zero-Day Bug, Other Gremlins In macOS, iOS

• Solving Open Source Security – From Alpha To Omega

• Latest Attack On PyPi Users Shows Crooks Are Only Getting Better

• A-Salt: Attacking SaltStack

• 5 Reasons You Need to Care About API Performance Monitoring

• Splunk Enterprise Updates Patch High-Severity Vulnerabilities

• LockBit and Royal Mail Ransomware Negotiation Leaked

• IGEL Unveils COSMOS, the Unified End User Computing Platform for Secure, Managed Access to Any Cloud Workspace

• The Long Descent to Insurrection

• Reversing the “Constitutional Revolution”: The Israeli Government’s Plan to Undermine the Supreme Court’s Judicial Review of Legislation

• Beep: New Evasive Malware That Can Escape Under The Radar

• The cyber security business is very strong, says Akamai CEO Tom Leighton

• Apple issues macOS Ventura 13.2.1, iOS 16.3.1 to fix zero-day vulnerability

• Report Reveals Record-Breaking Year for Cyber Threats

• Citrix released security updates for multiple High-Severity flaws in its products

• Microsoft shifts to a comprehensive SaaS security solution

• GuLoader – a highly effective and versatile malware that can evade detection

• 9 Ways smart devices can compromise your privacy

• How records of life’s milestones help solve cold cases, pinpoint health risks and allocate public resources

• Microsoft Patch Tuesday Includes Three Exploited Zero-Day Vulnerabilities

• 1898 & Co Launches New Cybersecurity Service for Critical Infrastructure

• 5th State of CCPA, CPRA, and GDPR Compliance Report Shows More Than 90% of Companies Are Not Compliant

• What Is OPSEC: Operational Security Explained

• Veeam offers $5 million data recovery warranty from ransomware attacks

• Here’s why the future of security is passwordless

• Microsoft remedies three zero-days on February Patch Tuesday

• ESXiArgs attack vector unclear as infections continue

• Crypto-Stealing Campaign Deploys MortalKombat Ransomware

• NIST’s New Crypto Standard a Step Forward in IoT Security

• Avoid Accidentally Sharing Your Location

• Change the Face ID Settings to Prevent Anyone Access to Your iPhone

• How to solve 10 of the most common web application security vulnerabilities

• Cybersecurity startup Oligo debuts with new application security tech

• Incident response automation: What it is and how it works

• US Border Patrol Is Finally Able to Check E-Passport Data

• North Korea’s APT37 Targeting Southern Counterpart with New M2RAT Malware

• Ways Automobile Companies Collect Customer Data

• North-Korean group attacks Windows and mobiles with new Remote Access Trojan

• Tesla To Open 7,500 Chargers In US To Other EVs

• Controller-level flaws can let hackers physically damage moving bridges

• What Twitter outage says about (over) zealous downsizing

• How Security Teams Can Protect Employees Beyond Corporate Walls

• Understanding Critical Event Management and How It Can Help Your Organization

• When Technology Broke and How We Fixed It (The Evolution of APIs)

• What’s Going Into NIST’s New Digital Identity Guidelines?

• Financially Motivated Threat Actor Strikes with New Ransomware and Clipper Malware

• Webinar — A MythBusting Special: 9 Myths about File-based Threats

• MortalKombat Ransomware Infects Computer, Steals Crypto From Users

• The Importance of File Encryption in Our Digital World: A Comprehensive Guide

• ASML Data Theft By Ex China Staffer Violated Export Controls

• Recently Patched IBM Aspera Faspex Vulnerability Exploited in the Wild

• Descope Targets Customer Identity Market with Massive $53M Seed Round

• Dozens of Vulnerabilities Patched in Intel Products

• Russian Cybercriminal Faces Decades in Prison for Hacking and Trading Operation

• Threat spotlight: Hydra

• CAP Is Now Certified in Governance, Risk and Compliance (CGRC)

• FTX’s Sam Bankman-Fried Ordered Back To Court, After VPN Use

• The Language of Cybersecurity Frameworks, Guidance, Regulations, and Standards

• Threat Analysis: VMware ESXi Attacks Soared in 2022

• A Hacker’s Mind Is Now Published

• Antivirus versus Anti Malware: Which One Should You Choose?

• With password security giving way to passwordless, Descope raises $53M

• Microsoft fixes three zero-days in its 75-flaw February Patch Tuesday

• Adobe addressed critical bugs in Illustrator, After Effects Software

• Russian Businessman Guilty in Hacking, Insider Trade Scheme

• SAP’s February 2023 Security Updates Patch High-Severity Vulnerabilities

• Citrix Patches High-Severity Vulnerabilities in Windows, Linux Apps

• Oligo Security Exits Stealth with $28M for AppSec, Open Source Security

• ICS Patch Tuesday: 100 Vulnerabilities Addressed by Siemens, Schneider Electric

• Camera the Size of a Grain of Salt

• Storage security toughen-up for compliance and cyberwar in 2023

• Bitwarden Password Manager introduces support for Argon2 KDF iterations

• Microsoft “Permanently Disables” Internet Explorer

• How monitoring libraries rather than containers is key to open-source security

• What to Look for When Buying a Security Camera (2023): Tips and Risks

• Google Launches Privacy Sandbox Beta for Android Users

• How to achieve and maintain data compliance in 2023

• A Guide on 5 Common LinkedIn Scams

• ICS Vulnerabilities Chained for Deep Lateral Movement and Physical Damage

• Experts Warn of ‘Beep’ – A New Evasive Malware That Can Fly Under the Radar

• Chinese Hackers Use ShadowPad Against South American Diplomatic Entities

• 1 Million CHS Patients Affected Due to Fortra`s GoAnywhere Data Breach

• Exploring the Top Cyber Security Career Options: From Ethical Hacking to Digital Forensics

• Twitter Created System To Promote Elon Musk Tweets – Report

• Unlocking the Potential: Check Point’s Infinity Spark Offers Unmatched Benefits for Managed Service Providers (MSPs)

• SAS App and Website Hit as Attacks Target Swedish Firms

• Microsoft Patches Three Zero-Day Bugs This Month

• Beep, a new highly evasive malware appeared in the threat landscape

• Traditional PAM solutions aren’t working, Keeper Security study finds

• Gilad Gruber Appointed as Senior Vice President of Engineering at Salt Security

• Regular Pen Testing Is Key to Resolving Conflict Between SecOps and DevOps

• Community Health Systems data breach caused by GoAnywhere MFT hack

• IoC detection experiments with ChatGPT

• RedEyes Hackers Adopts New Malware, Steals Data From Devices

• Dragos Report Identifies Two New Threat Groups

• 1 Million Downloads Later: How An Android Game Leaked Private Data

• ASML says ex-China employee misappropriated data relating to its critical chip technology

• Vulnerability Summary for the Week of February 6, 2023

• Meta Oversight Board Pledges Quicker Case Reviews

• Reverse Tabnabbing

• SideWinder APT Attacks Regional Targets in New Campaign

• Cybersecurity Industry News Review: February 15, 2023

• Why performing security testing on your products and systems is a good idea

• Google Rolling Out Privacy Sandbox Beta on Android 13 Devices

• AdSense fraud campaign relies on 10,890 sites that were infected since September 2022

• Artificial Intelligence Good, Bad and Ugly

• Apple urges iPhone users to upgrade to iOS16 amid device security hacking fears

• Spoiler: It’s not the IRS calling

• Hyundai and Kia issue software upgrades to thwart killer TikTok car theft hack

• Think Twice Before Using Pirated Software

• Combining identity and security strategies to mitigate risks

• Introducing the book – Threats: What Every Engineer Should Learn From Star Wars

• Attack surface management (ASM) is not limited to the surface

• 10 Best Linux Distributions In 2023

• Update Now: Microsoft Releases Patches for 3 Actively Exploited Windows Vulnerabilities

• Apple splats zero-day bug, other gremlins in macOS, iOS

• Identifying and securing your business’s dark data assets in the cloud

• SynSaber OT PCAP Analyzer simplifies the network analysis process

• (ISC)² Puts Members at the Center of Our Cybersecurity Content in 2023

• Akamai Connected Cloud helps enterprises deploy and secure distributed applications

• ThreatBlockr platform updates prioritize alert management

• CyberSaint Executive Dashboard empowers CISOs to take control of cyber risk communication

• Finite State releases Next Gen Platform for software supply chain security

• The risks and benefits of starting a vCISO practice

• ChatGPT, will you be my Valentine?

• Security in Game Development

• Identity Federation and SSO: The Fundamentals

• Expel Tackles Cloud Threats With MDR for Kubernetes

• Resecurity and CSG partner to help businesses navigate challenging situations

• Ping Identity and Deloitte secure identities and data across digital engagement channels

• The Pixel phones may be getting a long overdue feature

• Russian crook made $90M exploiting stolen info on Tesla, Roku, Avnet, Snap, more

• Elastic appoints Mathew Donoghue as CMO

• DirectDefense promotes Christopher Walcutt to CSO

• Zscaler acquires Canonic Security to accelerate how enterprises address SaaS-native threats

• Cloudflare thwarts largest reported HTTP DDoS attack

• Should you share passwords with your partner?

• Android 14 developer preview highlights multiple security improvements

• One in nine online stores are leaking your data, says study

• New ESXiArgs encryption routine outmaneuvers recovery methods

• 2023 年 2 月のセキュリティ更新プログラム (月例)

• LATEST CYBERTHREATS AND ADVISORIES – FEBRUARY 10, 2023

• Facebook Criticized For Allowing Hateful, Violent Content To Spread In Ethiopia

• OT Network Security Myths Busted in a Pair of Hacks

• EPA’s high-tech plane monitored toxic event site in Ohio

• How Kia and Hyundai’s new software update thwarts viral TikTok car thefts

• Microsoft Patch Tuesday: 36 RCE bugs, 3 zero-days, 75 CVEs

• 9 New Microsoft Bugs to Patch Now

• Adobe Releases Security Updates for Multiple Products

• An Overview Of Essential BlueTeam Tools For Cybersecurity

• IT Security News Daily Summary 2023-02-14

• Earthquake in Turkey exposes gap between seismic knowledge and action – but it is possible to prepare

• AI, sensors enhance wildfire detection

• Mozilla Releases Security Updates for Firefox 110 and Firefox ESR

• Adobe Releases Security Updates for Multiple Products

• Malware Delivered through Google Search

• The New Israeli Government’s ‘Constitutional Law Reforms’: Why now? What do they mean? And what will happen next?

• Microsoft delivers 75-count box of patches for Valentine’s Day

• The Rise of Security Service Edge (SSE): A Game-changer for the Modern Workforce

• Zscaler to Acquire Israeli Startup Canonic Security

• Mozilla Releases Security Updates for Firefox 110 and Firefox ESR

• How states can prepare for the rise of cryptocurrency

• VERT Threat Alert: February 2023 Patch Tuesday Analysis

• Microsoft Patch Tuesday, February 2023 Edition

• CISA Adds Four Known Exploited Vulnerabilities to Catalog

• Citrix Releases Security Updates for Workspace Apps, Virtual Apps and Desktops

• PWC highlights 11 ChatGPT and generative AI security trends to watch in 2023

• Army looking to experiment with autonomous, real-time technologies

• CISA Adds Four Known Exploited Vulnerabilities to Catalog

• Citrix Releases Security Updates for Workspace Apps, Virtual Apps and Desktops

• Microsoft Patch Tuesday for February 2023 fixed actively exploited zero-days

• Cisco Umbrella + Cisco Duo Are Better Together

• Veeam launches Data Platform, ransomware warranty

• Automated Security and Compliance Attracts Venture Investors

• Microsoft Releases February 2023 Security Updates

• Microsoft patches three exploited zero-days (CVE-2023-21715, CVE-2023-23376, CVE-2023-21823)

• Record-breaking number of record-breaking DDoS attacks confirmed

• How to Debug Websites Using Safari Developer Tools

• Government’s chief data scientist previews agencies’ work on equitable data

• Oakland City Services Struggle to Recover From Ransomware Attack

• Microsoft Releases February 2023 Security Updates

• 5 Cloud Security Challenges Solved by CNAPP

• OT Cybersecurity Plan to Prevent the 5Ds

• CISOs: Self-healing endpoints key to consolidating tech stacks, improving cyber-resiliency

• States sketch out roadmaps for zero trust ‘journey’

• Configuration Issues in SaltStack IT Tool Put Enterprises at Risk

• Vulnerability Summary for the Week of February 6, 2023

• Google Vertex AI Vision: Revolutionizing E-Commerce?

• Patch Tuesday: Microsoft Warns of Exploited Windows Zero-Days

• Hospitals Sued for Using Meta’s Ad-Tracking Code, Violating HIPAA

• Vulnerability Summary for the Week of February 6, 2023

• Security awareness and training policy

• Analysis: Cybersecurity Managers Fear ‘Catastrophic’ Cyber Event Now Likely Within Two Years

• Google’s Bard AI Bot Error Costed the Company $100 Billion Shares

• Why it’s time to supercharge data infrastructure funding

• Adobe Plugs Critical Security Holes in Illustrator, After Effects Software

• Lokibot, AgentTesla Grow in January 2023’s Most Wanted Malware List

• Why SecDataOps Is the Future of Your Security Program

• CISA Releases One Industrial Control Systems Advisory

• Apple Releases Security Updates for Multiple Products

• Decentralized Data Mesh With Apache Kafka in Financial Services

• social media policy

• Chinese Hackers Infiltrate South American Diplomatic Networks

• Apple Releases Security Updates for Multiple Products

• Massive AdSense Fraud Campaign Uncovered – 10,000+ WordPress Sites Infected

• Upcoming Speaking Engagements

• Five Compelling Benefits of a Managed SASE Solution

• Microsoft Azure Security expands variant hunting capacity at a cloud tempo

• Addressing cybersecurity at the board level with Difenda and Microsoft

• Google lets a few Android devices into its Privacy Sandbox

• RADIUS server authentication: Old but still relevant

• Hackers Could Use ChatGPT to Generate Convincing Scam Messages in Seconds

• AtlasVPN offers 83% off in privacy promotion

• What is Virtual Patching and How Does It Work?

• Vaultree Appoints Technology Industry Veteran Rinki Sethi to Its Board of Directors

• CISA Releases One Industrial Control Systems Advisory

• Mary Queen of Scots Letters Decrypted

• Romance Scam Targets Security Researcher, Hilarity Ensues

• Patch Tuesday February 2023 – Microsoft Releases Fixes for 13 Known Vulnerabilities

• Consenting to Cookies is Not Sufficient

• Before It’s Too Late, Switch to a New LastPass Password Manager

• Clipper Virus: 451 PyPI Packages Deploy Chrome Extensions to Steal Crypto

• Meet the new Mortal Kombat Ransomware

• Data Engineering Practices to Avoid

• CISA, South Korean agencies issue joint warning on North Korean ransomware

• 1Password is saying goodbye to passwords in favor of passkeys. Here’s why

• Spanish, US Authorities Dismantle Cybercrime Ring That Defrauded Victims of $5.3 Million

• Hackers Breach Pepsi Bottling Ventures’ Network

• Ping Identity and Deloitte Forge Alliance to Give Organizations Advanced Identity and Access Solutions

• Cyber-Physical Systems Vulnerability Disclosures Reach Peak, While Disclosures by Internal Teams Increase 80% Over 18 Months

• Experts discover over 451 clipper malware-laced packages in the PyPI repository

• The New Israeli Government’s “Constitutional Law Reforms”: Why now? What do they mean? And what will happen next?

• A Cyber Persistence Way to Countermeasures

• Amazon’s Zoox Begins Staff Rides On Public Roads In California

• Breaking Down the Seven Steps of an SQL Injection Kill Chain

• SynSaber Launches a Free OT PCAP Analyzer Tool for the Industrial Security Community

• ThreatConnect Closes 2022 with Accelerated Growth in Threat Intelligence Operations (TI Ops)

• 4 Best VPN Services (2023): For Routers, PC, iPhone, Android, and More

• ~11,000 Sites Have Been Infected With Malware That’s Good At Avoiding Detection

• EU Countries Told To Step Up Defenses Against State Hackers

• Pepsi Bottling Ventures Says Info-Stealing Malware Swiped Sensitive Data

• Alleged SIM Swapper Ransomed Instagram Influencer For Dates, Striptease Video

• The White House Wants You To Believe Those UFOs Weren’t Aliens

• Tools & Software That are Lifesavers for New Musicians

• Pepsi Bottling Ventures Discloses Data Breach

• CISO Conversations: The Role of the vCISO

• 2022 ICS Attacks: Fewer-Than-Expected on US Energy Sector, But Ransomware Surged

• Lessons All Industries Can Learn From Automotive Security

• Tesla Staff In NY Launch Union Campaign

• Adsense abused: 11,000 sites hacked in a backdoor attack

• Enhancing Security with Two-Factor Authentication: An Introduction to TOTP and HOTP

• Top 100 Women in Cybersecurity

• Upskilling And Automation The Keys To Cyber Resilience For Businesses

• User Behavior Analytics in Case Management

• Top 100 Cybersecurity Startups

• Top 100 CISOs

• Meta’s Chief Business Officer To Leave After 13 Years

• US Mobile Operators Suffer Outages, Issues

• EnterpriseDB adds Transparent Data Encryption to PostgreSQL

• Apple fixes zero-day spyware implant bug – patch now!

• Embattled VMware ESXi Hypervisor Flaw Exploitable in Myriad Ways

• (ISC)² Certified in Cybersecurity Exam Now Available in More Languages

• Phygital Attacks: Protecting Critical Infrastructure from Cyber Threats

• ChatGPT and more: What AI chatbots mean for the future of cybersecurity

• Real-time Ubuntu released, offers end-to-end security and reliability

• Record-Breaking 71 Million RPS DDoS Attack Seen by Cloudflare

• The More You Look for Spy Balloons, the More UFOs You’ll Find

• The Tor network hit by wave of DDoS attacks for at least 7 months

• $100 Million In Stolen Crypto Disguised in Lazarus New Mixer

• Data Theft Feature Added by Russian Nodaria APT

• Twitter Revenues From Top Advertisers Plummets – Report

• Apple WebKit Zero-Day Vulnerability Exploited to Hack iPhones, iPads, and Macs

• Hackers Target Bahrain Airport, News Sites to Mark Uprising

• GoAnywhere Zero-Day Attack Victims Start Disclosing Significant Impact

• Python Developers Beware: Clipper Malware Found in 450+ PyPI Packages!

• Apple fixes actively exploited WebKit zero-day in iOS, macOS (CVE-2023-23529)

• Madrid-Based Phishing Gang Disrupted By Spanish National Police & US Secret Service

• Pepsi Bottle Ventures Suffers Data Breach After Malware Attack

• Lazarus Hackers Use New Mixer to Hide Stolen Cryptocurrency

• Check Point CloudGuard Spectral detects malicious crypto-mining packages on NPM – The leading registry for JavaScript Open-Source packages

• Atlas VPN upgrades servers for faster browsing

• Apple Patches Actively Exploited WebKit Zero-Day Vulnerability

• Spanish Police Bust €5m Phishing Gang

• Chinese Hackers Targeting South American Diplomatic Entities with ShadowPad

• A CISOs Practical Guide to Storage and Backup Ransomware Resiliency

• Apple Hitting Issues In Ramping Up India Manufacturing – Report

• Dragos: ICS/OT ransomware attacks up 87%

• Cloudflare Stops Largest HTTP DDoS Attack on Record

• Cloudflare blocked record-breaking 71 million request-per-second DDoS attack

• Cloudflare Stops Over 71 Million RPS Record-Breaking DDoS Attack

• Resurrected Crypto-mixer Launders $100m in North Korean Funds

• Malware that can do anything and everything is on the rise

• Need to improve the detection capabilities in your security products?

• Is your online date Googling you?

• Thales and Quantinuum Offer a Trusted Foundation to Help Organizations Begin Creating Quantum Resilience Today

• Record-Breaking DDoS Attack – Over 71 Million RPS

• Massive HTTP DDoS Attack Hits Record High of 71 Million Requests/Second

• Expel MDR for Kubernetes simplifies security for Kubernetes applications

• Actionable intelligence is the key to better security outcomes

• How to prevent DDoS attacks

• Get hired in cybersecurity: Expert tips for job seekers

• Steps CISA should take in 2023

• AI and Cybersecurity: Some observational implications of the intersection between the two

• Beware of Romance Scams on Valentines Day as it could reach $7 billion

• Patch Now: Apple’s iOS, iPadOS, macOS, and Safari Under Attack with New Zero-Day Flaw

• Confident cybersecurity means fewer headaches for SMBs

• Romance scam targets security researcher, hilarity ensues

• Apple fixes the first zero-day in iPhones and Macs this year

• How to change your account password in Windows 11

• Enigma info-stealing malware targets the cryptocurrency industry

• Pepsi Bottling Ventures says info-stealing malware swiped sensitive data

• Training and CTFs

• Malwarebytes recognized as endpoint security leader by G2

• A week in security (February 6 – 12)

• Powering Manufacturing With MLOps

• What is AI good at (and what the heck is it, actually), with Josh Saxe: Lock and Code S04E04

• Jailbreaking ChatGPT and other large language models while we can

• CISA issues alert with South Korean government about DPRK’s ransomware antics

• French law to report cyberincidents within 3 days to become effective soon

• Consent to gather data is a “misguided” solution, study reveals

• EFF Backs California Bill to Protect People Seeking Abortion and Gender-Affirming Care from Dragnet Digital Surveillance

Generated on 2023-02-15 23:55:29.973426