IT Security News Daily Summary 2023-03-30

• Lessons from the metaverse

• Facebook Will Finally Allow Users To Opt Out Of Data Tracking In Europe

• Super FabriXss vulnerability in Microsoft Azure SFX could lead to RCE

• IRS tax forms W-9 email scam drops Emotet malware

• Compress File Using Mule 4 With AES 256 Encryption

• Every state sees tech workforce gains, report says

• How smaller agencies are working to close their technology talent gaps

• Report: Terrible employee passwords at world’s largest companies

• BEC Fraudsters Expand to Snatch Real-World Goods in Commodities Twist

• Ironing Out The macOS Details Of A Smooth Operator

• Secret Trove Offers Rare Look Into Russian Cyberwar Ambitions

• The new AI boom could increase data breaches, if companies aren’t held responsible

• Singapore bank faces regulatory action over ‘unacceptable’ digital service outage

• 3CX desktop app compromised, abused in supply chain attack

• New AlienFox toolkit harvests credentials for tens of cloud services

• The Future of Fintech Applications

• ChatGPT Ready to Write Ransomware But Failed to Go Deep

• Low-Code and No-Code Are the Future of Work — For IT and Beyond

• Ransomware attacks skyrocket as threat actors double down on U.S., global attacks

• Microsoft Patches ‘Dangerous’ RCE Flaw in Azure Cloud Service

• Court Grants Twitter Subpoena To Identify Source Code Leaker

• The challenges of collective cyber defense

• Anti-Bot Software Firm DataDome Banks $42M Financing

• Supply chain blunder puts 3CX telephone app users at risk

• Vulnerability Enabled Bing.com Takeover, Search Result Manipulation

• DataDome Closes $42M in Series C Funding to Advance the Fight Against Bot-Driven Cyberattacks and Fraud

• Organizations Reassess Cyber Insurance as Self-Insurance Strategies Emerge

• Researchers Detail Severe “Super FabriXss” Vulnerability in Microsoft Azure SFX

• GSA releases new 5G acquisition guidance for agencies

• cardholder data (CD)

• S3 Ep128: So you want to be a cyber­criminal? [Audio + Text]

• Socura Launches Managed SASE (MSASE) Service

• Google Uncovers more Details on Spanish-made Spyware that Targeted UAE Users

• Sam Bankman-Fried Pleads Not Guilty To Additional Charges

• Spyware Vendors Exploit 0-Days On Android and iOS Devices

• Italian agency warns ransomware targets known VMware vulnerability

• 2022 Industry Threat Recap: Finance and Insurance

• Localize this: Public reporting of opioid settlement cash

• Amid AI craze, what will it take for firms to take data security seriously?

• North Korean Hackers Use Trojanized 3CX DesktopApp in Supply Chain Attacks

• Chinese RedGolf Group Targeting Windows and Linux Systems with KEYPLUG Backdoor

• Afghanistan Requires a Change from Humanitarian Business as Usual

• Supply Chain Attack By Hackers On 3CX Desktop App

• Do you use comms software from 3CX? What to do next after biz hit in supply chain attack

• Clearview: Face Recognition Software Used by US Police

• iCloud Keychain Data and Passwords are at Risk From MacStealer Malware

• Judge Rules Google Deleted Chats In Antitrust Case

• Unpatched Security Flaws Expose Water Pump Controllers to Remote Hacker Attacks

• S3 Ep128: So you want to be a cybercriminal? [Audio + Text]

• Over 70% of Employees Keep Work Passwords on Personal Devices

• Apple acquires WaveOne that uses AI to compress videos

• Azure vulnerability allowed hackers to manipulate Bing results and take over accounts

• How Digital Twins Can Prevent the Metaverse from Becoming a Fad

• A Clear Road to Net Zero – Tackling Data Centre Sustainability Myths

• PCI DSS merchant levels

• Is your TikTok account hiding enemies of the state? How do you know?

• FDA Protects Medical Devices Against Cyber-Threats With New Measures

• 3CX voice and video conferencing software victim of a supply chain attack

• Ransomware gangs are exploiting IBM Aspera Faspex RCE flaw (CVE-2022-47986)

• US Healthcare Startup Brightline Impacted by Fortra GoAnywhere Assaults

• Why First-Party Data is the Key to Improving the Customer Experience

• Staying Safe in Our New AI World: How Organisations Can Protect Themselves

• The 10 Best Cybersecurity Companies in the UK

• Hackers Used Spyware Made In Spain To Target Users In The UAE

• Pro-Russian Hackers Target Elected US Officials Supporting Ukraine

• FDA Will Refuse New Medical Devices For Cybersecurity Reasons

• Court Orders GitHub To Reveal Who Leaked Twitter’s Source Code

• 6 Malware Removal Tips for Mac

• Can AWS Be Hacked? What You Need to Know

• The Risk and Reward of ChatGPT in Cybersecurity

• Why Leaders Must Embrace Technological Chaos

• X-Force Prevents Zero Day from Going Anywhere

• And Stay Out! Blocking Backdoor Break-Ins

• Azure Pipelines vulnerability spotlights supply chain threats

• Only 10% of workers remember all their cyber security training

• Companies Affected by Ransomware [2022-2023]

• Street Fighter 5 Not Launching? Here are 8 Easy Solutions

• Microsoft uses carrot and stick with Exchange Online admins

• Broadcom’s $61bn VMware Deal Faces Phase 2 CMA Probe

• Stop Blaming the End User for Security Risk

• Popular PABX platform, 3CX Desktop App suffers supply chain attack

• Why Endpoint Resilience Matters

• Chinese Cyberspies Use ‘Melofee’ Linux Malware for Stealthy Attacks

• 500k Impacted by Data Breach at Debt Buyer NCB

• New Mélofée Linux malware linked to Chinese APT groups

• How China’s Spies Fooled an America That Wanted to be Fooled

• What Is User Provisioning?

• How to stay safe while using public Wi-Fi

• Securing cloud tech stacks with zero trust will drive growth of confidential computing

• DataDome raises $42M to leverage machine learning for confronting bot attacks

• New Wi-Fi Protocol Security Flaw Affecting Linux, Android and iOS Devices

• US Gives Costa Rica $25M For Eradication Of Conti Ransomware

• NullMixer Campaign: A Threat to Cybersecurity

• New CISSP Exam Registration Process for 2023

• 3CX Confirms Supply Chain Attack as Researchers Uncover Mac Component

• Microsoft Cloud Vulnerability Led to Bing Search Hijacking, Exposure of Office 365 Data

• Cyberstorage: Leveraging the Multi-Cloud to Combat Data Exfiltration

• 3CX customers targeted via trojanized desktop app

• APT43: A New Cyberthreat From North Korea

• Microsoft Rolls Out Security Copilot For Swift Incident Response

• Amazon Opens Sidewalk Mesh Network To Third-Party Devices

• Top Vulnerabilities in 2023 and How to Block Them

• AlienFox Malware Targets API Keys and Secrets from AWS, Google, and Microsoft Cloud Services

• Advanced AI Poses Risk To Humanity, Open Letter Warns

• UK Introduces Mass Surveillance With Online Safety Bill

• The U.K. Police Hunts Cybercriminals with Fake DDoS-as-a-service Sites

• Technology Meets Gambling: How to Get The Most Out of Your Live Casino Experience

• Volume of HTTPS Phishing Sites Surges 56% Annually

• Selecting the right MSSP: Guidelines for making an objective decision

• iOS vs. Android – Which Is The More Secure Platform?

• NCA Celebrates Multimillion-Pound Fraud Takedowns

• ChatGPT and copywriting

• The Role of AI in Digital Marketing: Opportunities and Challenges

• The most important email conversation you will ever have

• New Mac Malware, and Stolen Session Cookies – Intego Mac Podcast Episode 285

• Thieves Steal $9m from Crypto Liquidity Pool

• 3CX Desktop App Supply Chain Attack Leaves Millions at Risk – Urgent Update on the Way!

• What Is the Ghost of Tsushima Legends Mode – Everything You Need to Know

• 3CXDesktop App Trojanizes in A Supply Chain Attack: Check Point Customers Remain Protected

• 3CX Desktop App Targeted in Supply Chain Cyber Attack, Affecting Millions of Users

• Do you know what your supply chain is and if it is secure?

• Developing Story: Information on Attacks Involving 3CX Desktop App

• 3CXDesktop App Trojanizes in A Supply Chain Attack: Check Point customers remain protected

• World Backup Day 2023: Five Essential Cyber Hygiene Tips

• US Federal agencies banned from using foreign spyware

• Warning: Your wireless networks may leak data thanks to Wi-Fi spec ambiguity

• Porn ID Laws: Your State or Country May Soon Require Age Verification

• Dangerous misconceptions about emerging cyber threats

• Scan and diagnose your SME’s cybersecurity with expert recommendations from ENISA

• Protect your entire business with the right authentication method

• The rise of biometrics and decentralized identity is a game-changer for identity verification

• alphaMountain has launched a new Cyber Threat analysis platform called “threatYeti”

• Elon Musk says AI Machines could launch their own Cyber Attacks

• Another year, another North Korean malware-spreading, crypto-stealing gang named

• There’s a chronic shortage of talent in cybersecurity, Microsoft says

• BreachLock API Penetration Testing Service prevents exploits of unpatched APIs

• BigID’s privacy suite discovers and classifies all CPRA-related data

• LOKKER Web Privacy Risk Score helps organizations measure and mitigate online privacy threats

• The best defense against cyber threats for lean security teams

• The cost-effective future of mainframe modernization

• Smugglers busted sneaking tech into China

• Musk, Scientists Call for Halt to AI Race Sparked by ChatGPT

• Spera Takes Aim at Identity Security Posture Management

• 8 Proven Ways to Combat End-of-Life Software Risks

• Malware disguised as Tor browser steals $400k in cryptocash

• QuSecure partners with Accenture to conduct multi-orbit data transmission secured with PQC

• Netskope and Zoom collaborate to improve security posture and maintaining compliance

• NanoLock and ISTARI team up to protect OT manufacturing environments

• Data Lakehouses: The Future of Scalable, Agile, and Cost-Effective Data Infrastructure

• Spira Takes Aim at Identity Security Posture Management

• BingBang: How A Simple Developer Mistake Could Have Led To Bing.com Takeover

• The US Is Sending Money to Countries Devastated by Cyberattacks

• ChatGPT happy to write ransomware, just really bad at it

• “Log-out king” Instagram scammer gets accounts taken down, then charges to reinstate them

• GSA makes a case for Login.gov on Capitol Hill following scathing report

• Versa Networks strengthens marketing team with three new executives

• Right-Hand Cybersecurity raises $5 million to expand its global operations

• Spera raises $10 million to equip cybersecurity teams with the visibility and risk contextualization

• Anomali and Canon IT join forces to combat zero-day threats

• Google reveals spyware attack on Android, iOS, and Chrome

• How an inclusive work environment attracts, retains tech workers

• Top Tech Talent Warns of AI’s Threat to Human Existence in Open Letter

• IT Security News Daily Summary 2023-03-29

• Mélofée: The Latest Malware Targeting Linux Servers

• Malware Hunters Spot Supply Chain Attack Hitting 3CX Desktop App

• Top Tech Talent Warns on AI’s Threat to Human Existence in Open Letter

• QNAP fixed Sudo privilege escalation bug in NAS devices

• Trojan-Rigged Tor Browser Bundle Drops Malware

• How is mLearning the Future of On-The-Go Dynamic Training Programs?

• How to Hide Tables in SQL Server Management Studio

• Senate committee advances open source software and digital identity bills

• Tech innovations get tryout in regulatory sandboxes

• Google: Spyware vendors exploiting iOS, Android zero days

• Arkansas Announces Lawsuit Against Facebook For Harming Young Users

• Patch Now: Cybercriminals Set Sights on Critical IBM File Transfer Bug

• Australia’s Casino Giant Crown Resorts disclosed data breach after Clop ransomware attack

• 5 Reasons mLearning is the Future of On-The-Go Dynamic Training Programs

• Cybersecurity Investment Outlook Remains Grim as Funding Activity Sharply Declines

• Phishing Emails Up a Whopping 569% in 2022

• Guidance on Potential Misconfiguration of Authorization of Multi-Tenant Applications that use Azure AD

• Spotify’s new Niche Mixes are tailor-made for me

• Microsoft’s Security Copilot brings AI to security, and it’s making me nervous

• Pig butchering scams: The anatomy of a fast‑growing threat

• Cybersecurity Investment and M&A Activity Slowed in Q1, 2023

• Microsoft Defender shoots down legit URLs as malicious

• Fake Tor Browser Installers Distributing Clipper Malware

• LeapXpert Banks $22M Funding to Secure Corporate Messaging With Consumer Apps

• OpenAI quickly fixed account takeover bugs in ChatGPT

• Pinduoduo Malware Executed a Dangerous 0-day Exploit Against Millions of Android Devices

• How to automatically lock your Windows PC with Dynamic Lock

• Cops use fake DDoS services to take aim at wannabe cybercriminals

• South Korea, US Seek Do Kwon Extradition

• How Can Enterprises, ML Developers, and Data Scientists Safely Implement AI to Fight Email Phishing?

• OpenAI Patches Account Takeover Vulnerabilities in ChatGPT

• Spera Banks $10 Million to Tackle Identity and Access Sprawl

• Blockchain Security Firm True I/O Raises $9 Million

• Vulnerability management vs. risk management, compared

• Aruba ClearPass Policy Manager NAC Solution Review

• Google: Commercial Spyware Used by Governments Laden With Zero-Day Exploits

• Using Observability to Power a Smarter Cybersecurity Strategy

• Cybersecurity Industry News Review – March 21, 2023

• API security: the new security battleground

• 10 Ways B2B companies can improve mobile security

• ‘New threats’ to national security are created by emerging tech, DHS chief says

• Google Warns Against Commercial Spyware Exploiting Zero-Days

• Defend against DDoS attacks with Azure DDoS IP Protection

• How to Keep Up With a Shifting Threat Landscape

• Another Democrat joins chorus of concerns about CBP’s mobile app

• Why formal government communications work better than informal ones

• Clop Ransomware Group Exploits GoAnywhere MFT Flaw

• Will you entrust cybersecurity to AI as per Microsoft

• Dark and Darker Developer Uses ChatGPT AI tool in Bid to Prove it Hasn’t Infringed Copyright

• Partnerships and improved data may bolster U.S. weather predictions

• OpenSSL 1.1.1 Nears End of Life: Security Updates Only Until September 2023

• Attacks Targeting APIs Increased By 400% in Last Six Months

• Enhanced Azure Arc integration with Datadog simplifies hybrid and multicloud observability

• Apple Launches Buy Now, Pay Later Service For US

• Beware of MacStealer: A New Malware Targeting macOS Catalina Devices

• How Threat Actors are Using IPFS for Email Phishing

• Improper Disposal of IT Equipment Poses Cyber Security Risks

• Sam Bankman-Fried Charged With Bribing Chinese Officials

• Overcoming Challenges and Best Practices for Data Migration From On-Premise to Cloud

• Cyber Storm Predicted at the 2023 World Economic Forum

• EU mandated messaging platform love-in is easier said than done: Cambridge boffins

• How Good Smile, a Major Toy Company, Kept 4chan Online

• Spyware Vendors Caught Exploiting Zero-Day Vulnerabilities on Android and iOS Devices

• Google TAG shares details about exploit chains used to install commercial spyware

• A Dispatch From Italy: Meloni’s First Six Months

• Enforcement of Cybersecurity Regulations: Part 2

• Barracuda Ransomware Report

• Viral KYC Scam in Mumbai Steals Rs 1 Crore from 81 Users

• New WiFi Flaw Let Attackers Hijack Network Traffic

• Nexus Android malware targets 450 financial applications

• Casino Giant Crown Resorts Investigating Ransomware Group’s Data Theft Claims

• New Wi-Fi Attack Allows Traffic Interception, Security Bypass

• The CISO Mantra: Get Ready to Do More With Less

• Investors Pull $1.6 Billion After US CFTC Charged Binance

• 5 common SD-WAN challenges and how to prepare for them

• The Power of the Team — Meeting Customers in the Cloud

• North Korean APT43 Group Finances Spy Activities Via Cybercrime

• Microsoft unveils AI-powered Security Copilot analysis tool

• New API Report Shows 400% Increase in Attackers

• How to use Bitwarden’s Password Manager in Chrome, Edge and Firefox

• What Makes an Effective Anti-Bot Solution?

• QuSecure and Accenture Test Multi-Orbit Communications Link Using Post-Quantum Cryptography

• Over 200 Organizations Targeted in Chinese Cyberespionage Campaign

• Most Weaponized Vulnerabilities of 2022 and 5 Key Risks: Report

• Google Links More iOS, Android Zero-Day Exploits to Spyware Vendors

• Smart Mobility has a Blindspot When it Comes to API Security

• How to Build a Research Lab for Reverse Engineering — 4 Ways

• Mélofée: Researchers Uncover New Linux Malware Linked to Chinese APT Groups

• Clipper attacks use Trojanized TOR Browser installers

• New Fake Tor Browser Theft Campaign Steals Over $400,000 In Crypto

• Cato Networks Recognised as Leader in Single-Vendor SASE Quadrant Analysis

• Clop Ransomware Exploits Zero-Day Vulnerability to Breach Crown Resorts

• Command-and-Control Servers Explained. Techniques and DNS Security Risks

• Analysis: Hackers Exploit Zero-Day to Siphon $1.5 Million From Bitcoin ATMs

• ChatGPT Vulnerability Exposed Users’ Convos And Payment Details

• Why Fleksy Keyboard Is the Most Secure to Use

• The Security Vulnerabilities of Message Interoperability

• Leaky Buckets in 2023

• Laptop Keeps Shutting Off? Here’s How to Fix It

• AI terms you need to know

• TikTok Data Centre Blamed For Hampering Ukraine Ammo Production

• An Overview of the Quantum Revolution in Computing

• IAM isn’t cutting it, Spera raises $10M for a new approach to identity security

• Government Sets Out ‘Adaptable’ AI Plan

• ChatGPT Vulnerability May Have Exposed Users’ Payment Information

• Ransomware Crooks Are Exploiting IBM File Exchange Bug

• China Urges Apple To Improve Security And Privacy

• AI Could Replace Equivalent Of 300 Million Jobs

• Meet APT43: The Group That Hacks, Spies, And Steals For North Korea’s Ruling Elite

• Back and Bigger Than Ever! The Inside Man Season 5 Takes a Stab at Power Hungry Adversaries

• How To Install Filmoviplex filmovi online sa prevodom In PC – Windows 7, 8, 10, and Mac

• FTX cryptovillain Sam Bankman-Fried charged with bribing Chinese officials

• Trojanized TOR Browser Installers Spreading Crypto-Stealing Clipper Malware

• Financial cyberthreats in 2022

• Tech Industry Bids to Tackle Cyber-Mercenary Epidemic

• Redefining the Boundaries of People, Process, and Platforms

• Just 1% of Cloud Permissions Are Actively Used

• DDoS DNS attacks are old-school, unsophisticated … and they’re back

• Experts Warn of Self-Funding North Korean Group APT43

• Warning! 14 Million Customers Impacted by Latitude Financial`s Data Breach

• Why performing security testing on your products and systems is a good idea

• A Military-Type Explosive Sent Via USB Drive to Detonate When Plug-in To Computer

• North Korean APT43 Group Uses Cybercrime to Fund Espionage Operations

• How cybersecurity decision-makers perceive cyber resilience

• Microsoft Exchange Server vulnerability makes lawyers pay $200k as a settlement

• Understanding the difference between attack simulation vs penetration testing

• ICS/OT Cybersecurity 2022 TXOne Annual Report Insights

• UK Police Setup Thousands of  Fake DDoS-For-Hire Websites

• Visa fraud expert outlines the many faces of payment ecosystem fraud

• New York law firm gets fined $200k for failing to protect health data

• LATEST CYBERTHREATS AND ADVISORIES – MARCH 24, 2023

• Broken Object Level Authorization: API security’s worst enemy

• Microsoft announces Microsoft Incident Response Retainer

• Ignoring network automation is a ticking time bomb for security

• HackNotice Actions helps people to understand the extent of their data exposure

• Protegrity Borderless Data Solution enables compliant cross-border data flows

• NTT’s MDR service improves cyber resilience for organizations

• Netwrix upgrades its product portfolio and launches Netwrix 1Secure

• Understanding MQTT Security: A Comprehensive Overview

• China urges Apple to improve security and privacy

• How Does Data Literacy Enhance Data Security?

• ChatGPT helps both criminals and law enforcement, says Europol report

• Fake DDoS services set up to trap cybercriminals

• Signifyd and Adobe partner to eliminate the risk of payments fraud

• Endace collaborates with Niagara Networks to accelerate response to network threats

Generated on 2023-03-30 23:55:29.723886