IT Security News Daily Summary 2023-04-01

• How microservices have transformed enterprise security

• Italy’s Data Protection Authority temporarily blocks ChatGPT over privacy concerns

• Zimbra email platform vulnerability exploited to steal European govt emails

• Behavior-Based Security Training to Stem Tide of Cybersecurity Breaches

• CISA adds bugs exploited by commercial surveillance spyware to Known Exploited Vulnerabilities catalog

• Why zero trust depends on solving identity sprawl

• Cybersecurity Industry News Review – March 28, 2023

• Ferrari Warns Customers Their Personal Data Might Have Been Hijacked

• IcedID: A New Era with ‘Lite and Fork’ Malware

• Online Privacy is a Myth; Here’s Why

• Fraudsters Are Difficult to Spot, Thanks to AI Chatbots

• Are Chatbots Making it Difficult to Trace Phishing Emails?

• Trojanized Tor Browser Bundle Drops Malware

• The Urgent Need to Address the Critical Bug in IBM’s Aspera Faspex

• ‘Vulkan’ Leak Offers a Peek at Russia’s Cyberwar Playbook

• Microsoft Fixes New Azure AD Vulnerability Impacting Bing Search and Major Apps

• Winnti APT Hackers Attack Linux Servers With New Malware ‘Mélofée’

• Summary Of News And Events That Happened This Week

• Build or Buy your own antivirus product

• Ukrainian cops nab suspects accused of stealing $4.3m from victims across Europe

• Tor Browser: What Is It? And How It Can Aid In Identity Protection

• 2023-03-31 – Qakbot (Qbot), obama247 distribution tag

• Business Wire’s Website is Currently Unavailable

• Cacti, Realtek, and IBM Aspera Faspex Vulnerabilities Under Active Exploitation

• Hackers Exploiting WordPress Elementor Pro Vulnerability: Millions of Sites at Risk!

• Italy Temporarily Blocks ChatGPT Over Privacy Concerns

• Zenoss introduces monitoring capabilities for Kubernetes

• Socura releases Managed SASE service to secure the hybrid workforce

• Lemon8 Enters US Top Charts With TikTok Parent

• This New AlienFox Toolkit Steals Credentials for 18 Cloud Services

• Steer clear of this EE phish that wants your card details

• 3 tips to raise your backup game

• 3 tips for creating backups your organization can rely on when ransomware strikes

• World Backup Day: Avoiding a data disaster is a forever topic

• Bad Content Moderation Is Bad, And Government Interference Can Make It Even Worse

• Italy Temporarily Blocks ChatGPT, Citing Privacy Issues

• Cybersecurity experts argue that pausing GPT-4 development is pointless

• NextGen TV, pagers transmit enhanced emergency data to responders

• Elastic Expands Cloud Security Capabilities for AWS

• IT Security News Monthly Summary – April

• IT Security News Daily Summary 2023-03-31

• Treading Water: The Struggle Against Third-Party Vulnerabilities and How True Automation Can Help.

• Dependency Poker for Scrum Teams

• The best travel VPNs of 2023: Expert tested

• Pro-Islam ‘Anonymous Sudan’ Hacktivists Likely a Front for Russia’s Killnet Operation

• Mimecast Report Reveals Nearly 60% of Companies in UAE and Saudi Arabia Need to Increase Cybersecurity Spending

• The FDA’s Medical Device Cybersecurity Overhaul Has Real Teeth, Experts Say

• New Cylance Ransomware Targets Linux and Windows, Warn Researchers

• Space Force is building a virtual training ground for space conflict

• Stupid Patent of the Month: Traxcell Tech Gets Ordered To Pay Attorneys’ Fees

• S4x23 Review Part 4: Cybersecurity for Industrial IoT

• How one state looks to shared cyber services to defend rural areas

• Study: Women in cybersecurity feel excluded, disrespected

• Hackers are actively exploiting a flaw in the Elementor Pro WordPress plugin

• NYPD blues: Cops ignored 93 percent of surveillance law rules

• IG: Social Security isn’t moving fast enough on agile development

• How to Solve IoT’s Identity Problem

• Adaptive Access Technologies Gaining Traction for Security, Agility

• A Machine With First Amendment Rights

• PRODUCT REVIEW: Trend Micro Cloud One

• Report: 39% of VA IT contract awards didn’t have CIO approval

• German Police Raid DDoS-Friendly Host ‘FlyHosting’

• After Students Challenged Proctoring Software, French Court Slaps TestWe App With a Suspension

• The best home security systems of 2023: Expert reviewed

• Glitch in system upgrade identified as cause of delays at Singapore immigration

• Is Decentralized Identity About to Reach an Inflection Point?

• Ukraine Busts Gang for Massive $4.3 Million Phishing Scams

• Chinese Hackers Using KEYPLUG Backdoor to Attack Windows & Linux Systems

• Working in cybersecurity and zero trust with Ericom Software’s David Canellos

• CISA Moving Further Towards Pre-Emptive Stance with Ransomware Attack Alert System

• Latest Cyberthreats and Advisories – March 31, 2023

• Women in Cybersecurity – History to Today

• A new resource to roll out responsible AI

• FDA Announces New Cybersecurity Requirements for Medical Devices

• Italy’s Privacy Watchdog Blocks ChatGPT Amid Privacy Concerns

• The Role of International Assistance in Cyber Incident Response

• FDA Sets New Medical Devices Cybersecurity Standards

• NATO and Diplomats’ Email Portals Targeted by Russian APT Winter Vivern

• NHS IT systems under disruption threat due to cyber attack on Capita

• Modular “AlienFox” Toolkit Used to Steal Cloud Service Credentials

• New Azure Flaw “Super FabriXss” Enables Remote Code Execution Attacks

• Vulkan Playbook Leak Exposes Russia’s Plans for Worldwide Cyberwar

• Apple’s iOS 16.4: Security Updates Are Better Than New Emoji

• Know These Potential Drawbacks Before Joining New Social Media Sites

• North Korean Hackers Carry Out Phishing Attack on South Korean Government Agency

• CISA Warns of Vulnerabilities in Propump and Controls’ Osprey Pump Controller

• Report: Chinese State-Sponsored Hacking Group Highly Active

• PCI DSS 12 requirements

• Winter Vivern APT Targets European Government Entities with Zimbra Vulnerability

• AlienFox Toolset Harvests Credentials From 18 Cloud Services

• Pro-Russia Cyber Gang Winter Vivern Puts US, Euro Lawmakers In Line Of Fire

• Hacking Campaign Exploited Zero Day Tied To Spyware Firm

• ChatGPT Banned In Italy Over Privacy Concerns

• Study Reveals WiFi Protocol Vulnerability Exposing Network Traffic

• Is It Time to Start Hiding Your Work Emails?

• US Space Force Requests $700M for Cybersecurity Blast Off

• Cyber Police of Ukraine arrested members of a gang that defrauded EU citizens of $4.33M

• Leading Tech Talent Issues Open Letter Warning About AI’s Danger to Human Existence

• Security Copilot: Microsoft Employes GPT-4 to Improve Security Incident Response

• Lumen Technologies Hit by Two Cyberattacks

• Votiro Raises $11.5 Million to Prevent File-Borne Threats

• What CISOs Can Do to Build Trust & Fight Fraud in the Metaverse

• Late Efforts at the International Law Commission to Decriminalize the Crime of Aggression Is Wrong in Law

• Maintaining Data Integrity With Growing Cybersecurity Concerns

• Post-Quantum Satellite Protection Rockets Towards Reality

• Privacy Implications of Web 3.0 and Darknets

• Face Biometric Authentication: Pros and cons

• Ukrainian Authorities Stop a Phishing Scam Worth $4.3 million

• Latest Cyberthreats and Advisories – March 31, 2023

• Leaked Vulkan Files Reveal Kremlin’s Cyberwarfare Tactics

• Top 60 Cybersecurity Startups to Watch

• Deep Dive Into 6 Key Steps to Accelerate Your Incident Response

• Cyber Police of Ukraine Busted Phishing Gang Responsible for $4.33 Million Scam

• Mandiant Investigating 3CX Hack as Evidence Shows Attackers Had Access for Months

• Leaked Documents Detail Russia’s Cyberwarfare Tools, Including for OT Attacks

• Smart Grid Fragility, a Constant Threat for the European and American Way of Living

• Psst! Infosec bigwigs: Wanna be head of security at HM Treasury for £50k?

• Virgin Orbit Lays Off 85 Percent Of Staff

• 3CX Supply Chain Attack — Here’s What We Know So Far

• Russian APT group Winter Vivern targets email portals of NATO and diplomats

• Ukraine Cyberpolice Dismantles Fraud Ring That Stole $4.3 million

• For Cybersecurity, the Tricks Come More Than Once a Year

• Warning: Threat Actors Compromise 3CX Desktop App in a Supply Chain Attack

• Best Practices for Effective Identity Lifecycle Management (ILM)

• Japan Joins US, Netherlands, In Chip Export Restrictions To China

• NHS Highland ‘reprimanded’ by data watchdog for BCC blunder with HIV patients

• Severe Azure Vulnerability Led to Unauthenticated Remote Code Execution

• UK Regulator: HIV Data Protection Must Improve

• GCHQ Updates Security Guidance for Boards

• Ukrainian Police Bust Multimillion-Dollar Phishing Gang

• Can’t Clear Your Browser History? Here’s How to Fix It

• Using Data and Analytics to Improve Hedge Fund Performance: Strategies and Techniques

• Red Hat Shares – Security automation

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows?

• Pro-Russia cyber gang Winter Vivern puts US, Euro lawmakers in line of fire

• The UK Government Shares New Strategy to Boost NHS Cybersecurity by 2030

• Azure ADを使用するマルチテナント アプリケーションの承認に関する構成ミスの可能性に関するガイダンス

• Gamers playing with real money should be wary of scammers.

• Apple’s iOS 16.4: Security Updates Are Better Than a Goose Emoji

• Overcoming obstacles to introduce zero-trust security in established systems

• New infosec products of the week: March 31, 2023

• Sundry Files – 274,461 breached accounts

• Cloud diversification brings complex data management challenges

• Leveraging network automation to enhance network security

• The foundation of a holistic identity security strategy

• Real Talk with CCSPs: An Interview with Panagiotis Soulos

• BlackGuard stealer extends its capabilities in new variant

• ReasonLabs Dark Web Monitoring identifies malicious online activity

• AttackIQ Ready! gives security teams a clear portrait of their security program performance

• Intruder unveils API scanning to help organizations reduce exposure

• OSC&R open software supply chain attack framework now on GitHub

• authentication factor

• CSR (Certificate Signing Request)

• World Backup Day is here again – 5 tips to keep your precious data safe

• Leaked Reality – 114,907 breached accounts

• Leaked IT contractor files detail Kremlin’s stockpile of cyber-weapons

• 3CX Desktop App Supply Chain Attack Targets Millions – Known Facts and First Expert Comments

• Azure blunder left Bing results editable, MS 365 accounts potentially exposed

• Microsoft adds GPT-4 to its defensive suite in Security Copilot

• Former President Trump Indicted

• Smart home assistants at risk from “NUIT” ultrasound attack

• 3CX desktop app used in a supply chain attack

• “BingBang” flaw enabled altering of Bing search results, account takeover

• Update now! Apple fixes actively exploited vulnerability and introduces new features

• Votiro raises $11.5 million to accelerate global expansion

• IBM partners with Wasabi to power data insights across hybrid cloud environments

• Cynerio and Sodexo join forces to address growing threats to medical IoT devices

• Certa collaborates with ID-Pal to simplify third-party onboarding

• Digital Rights Updates with EFFector 35.4

Generated on 2023-04-01 23:55:24.444717