IT Security News Daily Summary 2023-04-06

• Cyber Academy’s inaugural class to bolster city defenses

• Pentagon lags on software buying reforms, GAO says

• DDoS attacks rise as pro-Russia groups attack Finland, Israel

• CISA director details plan to address security risks in open source software

• Twitter ‘Shadow Ban’ Bug Gets Official CVE

• ‘BEC 3.0’ Is Here With Tax-Season QuickBooks Cyberattacks

• Phishers migrate to Telegram

• IRS outlines tech modernization, CX plans as part of $80 billion overhaul

• Comparing enabled and enforced MFA in Microsoft 365

• Chatbot Controversy in Europe: Italy Blocks ChatGPT. What’s next?

• Russia has a stash of scary malware? We’re shocked

• A fight against floppy discs evolves into a prison rights crusade

• How to delete yourself from internet search results and hide your identity online

• Facebook Is Giving Users More Control Over Spam In Their Feeds

• Australia Is Scouring the Earth for Cybercriminals — the US Should Too

• Google Wants Android Apps To Have More Control Of Data Policy

• 119 arrested in Genesis Market takedown

• Designing Your Threat Hunting Framework from Scratch – Core Essentials

• Media Briefing: Proposed UN Cybercrime Treaty Negotiations Headed in Troubling Direction, Sidestepping Human Rights Protections and Threatening Free Expression, EFF and Allies Warn

• DevOps threat matrix

• Attaining Document Security in FileNet Content Management System

• Using ChatGPT as an Enabler for Risk and Compliance

• Cisco Patches Code and Command Execution Vulnerabilities in Several Products

• Threat Actors Increasingly Use Telegram For Phishing Purposes

• IT Spending To Grow 5.5 Percent In 2023, Predicts Gartner

• Uber Drivers’ Data Exposed in Breach of Law Firm’s Servers

• Secure hybrid and remote workplaces with a Zero Trust approach

• AI Chatbot leads to a married man’s suicide

• Tesla Staff Shared Sensitive Customer Images – Report

• The barriers to getting more unconnected households online

• Hack and enter! The “secure” garage doors that anyone can open from anywhere – what you need to know

• S3 Ep129: When spyware arrives from someone you trust

• Google Mandates Data Deletion Policy For Android Apps

• It Takes AI Security to Fight AI Cyberattacks

• How HTTPS Works And Overview Of Its Components

• Adobe Reset User Passwords as Precaution Against Data Breach Risks

• Google to Block Android Loan Apps Accessing User Photos, Contacts & Videos

• Thieves Use CAN Injection Hack to Steal Cars

• Google Wants Android Users to Have More Control Over Their Data

• What is Ransomware? Everything You Should Know

• Money Message ransomware group claims to have hacked IT giant MSI

• Rorschach ransomware deployed by misusing a security tool

• Why Chaos Engineering is a Good Stress Test Strategy

• Data of 3700 Customers Exposed by the Service NSW Bug

• Controversial Cybersecurity Practices of ICE

• Amazon’s $1.7bn iRobot Acquisition Triggers UK Antitrust Inquiry

• Securing Medical Devices is a Matter of Life and Death

• What to Discuss at RSA Conference — and It’s Not ChatGPT

• Identity Federation: Simplifying Authentication and Authorization Across Systems

• How to Defend Against Extortion Groups Like Lapsus$

• Styx Marketplace Provides Hub for Financial Cybercrime

• So Russia has a stash of scary malware? Imagine our shock

• Financial Fraud-Focused Cybercrime Marketplace ‘Styx’ Emerges

• The Pope’s Security Gets a Boost With Vatican’s MDM Move

• President Biden Delivers Remarks On “Risks Of Artificial Intelligence”

• CAN Do Attitude: How Thieves Steal Cars Using Network Bus

• Robin Hood Hacker Suspected Of Selling Stolen Info Cuffed

• ACRO Yanks Portal Offline Amid Cyber Security Incident

• Making Unilateral Norms for Military AI Multilateral

• Provisional Measures at the ICJ in the Cases of Armenia and Azerbaijan

• Experts Warn of Advanced Evasion Techniques as Rorschach Ransomware Emerges

• The Dangerous Weak Link in the US Food Chain

• Supply Chain Attacks and Critical Infrastructure: How CISA Helps Secure a Nation’s Crown Jewels

• Google Play apps will allow users to initiate in-app account deletion

• How to avoid accidents with these 3 types of technology

• How to Find Aesthetic Wallpapers for Google Pixel 3XL

• Ofcom Crackdown After ISPs Miss Broadband Switching Deadline

• OCR Labs exposes its systems, jeopardizing major banking clients

• STYX Marketplace: An Emerging Platform Aiding Financial Crimes

• ALPHV Ransomware Affiliate Targets Vulnerable Backup Installations to Gain Initial Access

• Mullvad Browser Emerges As The New Privacy-Focused Alternative From Mullvad VPN

• YouTube Alerts About Phishing Emails that Appear Authentic

• How Much Money Have I Spent on League of Legends? – Counting the Cost

• Supply Chain Attacks, Garage Doors, and Exploding USB Drives – Intego Mac Podcast Episode 286

• OpenAI Faces Possible Defamation Lawsuit Over ChatGPT Content

• Google Introduces Data Deletion Policy for Android Apps

• Cybersecurity M&A Roundup: 41 Deals Announced in March 2023

• Analyzing attacks conducted by North Korea-linked ARCHIPELAGO APT group

• Threat Report Portugal: Q3 & Q4 2022

• Research on AI in Adversarial Settings

• CAN do attitude: How thieves steal cars using network bus

• Amazon, Microsoft Cloud Services Face UK Antitrust Probe

• Success of Genesis Market Takedown Attempt Called Into Question

• FBI Cracks Down on Genesis Market: 119 Arrested in Cybercrime Crackdown

• Typhon Info-Stealing Malware Comes Back Harder to Detect

• Cybercrime Unmasked: Insights from “Inside the Halls of a Cybercrime Business”

• Prolific Spanish Teen Hacking Suspect Arrested

• Synopsys’ Next Gen Polaris Software Integrity Platform Levels Up Application Security Testing

• Two-Fifths of IT Pros Told to Keep Breaches Quiet

• What Is Scareware and How to Prevent It?

• International Cyber Operation Shuts Down Notorious Genesis Market

• Criminal records office yanks web portal offline amid ‘cyber security incident’

• We’re All in this Together: Thoughts on the PwC 2023 Global Digital Trust Insights Report

• UK Criminal Records Office Crippled by “Cyber Incident”

• Monitor Keeps Entering Power Save Mode? Here’s How to Fix It

• Cops cuff teenage ‘Robin Hood hacker’ suspected of peddling stolen info

• Do you know what your supply chain is and if it is secure?

• Resecurity uncovers STYX, new cybercriminal platform focused on financial fraud

• ImmuniWeb unveils major updates to its AI platform

• A third of organizations admit to covering up data breaches

• IT and security pros pressured to keep quiet about data breaches

• North Korea dedicates a hacking group to fund cyber crime

• How to defend lean security teams against cyber threats

• Google Mandates Android Apps to Offer Easy Account Deletion In-App and Online

• Assessing AI’s acquired knowledge from an organization’s database

• How Can You Identify and Prevent Insider Threats?

• The hidden picture of malware attack trends

• The staggering cost of identity fraud for financial services

• Synopsys enhances Polaris Software Integrity Platform with fAST offerings

• Industrial Defender launches Phoenix to secure SMBs operations

• Stamus Networks U39 uncovers hidden anomalies in a proactive threat hunt

• 1Kosmos integrates with ForgeRock to add biometric passwordless authentication to apps

• Fake ransomware demands payment without actually encrypting files

• Western Digital confirms breach, affects My Cloud and SanDisk users

• TikTok misused children’s data, faces $15.6M fine

• Update Android now! Google patches three important vulnerabilities

• 9 vital criteria for effective endpoint security: Insights from the ‘Endpoint Security Evaluation Guide’ eBook

• Labor Dept. watchdog urges ‘extreme caution’ on facial recognition

• Cops put the squeeze on Genesis crime souk denizens, not just the admins this time

• Labor Department’s watchdog urges “extreme caution” on facial recognition in unemployment

• BlackBerry Introduces Integrated Solution to Assure Secure Bi-Directional Response Communications During Cyber Incidents

• Noname Security Announces Hardened API Security Platform

• Nexx bugs allow to open garage doors, and take control of alarms and plugs

• Cops put the squeeze on Genesis Market denizens, not just the admins this time

• Discover a new era of security with Microsoft at RSAC 2023

• IT Security News Daily Summary 2023-04-05

• Beware of new YouTube phishing scam using authentic email address

• A mobile-first approach enhances police operations

• post-quantum cryptography

• New “Lily Collins” Hack Is Locking People Out Of Their Facebook Accounts

• Garage Door Openers Open to Hijacking, Thanks to Unpatched Security Vulns

• Researcher Tricks ChatGPT Into Building Undetectable Steganography Malware

• New York City Is Dismantling Low-Cost Community Broadband

• In the face of extreme floods, rural Kentucky lacked forecasting and broadband

• Extreme Networks ExtremeControl: NAC Product Review

• Tax preparation and e-file service eFile.com compromised to serve malware

• OMB failing to set cross-agency IT management goals, report says

• Securing remote access grows crucial for DevSecOps

• How to use Android’s lockdown mode (and why)

• The best browsers for privacy in 2023

• Why you should spring clean your home network and audit your backups

• X-Force Identifies Vulnerability in IoT Platform

• DOD wants innovation to counter drone swarms

• AI helps responders mine social media for public safety insights

• Hornetsecurity Returns to Compete in 2023 ‘ASTORS’ Awards Program

• How to find out if an AirTag is tracking you

• Over 15 Million Systems Exposed to Known Exploited Vulnerabilities

• Red Hat OpenShift sandboxed containers for debugging with elevated privileges

• Bank of England Demands Cyber Crackdown After Russia-linked Attacks

• Locks, Stocks and Brokers: Hackers and Insider Trading

• US government warning! What if anyone could open your garage door?

• Cybersecurity Fatigue: Its Impact and Solutions

• UK’s National Cyber Force Outlines ‘Responsible’ Cyber Operations

• Elon Musk’s Twitter Sued Again Over Unpaid Bills

• Push Security Raises $15 Million in Series A Funding

• Tax Return Filing Service eFile.com Caught Serving Malware

• 42% of IT leaders told to maintain breach confidentiality

• Researcher Tricks ChatGPT into Building Undetectable Steganography Malware

• Marketplace 600K Records Leaked by Database Snafu

• Here’s where the A.I. jobs are

• DOJ, FBI seize massive criminal marketplace in larger fight against state-backed cybercrime

• (ISC)² Supports Cyber Newcomers

• How CIAM safely orchestrates your customers’ journey and its benefits

• Dridex malware, the banking trojan

• Z2U Market Leak Exposes Access to Illicit Services and Malware

• Calls to regulate AI are growing louder. But how exactly do you regulate a technology like this?

• How the Last Big Breach Will Help You Prepare for the Next Cyber Crisis

• FBI (and Others) Shut Down Genesis Market

• Popular Cybercrime Website Shut Down By Police

• JavaScript Malware Infects eFile.com Service Since Mid-March

• Log4j Bug Abused In New Proxyjacking Attacks To Resell Bandwidth , Abuse Enterprise Cloud

• Hackers Can Remotely Open Smart Garage Doors Across The World

• Agent 008: Chaining Vulnerabilities to Compromise GoCD

• QNAP Zero-Days Leave 80K Devices Vulnerable to Cyberattack

• FBI Seizes Genesis Cybercriminal Marketplace in ‘Operation Cookie Monster’

• DOJ announces seizure of cybercrime marketplace Genesis while Treasury issues sanctions

• Is Italy’s ChatGPT Ban Setting a New Standard for the Rest of Europe?

• Genesis Market Takedown Sees 120 Suspects Arrested

• Authorities Seized Most Popular Marketplace for Stolen Credentials

• HP would take up to 90 days to fix a critical bug in some business-grade printers

• Google TAG Alerts Of ARCHIPELAGO Cyberattacks Linked To North Korea

• Keeper Security and KnowBe4 Sponsor European Cybersecurity Blogger Awards 2023

• Fortinet enhances Security Fabric with real-time response and automation capabilities

• Flood of malicious packages results in NPM registry DoS

• Cyber threats organizations should keep an eye on in 2023

• Million-Dollar Ransom Demanded by Ransomware Gang

• Pinduoduo App Malware: A Security Warning

• Clearview AI Scraps 30 Billion Images Illicitly, Giving Them to Cops

• Choosing the Right IAM Solution

• CryptoClippy: New Clipper Malware Targeting Portuguese Cryptocurrency Users

• Civilianization of Digital Operations: A Risky Trend

• U.K. National Cyber Force, Responsible Cyber Power, and Cyber Persistence Theory

• The Future Of IMEI Technology ─ 5 Trends And Innovations To Watch In 2023

• Treasury sanctions cybercrime marketplace Genesis Market

• To Combat Cyber Threats, Cytech Ventures LCC and Wazuh Sign a Crucial Partnership Agreement

• An intro to the IDMZ, the demilitarized zone for ICSes

• ICS kill chain: Adapting the cyber kill chain to ICS environments

• Reinforce industrial control system security with ICS monitoring

• UK Discloses Offensive Cyber Capabilities Principles

• 3 Fronts in the Battle for Digital Identity

• Genesis Market’s Clearnet domain seized; Dark Web site still online

• Nexx Ignores Vulnerabilities Allowing Hackers to Remotely Open Garage Doors

• Cybercrime Website Genesis Market Seized by FBI

• Android’s April 2023 Updates Patch Critical Remote Code Execution Vulnerabilities

• Chrome 112 Patches 16 Security Flaws

• KPMG Tackles AI Security With Cranium Spinout

• FBI Leads International Effort to Seize Domains for Notorious Genesis Market

• Unraveling Rorschach

• Google TAG Warns of North Korean-linked ARCHIPELAGO Cyberattacks

• Hackers Using Self-Extracting Archives Exploit for Stealthy Backdoor Attacks

• Law enforcement seized the Genesis Market cybercrime marketplace

• CISA JCDC Will Focus on Energy Sector

• Here’s where the A.I. jobs are, according to a Stanford study

• Google Staff In London Walkout Over Job Cuts

• New GRC Platform TrustRegister Links Risk to Revenue Impact

• Protect Your Company: Ransomware Prevention Made Easy

• Transforming Network Security with AI-Powered Innovations in SASE

• Spain’s Extremely Dangerous And Evasive Hacker Now In Custody

• Why Employ a Cloud Access Security Broker?

• Stream2Watch 2023- Top 10 Alternatives to Watch Live Sports

• Microsoft tells admins to autoreview your Autopatch alerts or autolose the service

• China Asks WTO To Scrutinise Chip Export Restrictions

• Rorschach – Fastest Encryption Ransomware Ever Found in Ransomware History

• No More Goerli Faucet! Using the New Infura Sepolia Faucet for Ethereum Smart Contract Testing

• An Overview of the Quantum Revolution in Computing

• New Threat Uncovered: Rorschach Ransomware – The Fastest Encryptor

• New Rilide Malware Strikes Chromium-Based Browsers to Steal Cryptocurrency

• Securing your Digital Life: MFA, Password Managers and Risk

• Tripwire and Fortra: Helping Secure IT and OT Environments Better than Ever

• Virgin Media Suffers Broadband Outage, Again

• Get two years of ultimate VPN protection on unlimited connections for only $60

• The Telegram phishing market

• New Strain of Rorschach Ransomware Targeting US- Firms

• Database Snafu Leaks 600K Records from Marketplace

• Malicious Spam Campaign Downs npm Registry

• Typhon Reborn Stealer Malware Resurfaces with Advanced Evasion Techniques

• STYX Marketplace emerged in Dark Web focused on Financial Fraud

• What is “This person is unavailable on Messenger” – 12 Quick Ways to Fix it

• How To Choose The Right Headphones For Gaming

• Why performing security testing on your products and systems is a good idea

• Notorious stolen credential warehouse Genesis Market seized by FBI

• The Arraignment of Donald J. Trump: A Detailed Summary

• AI Chatbot customer care replacing Ministers and their favors

• Jobs created using ChatGPT

• Stop online counterfeiters dead in their tracks

• How AI is transforming cybersecurity for better and worse

• How often should security audits be?

• Akamai introduces new premium offering and updated managed security service program

• F5 protects digital services with AI-powered app and API security capabilities

• Re-evaluating immature and ineffective insider risk management programs

• The high cost of insecure authentication methods

• IBM unveils new options to help clients reach their sustainability goals

• Not all CNAPP Vendors are like us: Check Point Recognized as a Representative Vendor for CloudGuard in 2023 Gartner Market Guide for CNAPP

• And So It Begins: On the First Charges to Drop Against Former President Donald Trump

• How to Teach Your Child Coding: A Gift for Their Digital Future

• Rilide Malware – New Crypto Stealer Hits Chromium-Based Browsers

• Pre-ransomware notifications are paying off right from the bat

• 2023 State of Malware Report: What the channel needs to know to stay ahead of threats

• Livestream: Manhattan DA Offers Remarks After Trump Arraignment

Generated on 2023-04-06 23:55:29.567470