IT Security News Daily Summary 2023-03-29

• Mélofée: The Latest Malware Targeting Linux Servers

• Malware Hunters Spot Supply Chain Attack Hitting 3CX Desktop App

• Top Tech Talent Warns on AI’s Threat to Human Existence in Open Letter

• QNAP fixed Sudo privilege escalation bug in NAS devices

• Trojan-Rigged Tor Browser Bundle Drops Malware

• How is mLearning the Future of On-The-Go Dynamic Training Programs?

• How to Hide Tables in SQL Server Management Studio

• Senate committee advances open source software and digital identity bills

• Tech innovations get tryout in regulatory sandboxes

• Google: Spyware vendors exploiting iOS, Android zero days

• Arkansas Announces Lawsuit Against Facebook For Harming Young Users

• Patch Now: Cybercriminals Set Sights on Critical IBM File Transfer Bug

• Australia’s Casino Giant Crown Resorts disclosed data breach after Clop ransomware attack

• 5 Reasons mLearning is the Future of On-The-Go Dynamic Training Programs

• Cybersecurity Investment Outlook Remains Grim as Funding Activity Sharply Declines

• Phishing Emails Up a Whopping 569% in 2022

• Guidance on Potential Misconfiguration of Authorization of Multi-Tenant Applications that use Azure AD

• Spotify’s new Niche Mixes are tailor-made for me

• Microsoft’s Security Copilot brings AI to security, and it’s making me nervous

• Pig butchering scams: The anatomy of a fast‑growing threat

• Cybersecurity Investment and M&A Activity Slowed in Q1, 2023

• Microsoft Defender shoots down legit URLs as malicious

• Fake Tor Browser Installers Distributing Clipper Malware

• LeapXpert Banks $22M Funding to Secure Corporate Messaging With Consumer Apps

• OpenAI quickly fixed account takeover bugs in ChatGPT

• Pinduoduo Malware Executed a Dangerous 0-day Exploit Against Millions of Android Devices

• How to automatically lock your Windows PC with Dynamic Lock

• Cops use fake DDoS services to take aim at wannabe cybercriminals

• South Korea, US Seek Do Kwon Extradition

• How Can Enterprises, ML Developers, and Data Scientists Safely Implement AI to Fight Email Phishing?

• OpenAI Patches Account Takeover Vulnerabilities in ChatGPT

• Spera Banks $10 Million to Tackle Identity and Access Sprawl

• Blockchain Security Firm True I/O Raises $9 Million

• Vulnerability management vs. risk management, compared

• Aruba ClearPass Policy Manager NAC Solution Review

• Google: Commercial Spyware Used by Governments Laden With Zero-Day Exploits

• Using Observability to Power a Smarter Cybersecurity Strategy

• Cybersecurity Industry News Review – March 21, 2023

• API security: the new security battleground

• 10 Ways B2B companies can improve mobile security

• ‘New threats’ to national security are created by emerging tech, DHS chief says

• Google Warns Against Commercial Spyware Exploiting Zero-Days

• Defend against DDoS attacks with Azure DDoS IP Protection

• How to Keep Up With a Shifting Threat Landscape

• Another Democrat joins chorus of concerns about CBP’s mobile app

• Why formal government communications work better than informal ones

• Clop Ransomware Group Exploits GoAnywhere MFT Flaw

• Will you entrust cybersecurity to AI as per Microsoft

• Dark and Darker Developer Uses ChatGPT AI tool in Bid to Prove it Hasn’t Infringed Copyright

• Partnerships and improved data may bolster U.S. weather predictions

• OpenSSL 1.1.1 Nears End of Life: Security Updates Only Until September 2023

• Attacks Targeting APIs Increased By 400% in Last Six Months

• Enhanced Azure Arc integration with Datadog simplifies hybrid and multicloud observability

• Apple Launches Buy Now, Pay Later Service For US

• Beware of MacStealer: A New Malware Targeting macOS Catalina Devices

• How Threat Actors are Using IPFS for Email Phishing

• Improper Disposal of IT Equipment Poses Cyber Security Risks

• Sam Bankman-Fried Charged With Bribing Chinese Officials

• Overcoming Challenges and Best Practices for Data Migration From On-Premise to Cloud

• Cyber Storm Predicted at the 2023 World Economic Forum

• EU mandated messaging platform love-in is easier said than done: Cambridge boffins

• How Good Smile, a Major Toy Company, Kept 4chan Online

• Spyware Vendors Caught Exploiting Zero-Day Vulnerabilities on Android and iOS Devices

• Google TAG shares details about exploit chains used to install commercial spyware

• A Dispatch From Italy: Meloni’s First Six Months

• Enforcement of Cybersecurity Regulations: Part 2

• Barracuda Ransomware Report

• Viral KYC Scam in Mumbai Steals Rs 1 Crore from 81 Users

• New WiFi Flaw Let Attackers Hijack Network Traffic

• Nexus Android malware targets 450 financial applications

• Casino Giant Crown Resorts Investigating Ransomware Group’s Data Theft Claims

• New Wi-Fi Attack Allows Traffic Interception, Security Bypass

• The CISO Mantra: Get Ready to Do More With Less

• Investors Pull $1.6 Billion After US CFTC Charged Binance

• 5 common SD-WAN challenges and how to prepare for them

• The Power of the Team — Meeting Customers in the Cloud

• North Korean APT43 Group Finances Spy Activities Via Cybercrime

• Microsoft unveils AI-powered Security Copilot analysis tool

• New API Report Shows 400% Increase in Attackers

• How to use Bitwarden’s Password Manager in Chrome, Edge and Firefox

• What Makes an Effective Anti-Bot Solution?

• QuSecure and Accenture Test Multi-Orbit Communications Link Using Post-Quantum Cryptography

• Over 200 Organizations Targeted in Chinese Cyberespionage Campaign

• Most Weaponized Vulnerabilities of 2022 and 5 Key Risks: Report

• Google Links More iOS, Android Zero-Day Exploits to Spyware Vendors

• Smart Mobility has a Blindspot When it Comes to API Security

• How to Build a Research Lab for Reverse Engineering — 4 Ways

• Mélofée: Researchers Uncover New Linux Malware Linked to Chinese APT Groups

• Clipper attacks use Trojanized TOR Browser installers

• New Fake Tor Browser Theft Campaign Steals Over $400,000 In Crypto

• Cato Networks Recognised as Leader in Single-Vendor SASE Quadrant Analysis

• Clop Ransomware Exploits Zero-Day Vulnerability to Breach Crown Resorts

• Command-and-Control Servers Explained. Techniques and DNS Security Risks

• Analysis: Hackers Exploit Zero-Day to Siphon $1.5 Million From Bitcoin ATMs

• ChatGPT Vulnerability Exposed Users’ Convos And Payment Details

• Why Fleksy Keyboard Is the Most Secure to Use

• The Security Vulnerabilities of Message Interoperability

• Leaky Buckets in 2023

• Laptop Keeps Shutting Off? Here’s How to Fix It

• AI terms you need to know

• TikTok Data Centre Blamed For Hampering Ukraine Ammo Production

• An Overview of the Quantum Revolution in Computing

• IAM isn’t cutting it, Spera raises $10M for a new approach to identity security

• Government Sets Out ‘Adaptable’ AI Plan

• ChatGPT Vulnerability May Have Exposed Users’ Payment Information

• Ransomware Crooks Are Exploiting IBM File Exchange Bug

• China Urges Apple To Improve Security And Privacy

• AI Could Replace Equivalent Of 300 Million Jobs

• Meet APT43: The Group That Hacks, Spies, And Steals For North Korea’s Ruling Elite

• Back and Bigger Than Ever! The Inside Man Season 5 Takes a Stab at Power Hungry Adversaries

• How To Install Filmoviplex filmovi online sa prevodom In PC – Windows 7, 8, 10, and Mac

• FTX cryptovillain Sam Bankman-Fried charged with bribing Chinese officials

• Trojanized TOR Browser Installers Spreading Crypto-Stealing Clipper Malware

• Financial cyberthreats in 2022

• Tech Industry Bids to Tackle Cyber-Mercenary Epidemic

• Redefining the Boundaries of People, Process, and Platforms

• Just 1% of Cloud Permissions Are Actively Used

• DDoS DNS attacks are old-school, unsophisticated … and they’re back

• Experts Warn of Self-Funding North Korean Group APT43

• Warning! 14 Million Customers Impacted by Latitude Financial`s Data Breach

• Why performing security testing on your products and systems is a good idea

• A Military-Type Explosive Sent Via USB Drive to Detonate When Plug-in To Computer

• North Korean APT43 Group Uses Cybercrime to Fund Espionage Operations

• How cybersecurity decision-makers perceive cyber resilience

• Microsoft Exchange Server vulnerability makes lawyers pay $200k as a settlement

• Understanding the difference between attack simulation vs penetration testing

• ICS/OT Cybersecurity 2022 TXOne Annual Report Insights

• UK Police Setup Thousands of  Fake DDoS-For-Hire Websites

• Visa fraud expert outlines the many faces of payment ecosystem fraud

• New York law firm gets fined $200k for failing to protect health data

• LATEST CYBERTHREATS AND ADVISORIES – MARCH 24, 2023

• Broken Object Level Authorization: API security’s worst enemy

• Microsoft announces Microsoft Incident Response Retainer

• Ignoring network automation is a ticking time bomb for security

• HackNotice Actions helps people to understand the extent of their data exposure

• Protegrity Borderless Data Solution enables compliant cross-border data flows

• NTT’s MDR service improves cyber resilience for organizations

• Netwrix upgrades its product portfolio and launches Netwrix 1Secure

• Understanding MQTT Security: A Comprehensive Overview

• China urges Apple to improve security and privacy

• How Does Data Literacy Enhance Data Security?

• ChatGPT helps both criminals and law enforcement, says Europol report

• Fake DDoS services set up to trap cybercriminals

• Signifyd and Adobe partner to eliminate the risk of payments fraud

• Endace collaborates with Niagara Networks to accelerate response to network threats

• Top Benefits of Using Flutter for Cross-Platform App Development

• Mandiant Catches Another North Korean Gov Hacker Group

• TV Networks Slam Facebook Over Allowing Scam Ads

• Apple patches all the iThings, including iOS 15 hole under attack right now

• With political ‘hacktivism’ on the rise, Google launches Project Shield to fight DDoS attacks

• Toyota Italy accidentally leaked sensitive data

• Apple patches all the iThings, including an iOS 15 hole under attack right now

• How to talk to users about cybersecurity

• With political ‘hacktivism’ on the rise, Google launches Project Shield to fight DDos attacks

• Eight Tips for CISOs Trying Get Their Board on Board

• Next Generation Cybersecurity for Small to Midsize Businesses

• IT Security News Daily Summary 2023-03-28

• CISA director says agency is working on cyber workforce gaps

• Bitter APT group targets China’s nuclear energy sector

• NASA plans to consolidate cloud contracts

• NullMixer Polymorphic Malware Variant Infects 8K Targets in Just a Month

• MacStealer Malware Plucks Bushels of Data From Apple Users

• PGP Encryption: The Email Security Standard

• Millions of Pen Tests Show Companies’ Security Postures Are Getting Worse

• Google again accused of willfully destroying evidence in Android antitrust battle

• Watermarking ChatGPT, DALL-E and other generative AIs could help protect against fraud and misinformation

• Microsoft launches AI-powered Security Copilot

• OPINION: Why Perfection is the Enemy of Progress in Cybersecurity

• How data insights can solve geographic inequity, build regional economies

• Bitwarden Announces Secrets Management With a Combination of Open Source, End-to-End Encryption, and Ease of Use

• NextWave Program Product and Service Specializations — Breakaway 1=5

• Texas may be about to scrap a voting security system it can’t replace

• Improve your technical knowledge with 13 CompTIA courses for $54.97

• Video: How to Build Resilience Against Emerging Cyber Threats

• Microsoft Puts ChatGPT to Work on Automating Cybersecurity

• Microsoft Introduces GPT-4 AI-Powered Security Copilot Tool to Empower Defenders

• How effective asset management supports data center sustainability

• Latitude Data breach is worse than initially estimated. 14 million individuals impacted

• Exchange Online will soon start blocking emails from old, vulnerable on-prem servers

• Research Says, Mobile Phones are Listening to Your Conversations

• Hacker Returns $200 Million Stolen from Euler Finance

• Why SASE will benefit from faster consolidation of networking and security

• UK Sets Up Fake Booter Sites To Muddy DDoS Market

• North Korea’s Kimsuky Evolves into Full-Fledged, Prolific APT

• France Bans TikTok And Other ‘Fun Apps’ On Government Devices

• Essential Cybersecurity Tips to Reduce the Risk of Data Breaches

• Member Feedback on (ISC)² 2023 Bylaws Requested by April 7

• Cybersecurity Industry News Review – March 28, 2023

• (ISC)² Listens: Women Working in Cybersecurity

• Dridex malware, the banking trojan

• The FBI Has Been Buying Bulk Internet Data from This Florida Company

• Parts of Twitter’s Source Code Leaked Online On GitHub

• Legacy Application Refactoring: How To Revive Your Aging Software

• How to prevent fork bombs on your Linux development servers

• Publicly disclosed U.S. ransomware attacks in 2023

• Clipboard-Injector Attacks Target Cryptocurrency Users

• New Research Examines Traffers and the Business of Stolen Credentials

• China asks Apple to bolster its data security and privacy protections

• Apple Releases Security Patches For Older iPhone and iPad Models

• Hey, Siri: Hackers Can Control Smart Devices Using Inaudible Sounds

• Microsoft’s ‘Security Copilot’ Sics ChatGPT on Security Breaches

• Two-Week ATO Attack Mitigated by Imperva

• Silicon Labs: Logitech MX Mouse and Keyboard

• Silicon Labs: MX Master 3S Mouse

• GPT-4 kicks AI security risks into higher gear

• Microsoft Security Copilot uses GPT-4 to help security teams move at AI speed

• France Bans TikTok, Other ‘Fun’ Apps From Government Devices

• North Korea Is Now Mining Crypto to Launder Its Stolen Loot

• How to Succeed As a New Chief Information Security Officer (CISO)

• Microsoft Conduct an Emergency Fix for the Notorious ‘Acropalypse’ Bug

• Dallas County: Sold Computers May Have Public’s Personal Details

• Chinese-Designed Apps Pose Greater Privacy Risks to Americans

• CLOPS Claim to Have Hacked 130 Organizations

• Securing Cloud-Native Applications: Tips and Tricks for Secure Modernization

• National Security AI and the Hurdles to International Regulation

• Bukele Has Defeated El Salvador’s Gangs—for Now. How? And What Does It Mean for the Region?

• The Importance of Data Security and Privacy for Individuals and Businesses in the Digital Age

• The U.S. Government Restricts the Use of Spyware, White House Says

• How to Comply with the U.S. Federal Trade Commission’s (FTC) revised Safeguards Rule

• Is the future of social media subscription-based?

• ChatGPT Data Breach Confirmed as Security Firm Warns of Vulnerable Component Exploitation

• SecurityScorecard Guarantees Accuracy of Its Security Ratings

• China’s Nuclear Energy Sector Targeted in Cyberespionage Campaign

• Nigerian BEC Scammer Sentenced to Prison in US

• Compare breach and attack simulation vs. penetration testing

• Europol warns of criminal use of ChatGPT

• US President Biden Kind Of Mostly Bans Commercial Spyware

• The FBI Has Been Buying Bulk Internet Data From Team Cymru

• North Dakota To Require Cybersecurity Education In Public Schools

• Clearview AI Used Nearly 1m Times By US Police, It Tells The BBC

• New IcedID Malware Variants Shift From Banking Trojans To Ransomware

• Cymulate’s 2022 Cybersecurity Effectiveness Report reveals that organizations are leaving common attack paths exposed

• Spend on Safety Measures & Call Out Insecure Practices for Safer IoT

• Executive Order Limiting Usage Of Commercial Spyware Signed

• Wi-Fi When Traveling: 7 Ways to Get Internet for Travel

• How to Find WiFi Anywhere You Go

• Electric Carmaker Nio Pushes New-Model Battery Swap Stations

• Remote Employees: Update Your Routers (and More WFH IT Tips)

• How to protect your Windows PC from the attack that led to the Linus Tech Tips hack

• Breaking the Mold: Pen Testing Solutions That Challenge the Status Quo

• IcedID Malware Shifts Focus from Banking Fraud to Ransomware Delivery

• Pakistan-Origin SideCopy Linked to New Cyberattack on India’s Ministry of Defence

• Cybersecurity Industry News Review – March 28, 2023

• Alibaba Group To Split In Major Restructure

• Prompt engineering and jailbreaking: Europol warns of ChatGPT exploitation

• Apple backports fix for exploited WebKit bug to older iPhones, iPads (CVE-2023-23529)

• Twitter To Demote Non-Paying Posts In Subscription Overhaul

• Introduction to Shift Left Testing

• Webinar Today: Understanding Hidden Third-Party Identity Access Risks

• 14 Million Records Stolen in Data Breach at Latitude Financial Services

• Security Vulnerabilities in Snipping Tools

• Clearview ‘Carried Out Nearly 1m Searches’ For US Police

• Europol details ChatGPT’s potential for criminal abuse

• Guaranteeing Employee Loyalty for Organisational Success

• How Do Market Leaders Get Valuable Consumer Data in 2023

• Future Data Breach Threats to UK Businesses

• How to Secure Your Mobile Device: 8 Tips for 2023

• iOS Security Update Patches Exploited Vulnerability in Older iPhones

• Thousands Access Fake DDoS-for-Hire Websites Set Up by UK Police

• Stealthy DBatLoader Malware Loader Spreading Remcos RAT and Formbook in Europe

• Vulnerabilities: Understand, mitigate, remediate

• Telecom giant Lumen suffered a ransomware attack and disclose a second incident

• Should you use your browser’s password manager or a dedicated app?

• France Set To Legalise AI-Powered Surveillance For Olympics

• Is the Future of Social Media Subscription-Based?

• A Recession Must Not Halt Modernisation Programmes

• Copy-paste heist or clipboard-injector attacks on cryptousers

• Cybersecurity Industry News Review – March 21, 2023

• US Reglators Seek Ban On Crypto Exchange Binance

• Hackers Earned $1,035,000 for Exploiting 27 Zero-Days at Pwn2Own Vancouver

• Become your organization’s cybersecurity expert with this $79 bundle

• Four Years Behind Bars for Prolific BEC Scammer

• President Biden Signs Executive Order Restricting Use of Commercial Spyware

• New IcedID Variants Switch From Delivering Malware To Bank Fraud

• MacStealer MacOS Malware Steals Passwords from iCloud Keychain

• US Reglators Seek To Ban Crypto Exchange Binance

• Call for Submissions to UK’s New Computer Misuse Act

• Motivations for Insider Threats: What to Watch Out For

• US Moves to Ban “Anti-Democratic” Spyware

• How to Join a Playstation Party on PC? Step by Step Guide

• Need to improve the detection capabilities in your security products?

• EU Security and Privacy Laws: What to Expect in 2023 and beyond

• Romance scams loss termed to have reached £10k on an average in UK

• Running a security program before your first security hire

• What you need before the next vulnerability hits

• How CIAM safely orchestrates your customers’ journey and its benefits

• Best Practices for Secure Remote Development

• Apple Issues Urgent Security Update for Older iOS and iPadOS Models

• Balancing security risks and innovation potential of shadow IT teams

• What the food and building industry can teach us about securing embedded systems

• Tausight expands its AI-based PHI Security Intelligence platform to cover new attack vectors

• US president Biden kind of mostly bans commercial spyware

• How CISOs Can Reduce the Danger of Using Data Brokers

• Apple patches everything, including a zero-day fix for iOS 15 users

• Using Artificial Intelligence in Finance

• Web Testing Tutorial: Comprehensive Guide With Best Practices

• Food giant Dole reveals more about ransomware attack

• Bogus Chat GPT extension takes over Facebook accounts

• Ransomware gunning for transport sector’s OT systems next

• GitHub accidentally exposes RSA SSH key

• Solving the password’s hardest problem with passkeys, featuring Anna Pobletts

• AU10TIX partners with Microsoft on decentralized verifiable credentials

• Hunters integrates its SOC Platform with Databricks Lakehouse

Generated on 2023-03-29 23:55:32.410700