IT Security News Daily Summary 2023-04-05

• Beware of new YouTube phishing scam using authentic email address

• A mobile-first approach enhances police operations

• post-quantum cryptography

• New “Lily Collins” Hack Is Locking People Out Of Their Facebook Accounts

• Garage Door Openers Open to Hijacking, Thanks to Unpatched Security Vulns

• Researcher Tricks ChatGPT Into Building Undetectable Steganography Malware

• New York City Is Dismantling Low-Cost Community Broadband

• In the face of extreme floods, rural Kentucky lacked forecasting and broadband

• Extreme Networks ExtremeControl: NAC Product Review

• Tax preparation and e-file service eFile.com compromised to serve malware

• OMB failing to set cross-agency IT management goals, report says

• Securing remote access grows crucial for DevSecOps

• How to use Android’s lockdown mode (and why)

• The best browsers for privacy in 2023

• Why you should spring clean your home network and audit your backups

• X-Force Identifies Vulnerability in IoT Platform

• DOD wants innovation to counter drone swarms

• AI helps responders mine social media for public safety insights

• Hornetsecurity Returns to Compete in 2023 ‘ASTORS’ Awards Program

• How to find out if an AirTag is tracking you

• Over 15 Million Systems Exposed to Known Exploited Vulnerabilities

• Red Hat OpenShift sandboxed containers for debugging with elevated privileges

• Bank of England Demands Cyber Crackdown After Russia-linked Attacks

• Locks, Stocks and Brokers: Hackers and Insider Trading

• US government warning! What if anyone could open your garage door?

• Cybersecurity Fatigue: Its Impact and Solutions

• UK’s National Cyber Force Outlines ‘Responsible’ Cyber Operations

• Elon Musk’s Twitter Sued Again Over Unpaid Bills

• Push Security Raises $15 Million in Series A Funding

• Tax Return Filing Service eFile.com Caught Serving Malware

• 42% of IT leaders told to maintain breach confidentiality

• Researcher Tricks ChatGPT into Building Undetectable Steganography Malware

• Marketplace 600K Records Leaked by Database Snafu

• Here’s where the A.I. jobs are

• DOJ, FBI seize massive criminal marketplace in larger fight against state-backed cybercrime

• (ISC)² Supports Cyber Newcomers

• How CIAM safely orchestrates your customers’ journey and its benefits

• Dridex malware, the banking trojan

• Z2U Market Leak Exposes Access to Illicit Services and Malware

• Calls to regulate AI are growing louder. But how exactly do you regulate a technology like this?

• How the Last Big Breach Will Help You Prepare for the Next Cyber Crisis

• FBI (and Others) Shut Down Genesis Market

• Popular Cybercrime Website Shut Down By Police

• JavaScript Malware Infects eFile.com Service Since Mid-March

• Log4j Bug Abused In New Proxyjacking Attacks To Resell Bandwidth , Abuse Enterprise Cloud

• Hackers Can Remotely Open Smart Garage Doors Across The World

• Agent 008: Chaining Vulnerabilities to Compromise GoCD

• QNAP Zero-Days Leave 80K Devices Vulnerable to Cyberattack

• FBI Seizes Genesis Cybercriminal Marketplace in ‘Operation Cookie Monster’

• DOJ announces seizure of cybercrime marketplace Genesis while Treasury issues sanctions

• Is Italy’s ChatGPT Ban Setting a New Standard for the Rest of Europe?

• Genesis Market Takedown Sees 120 Suspects Arrested

• Authorities Seized Most Popular Marketplace for Stolen Credentials

• HP would take up to 90 days to fix a critical bug in some business-grade printers

• Google TAG Alerts Of ARCHIPELAGO Cyberattacks Linked To North Korea

• Keeper Security and KnowBe4 Sponsor European Cybersecurity Blogger Awards 2023

• Fortinet enhances Security Fabric with real-time response and automation capabilities

• Flood of malicious packages results in NPM registry DoS

• Cyber threats organizations should keep an eye on in 2023

• Million-Dollar Ransom Demanded by Ransomware Gang

• Pinduoduo App Malware: A Security Warning

• Clearview AI Scraps 30 Billion Images Illicitly, Giving Them to Cops

• Choosing the Right IAM Solution

• CryptoClippy: New Clipper Malware Targeting Portuguese Cryptocurrency Users

• Civilianization of Digital Operations: A Risky Trend

• U.K. National Cyber Force, Responsible Cyber Power, and Cyber Persistence Theory

• The Future Of IMEI Technology ─ 5 Trends And Innovations To Watch In 2023

• Treasury sanctions cybercrime marketplace Genesis Market

• To Combat Cyber Threats, Cytech Ventures LCC and Wazuh Sign a Crucial Partnership Agreement

• An intro to the IDMZ, the demilitarized zone for ICSes

• ICS kill chain: Adapting the cyber kill chain to ICS environments

• Reinforce industrial control system security with ICS monitoring

• UK Discloses Offensive Cyber Capabilities Principles

• 3 Fronts in the Battle for Digital Identity

• Genesis Market’s Clearnet domain seized; Dark Web site still online

• Nexx Ignores Vulnerabilities Allowing Hackers to Remotely Open Garage Doors

• Cybercrime Website Genesis Market Seized by FBI

• Android’s April 2023 Updates Patch Critical Remote Code Execution Vulnerabilities

• Chrome 112 Patches 16 Security Flaws

• KPMG Tackles AI Security With Cranium Spinout

• FBI Leads International Effort to Seize Domains for Notorious Genesis Market

• Unraveling Rorschach

• Google TAG Warns of North Korean-linked ARCHIPELAGO Cyberattacks

• Hackers Using Self-Extracting Archives Exploit for Stealthy Backdoor Attacks

• Law enforcement seized the Genesis Market cybercrime marketplace

• CISA JCDC Will Focus on Energy Sector

• Here’s where the A.I. jobs are, according to a Stanford study

• Google Staff In London Walkout Over Job Cuts

• New GRC Platform TrustRegister Links Risk to Revenue Impact

• Protect Your Company: Ransomware Prevention Made Easy

• Transforming Network Security with AI-Powered Innovations in SASE

• Spain’s Extremely Dangerous And Evasive Hacker Now In Custody

• Why Employ a Cloud Access Security Broker?

• Stream2Watch 2023- Top 10 Alternatives to Watch Live Sports

• Microsoft tells admins to autoreview your Autopatch alerts or autolose the service

• China Asks WTO To Scrutinise Chip Export Restrictions

• Rorschach – Fastest Encryption Ransomware Ever Found in Ransomware History

• No More Goerli Faucet! Using the New Infura Sepolia Faucet for Ethereum Smart Contract Testing

• An Overview of the Quantum Revolution in Computing

• New Threat Uncovered: Rorschach Ransomware – The Fastest Encryptor

• New Rilide Malware Strikes Chromium-Based Browsers to Steal Cryptocurrency

• Securing your Digital Life: MFA, Password Managers and Risk

• Tripwire and Fortra: Helping Secure IT and OT Environments Better than Ever

• Virgin Media Suffers Broadband Outage, Again

• Get two years of ultimate VPN protection on unlimited connections for only $60

• The Telegram phishing market

• New Strain of Rorschach Ransomware Targeting US- Firms

• Database Snafu Leaks 600K Records from Marketplace

• Malicious Spam Campaign Downs npm Registry

• Typhon Reborn Stealer Malware Resurfaces with Advanced Evasion Techniques

• STYX Marketplace emerged in Dark Web focused on Financial Fraud

• What is “This person is unavailable on Messenger” – 12 Quick Ways to Fix it

• How To Choose The Right Headphones For Gaming

• Why performing security testing on your products and systems is a good idea

• Notorious stolen credential warehouse Genesis Market seized by FBI

• The Arraignment of Donald J. Trump: A Detailed Summary

• AI Chatbot customer care replacing Ministers and their favors

• Jobs created using ChatGPT

• Stop online counterfeiters dead in their tracks

• How AI is transforming cybersecurity for better and worse

• How often should security audits be?

• Akamai introduces new premium offering and updated managed security service program

• F5 protects digital services with AI-powered app and API security capabilities

• Re-evaluating immature and ineffective insider risk management programs

• The high cost of insecure authentication methods

• IBM unveils new options to help clients reach their sustainability goals

• Not all CNAPP Vendors are like us: Check Point Recognized as a Representative Vendor for CloudGuard in 2023 Gartner Market Guide for CNAPP

• And So It Begins: On the First Charges to Drop Against Former President Donald Trump

• How to Teach Your Child Coding: A Gift for Their Digital Future

• Rilide Malware – New Crypto Stealer Hits Chromium-Based Browsers

• Pre-ransomware notifications are paying off right from the bat

• 2023 State of Malware Report: What the channel needs to know to stay ahead of threats

• Livestream: Manhattan DA Offers Remarks After Trump Arraignment

• Trace3 acquires Set Solutions to boost cybersecurity capabilities

• Push Security raises $15 million and launches a host of new features

• McAfee partners with Acer to provide consumers device security, privacy, and identity protection

• Can ChatGPT write a novel code attack? This researcher says it can be done

• Feds seize $112m in cryptocurrency linked to ‘pig-butchering’ finance scams

• Cybercrime marketplace Genesis Market shut by FBI, international law enforcement

• F5 Safeguards Digital Services With New AI-Powered App and API Security Capabilities

• CardinalOps Launches MITRE ATT&CK Security Layers for Measuring Detection Posture

• Industrial Defender Launches Phoenix: OT Visibility & Security Solution for Small to Midsized Operations

• Cybereason Secures $100M in Funding Led by SoftBank Corp.

• Enough is Enough. Tell Congress to Ban Federal Use of Face Recognition

• Can ChatGPT write a novel code attack? This researcher shows it can be done

• Law Firm for Uber Loses Drivers’ Data to Hackers in Yet Another Breach

• ALPHV/BlackCat ransomware affiliate targets Veritas Backup solution bugs

• Cloud Visibility and Port Spoofing: the “Known Unknown”

• A Question of Doubt

• IT Security News Daily Summary 2023-04-04

• Spring into action and tidy up your digital life like a pro

• eFile Tax Return Software Found Serving Up Malware

• New York Trump Indictment Unsealed

• Police Capture Genesis Market, Biggest Venue For Online Fraud

• Watchdog dings Energy Dept over cloud security

• White House official touts digital training programs to bridge gap in AI procurement

• How co-ops can deliver faster, less expensive procurement

• FBI Seizes Bot Shop ‘Genesis Market’ Amid Arrests Targeting Operators, Suppliers

• Study: Facebook Was A Major Source Of Fake News During Last Election

• Enabling Secure Digital Transformation in Healthcare

• Phone Systems Giant 3CX Supply-Chain Attack Induces A Domino Effect

• Severe Elementor Pro WP Plugin Vulnerability Actively Exploited

• Smart locks endanger tenants’ privacy and should be regulated

• Social media age verification faces practicality, privacy challenges

• The best identity theft protection & credit monitoring services in 2023

• March ransomware disclosures spike behind Clop attacks

• Myriad™ – All-Flash, Scale-Out File & Object Storage for Unstructured Data

• Rajant Returns to Compete in 2023 ‘ASTORS’ with Cardinal Breadcrumb

• Strivacity Scores $20M for CIAM Expansion Plans

• Snyk bolsters developer security with fresh devsecop, cloud capabilities

• Myriad™ – All-Flash, Scale-Out File & Object Storage for Unstructured Data

• Mysterious ‘Rorschach’ Ransomware Doubles Known Encryption Speeds

• Rorschach ransomware has the fastest file-encrypting routine to date

• Myriad™ – All-Flash, Scale-Out File & Object Storage for Unstructured Data

• Einstein tilings – the amazing “Hat” shape that never repeats!

• 5 Best LastPass Alternatives in 2023

• The Broad, Vague RESTRICT Act is a Dangerous Substitute for Comprehensive Data Privacy Legislation

• How Web 3.0 is Revolutionizing the Internet: A Technical Comparison with Web 2.0

• Myriad™ – All-Flash, Scale-Out File & Object Storage for Unstructured Data

• Absolute zero in the quantum computer

• Chinese fraudsters: evading detection and monetizing stolen credit card information

• Western Digital Network Breach – Hackers Gained Access to Company Servers

• Myriad™ – All-Flash, Scale-Out File & Object Storage for Unstructured Data

• 15M+ Services & Apps Remain Sitting Ducks for Known Exploits

• What RASP Should Have Been

• CISA adds Zimbra bug exploited in attacks against NATO countries to its Known Exploited Vulnerabilities catalog

• UK data regulator issues warning over generative AI data protection concerns

• ChatGPT Has a Big Privacy Problem

• Arid Viper Using Upgraded Malware In Middle East Cyberattacks

• Discover a new era of security with Microsoft at RSA 2023

• New “Rorschach” Ransomware Spread Via Commercial Product

• Inside the Lazarus Heist: Multi-Billion Dollar Theft in Two Hours

• DISH Network: Multiple Lawsuits Filed Against Dish After a Ransomware Attack

• 3CX Supply Chain Attack Compromised Cryptocurrency Companies

• Hackers launched a DDoS Attack against CheckPoint and anticipate to target it again

• Western Digital Hit By Network Security Breach

• Defend against DDoS attacks with Azure DDoS IP Protection

• Role of AI in Revolutionizing Penetration Testing

• German Police Raid FlyHosting, a DDoS-Friendly Hosting Provider

• Smarter risk analysis can help tax agencies crack down on identity fraud

• TikTok bans explained: Everything you need to know

• 3CX Supply chain attack allowed targeting cryptocurrency companies

• ChatGPT and the First Amendment: Whose Rights Are We Talking About?

• Al-Qaeda’s Looming Threat: Are We Looking Over the Wrong Horizon?

• Not all CNAPP Vendors Stack Up: Check Point CloudGuard Recognized as Representative Vendor in Gartner CNAPP Market Guide

• TikTok’s Trials and Tribulations Continue With UK Data Protection Fine

• Trustle Raises $6M Seed Funding for Access Management Tech

• Zimbra Flaw Exploited by Russia Against NATO Countries Added to CISA ‘Must Patch’ List

• New Rilide Malware Targeting Chromium-Based Browsers to Steal Cryptocurrency

• Rorschach Ransomware Emerges: Experts Warn of Advanced Evasion Strategies

• Sorting Through Haystacks to Find CTI Needles

• North Korea Hacking Cryptocurrency Sites with 3CX Exploit

• TikTok Fined £12.7 Million For Violating Children Data Protection

• New Generation of Phishing Hides Behind Trusted Services

• How to encrypt a file on Linux (and when you should)

• Tripwire Patch Priority Index for March 2023

• How Strategic Investors Can Help Cybersecurity Startups

• Prevent and detect Adobe ColdFusion exploitation (CVE-2023-26360, CVE-2023-26359)

• UK data watchdog fines TikTok £12.7M for failing to protect kids

• Is TestOps the Future of Software Testing?

• Self-Propagating, Fast-Encrypting ‘Rorschach’ Ransomware Emerges

• CardinalOps Extends MITRE ATT&CK-based Detection Posture Management

• Foreign Cash Flows Into China On Alibaba Breakup Plan

• TikTok Fined £12.7m For Violating UK Data Privacy Laws

• TikTok Fined £12.7m For UK Data Protection Law Breaches

• Hey Siri, Use This Ultrasound Attack To Disarm A Smart-Home System

• UK’s Offensive Hacking Unit Takes On Military Opponents And Terrorist Groups

• Microsoft Will Block Dangerous Extensions In OneNote

• Uber Driver Info Stolen Yet Again: This Time From Law Firm

• How To Start A Reseller Hosting Business

• kissCartoon 2023- Top 20 Alternatives to Watch Cartoon Online

• Revolutionizing Banking System: The Power of White Label Payment Platforms

• ICO Fines TikTok £12.7m Over Children’s Data

• WiFi Flaws Allow Network Traffic Interception on Linux, iOS, and Android

• How to Use HashiCorp Boundary for Secured Remote Access

• CYBERSECURITY INDUSTRY NEWS REVIEW – APRIL 4, 2023

• Designing Tabletop Exercises That Actually Thwart Attacks

• Japan Set To Ramp Chip Spending Amidst US Push

• Uber Driver Data Stolen Again From the Servers of Law Firm

• 3CX Supply Chain Attack: North Korean Hackers Likely Targeted Cryptocurrency Firms

• Cybereason Raises $100 Million, Appoints New CEO

• NATO Seeks Contractors to Test Security of Web Assets

• Think Before You Share the Link: SaaS in the Real World

• Arid Viper Hacking Group Using Upgraded Malware in Middle East Cyber Attacks

• CVE-2023-26360 – Adobe ColdFusion Arbitrary Code Execution

• Dark Web Narco Gangs are a Major Concern for Law Enforcement

• Virgin Media Broadband Outage Affects Thousands

• A Tiny Blog Took on Big Surveillance in China—and Won

• OneNote Security Tightened By Microsoft To Block 120 File Extensions

• My Cloud Goes Down While Data Storage Giant Announces Network Breach

• 15 Million Systems Are Vulnerable to CISA KEV Flaws

• Learn how to provide your company with maximum security for $79

• HTTP/S DDoS Attacks Soar 487% in Three Years

• The Future of CS:GO Skins: What’s Next for Collectors and Traders

• Tesla Told To Pay $3.2m In Racial Harrassment Lawsuit

• Distributed Energy Resources and Grid Security

• US Authorities Seize $112m From “Pig Butchering” Scammers

• DoJ cracks down on cryptocurrency fraud, seizes $112 million in linked funds

• How Blockchain Technology Will Impact These Top 5 Industries

• Crypto Firms Are Likely Target for 3CX Attacks

• Brightness Keeps Going Down on iPhone Screen? Try These Fixes

• VirusTotal += Deep Instinct

• Martha Lane-Fox Warns Against AI ‘Hysteria’

• Virgin Orbit Files For Bankruptcy In US

• Cyber spring cleaning: Decluttering your digital home

• New data extortion email campaign copying ransomware gang techniques

• Need to improve the detection capabilities in your security products?

• Safe Travels? Check Point Research puts a spotlight on a growing underground market selling flight points, hotel rewards and stolen credential of airline accounts

• The Security Challenges of Generative AI Tools: Can a Loose Prompt Sink Your Ship?

• Obsidian’s SSPM solution enables organizations to increase their SaaS security

• Podcast Episode: Losing Until We Win: Realistic Revolution in Science Fiction

• Bank rewrote ads for infosec jobs to stop scaring away women

• What are the Mobile App Security Best Practices

• Microsoft Tightens OneNote Security by Auto-Blocking 120 Risky File Extensions

• After Italy, Germany to issue ban on the ChatGPT use

• Android April 2023 Security Updates fix several critical vulnerabilities

• Shadow data slipping past security teams

• Streamlining cybersecurity decision-making for analysts and CISOs

• How can organizations bridge the gap between DR and cybersecurity?

• Vulnerabilities impacting multiple QNAP operating systems (CVE-2022-27597, CVE-2022-27598)

• Australia takes its turn to kick TikTok off government kit

• FTC extends deadline by six months for compliance with some changes to financial data security rules

• IRS system doesn’t meet all cloud security requirements, watchdog says

• Cryptocurrency Companies Targeted in Sophisticated 3CX Supply Chain Attack

• Guardz launches dedicated cybersecurity platform for MSPs and IT professionals

• Lack of security employees makes SMBs sitting ducks for cyber attacks

• 2023-04-03 – IoC update: Qakbot (Qbot) TCP port 65400 traffic changes IP address

• Cyber Insurance Coverage FAQ with DataStream CEO

• Hey Siri, use this ultrasound attack to disarm a smart-home system

• On Validation

• Data-storage firm Western Digital confirms cyberattack disrupted operations

• UK says its offensive cyber operations are ‘accountable, precise, and calibrated’

• A week in security (March 27 – April 2)

• TikTok: What’s going on and should I be worried?

• Super FabriXss: an RCE vulnerability in Azure Service Fabric Explorer

• Big changes to Twitter verification: How to spot a verified account

• New macOS malware steals sensitive info, including a user’s entire Keychain database

Generated on 2023-04-05 23:55:28.749619