IT Security News Daily Summary 2023-04-13

• How to use the John the Ripper password cracker

• New Mirai Variant Employs Uncommon Tactics to Distribute Malware

• Google Proposes More Transparent Vulnerability Management Practices

• Remcos RAT Targets Tax Pros to Scurry Off With Workers’ Filing Info

• Why the US Needs Quantum-Safe Cryptography Deployed Now

• Money Ransomware Group Enters Double-Extortion Fray

• Google Launches New Cybersecurity Initiatives to Strengthen Vulnerability Management

• The Russia-linked APT29 is behind recent attacks targeting NATO and EU

• CISA pressures tech vendors to ship secure software ‘out of the box’

• Amazon Sidewalk promises secure, wide-ranging IoT network

• One-stop access to city’s childcare, jobs, business services

• How state and local governments can fortify security at tax time (or any time)

• Air National Guardsman Arrested in Leaking Classified Documents

• Learn about Confidential Containers

• Join us for EFF’s 7th Annual Tech Trivia Night!

• Google unveils new council and legal fund to support vulnerability disclosure

• Taxpayer data at risk due to cybersecurity deficiencies at IRS, report warns

• School District Joins Suit Accusing Facebook Of Harming Young Users

• Super-Yacht Specialist Lürssen in Dry Dock After Ransomware Attack

• How insecure is America’s FirstNet emergency response system? Seriously, anyone know?

• Pentagon super-leak suspect cuffed: 21-year-old Air National Guardsman

• Senator calls for cybersecurity audit of law enforcement wireless network

• The Import of Cybersecurity in Small Business – ChamberofCommerce.org

• LockBit 3.0 Posts Dubious Claims of Breaching Darktrace Cybersecurity Firm

• How UPX Compression Is Used to Evade Detection Tools

• Texas legislators pursue fix to costly law that requires nonexistent election equipment

• Congratulations to the Top MSRC 2023 Q1 Security Researchers!

• Building a Network Security Strategy: Complete Checklist To Protect Your Network

• Key Apple-native macOS security features for administrators

• private CA (private PKI)

• A flaw in the Kyocera Android printing app can be abused to drop malware

• Wireshark 4.0.5 Released With New Protocol Support

• What are passkeys? A cybersecurity researcher explains how you can use your phone to make passwords a thing of the past

• RTM Locker: Emerging Cybercrime Group Targeting Businesses with Ransomware

• 2022 Industry Threat Recap: Energy

• Managing machine identities in a zero-trust world

• Google Play threats on the dark web are big business

• Patch Tuesday: Microsoft fixes a zero-day, and two curious bugs that take the Secure out of Secure Boot

• S3 Ep130: Open the garage bay doors, HAL [Audio + Text]

• The Internet Reform Trilemma

• Wagner, PMSCs, and the Limits of Transnational Governance

• Supply chain security for Go, Part 1: Vulnerability management

• Cambodia Deports 19 Japanese Cybercrime Scam Suspects

• Threat actors strive to cause Tax Day headaches

• Twitter No Longer Exists, As X Corp Takes Over

• Over 20,000 Iowa Medicaid Members Affected By Data Breach

• The Hacking of ChatGPT Is Just Getting Started

• Cloud forensics – An introduction to investigating security incidents in AWS, Azure and GCP

• 10 Reasons why businesses need mobile device management (MDM)

• Government Sets Aside £150 Million For Full 5G Connectivity By 2030

• Economies of scale: How and why enterprises are outsourcing their data centers

• Pakistan-Aligned Hackers Disrupt Indian Education Sector

• Majority of US IT Pros Told to Keep Quiet About Data Breaches

• Superyacht-Maker Lürssen, Targeted By Ransomware Attacks

• Windows Admins Warned About a Critical MSMQ QueueJumper Vulnerability

• Users of Android can Now Save Space by Auto Archiving

• This Twitter Bug is Making Users Secret Circle Tweets Public

• GuLoader Targets US Financial Firms With Tax-Themed Phishing Lures

• Legion Malware Marches onto Web Servers to Steal Credentials, Spam Mobile Users

• FBI: How Fake Xi Cops Prey On Chinese Nationals In The US

• Healthcare Sites Flooded By Fake Requests In Ongoing DDoS Attacks

• European Privacy Watchdog Creates ChatGPT Task Force

• Free Public Charging Stations May Come With A Price, Federal Agencies Warn

• 5 reasons to join us at Securely Migrate and Optimize with Azure

• Improve supply chain security and resiliency with Microsoft

• Legion: Credential Harvesting & SMS Hijacking Malware Sold on Telegram

• Hyundai Data Breach In France & Italy Reveals Car Owners

• How to Define Tier-Zero Assets in Active Directory Security

• Verimatrix’s Triple-Threat Initiative Enhances Mobile App Security

• Enhanced Threat Intelligence Technology Announced by Outpost24

• Juice Jacking: FBI Warns Against Using Public USB Stations

• Data Encryption Is the First Line of Defense Against Identity Theft and Cybercrime

• Can Zero-Knowledge Proofs Save Cryptocurrency?

• WhatsApp Introduces New Device Verification Feature to Prevent Account Takeover Attacks

• Mastering The Instagram Algorithm: Technology Hacks To Stay Ahead

• Quantum Computing Threats: A How-to Guide for Preparing Your Company’s Cybersecurity Defenses

• FBI Warns Against Use Of Public Charging Stations For Mobile Phones

• Don’t Risk It: Critical Cybersecurity Areas New Managers Must Not Overlook

• Cyfirma Raises $6 Million for Threat Management Platform

• Google Tackles Open Source Security With New Dependency Service

• Tackling Software Supply Chain Security: A Toolbox for Policymakers

• Google delivers secure open source software packages

• (ISC)² Security Congress in Nashville – See Y’all There!

• Nokoyawa Ransomware Attacks Use Windows Zero-Day Vulnerability

• Tech Giant Alibaba to Launch ChatGPT Rival

• Microsoft Patch Tuesday April Fixed 97 Flaws Including 1 Zero-Day

• Apple Makes Nearly 7 Percent Of iPhones In India – Report

• 16-31 March 2023 Cyber Attacks Timeline

• Computer Turns on but Monitor Says No Signal – 9 Ways to Fix

• Malicious ChatGPT & Google Bard Installers Distribute RedLine Stealer

• Looking for a New Security Technology? Choose a Partner, not a Vendor

• Critical Vulnerability in Hikvision Storage Solutions Exposes Video Security Data

• Lazarus Hacker Group Evolves Means In DeathNote Campaign

• Cybersecurity Learning Across Sectors: How ICCWS Brings Academics, Government, and Private Companies Together

• New Python-Based “Legion” Hacking Tool Emerges on Telegram

• Bypassing a Theft Threat Model

• DISA releases the first Ansible STIG

• Demystifying risk using CVEs and CVSS

• Elon Musk Axed 80 Percent Of Staff, Admits Painful Tenure

• Hyundai Hacked – Attackers Stole Car Owners’ Personal Details

• The U.S. Army Is Revamping Its Cybersecurity Approach

• Irrigation Systems in Israel Disrupted by Hacker Attacks on ICS

• Microsoft Shares Resources for BlackLotus UEFI Bootkit Hunting

• Fortinet fixed a critical vulnerability in its Data Analytics product

• CIEM vs CWPP vs CSPM Use Cases

• Intel To Optimise Factories For ARM Chip Manufacturing

• Pakistan-based Transparent Tribe Hackers Targeting Indian Educational Institutions

• Why Shadow APIs are More Dangerous than You Think

• LinkedIn now allows you to verify your workplace

• How To Install Winminer in Windows 7, 8.1, 10, 11, Mac, Linux, and Ubuntu

• How to Combat Insider Threats

• Tripwire’s Vulnerability Exposure Research Team (VERT): What you need to know

• Stolen Card Volumes Plummet 94% Globally

• Lazarus Hacker Group Evolves Tactics, Tools, and Targets in DeathNote Campaign

• Superyacht-Maker Hit by Easter Ransomware Attack

• Juice Jacking, Best Buy Phishing, and Garage Doors Redux

• Rapid7 Has Good News for UK Security Posture

• The new weakest link in the cybersecurity chain

• Uncommon infection methods—part 2

• Do you know what your supply chain is and if it is secure?

• DDoS alert traffic reaches record-breaking level of 436 petabits in one day

• Technology investments feel the impact of weakening economy

• 5 steps to building NSA-level access control for your app

• The Kodi Foundation – 400,635 breached accounts

• Kodi Hacked – Attackers Stole the Forum Database

• 2FA: Why to use it — and what are the best options?

• Twitter works on secret AI project in contradiction to sayings of owner Elon Musk

• MERCURY – A Destructive Operation From Iranian Hackers Wipe Cloud Environments

• ChatGPT Security: OpenAI’s Bug Bounty Program Offers Up to $20,000 Prizes

• 2023-04-12 – Quick Post: Qakbot (Qbot), distribution tag obama251

• BlackGuard stealer extends its capabilities in new variant

• Regula updates Face SDK to protect users against different attack vectors

• Binarly Transparency Platform identifies vulnerabilities and malicious threats in code

• Searchlight Cyber launches Stealth Browser for secure dark web access

• Fleet MDM platform provides mobile workstation security with GitOps and workflow automation

• CloudCasa for Velero manages and protects Kubernetes applications

• Edgio Applications platform v7 accelerates developer team velocity

• Wazuh 4.4 combats breaches, ransomware, and cyberattacks all from a single agent

• Cynalytica OTNetGuard provides visibility into critical infrastructure networks

• Rezonate’s new ITDR module empowers security teams to stop active threats in real-time

• Armis and TrueFort collaborate to increase operational resilience

• Syncro joins forces with Proofpoint to offer MSPs an email security suite

• Don’t plug your phone into a free charging station, warns FBI

• KFC, Pizza Hut owner employee data stolen in ransomware attack

• Ransomware in the UK: April 2022–March 2023

• Update now! April’s Patch Tuesday includes a fix for one zero-day

• How insecure is America’s FirstNet emergency response system? No one’s sure

• Cloud Security Alliance opens registration for the CSA Summit at RSAC 2023

• Concentric AI channel partner program enhances partner revenue opportunities

• Raytheon and SpiderOak partner to secure satellite communications

• FBI: How fake Xi cops prey on Chinese nationals in the US

• Inside the 2022 Email Cyber Threat Landscape

• How To Safely Navigate the World of Crypto Finance

• Top Mobile Security Considerations for Business Travelers

• Google Cloud offers Assured Open Source Software for free

• Hyundai suffered a data breach that impacted customers in France and Italy

• The best VPN services for iPhone and iPad in 2023

• Cybersecurity leaders see risk from email attacks, hybrid work

• VulnCheck Named CVE Numbering Authority for Common Vulnerabilities and Exposures

• Menlo Security Illustrates Importance of Browser Security as 4 in 5 Ransomware Attacks Include Threats Beyond Data Encryption

• Turning the heat up on election security

• OpenAI launches bug bounty program with Bugcrowd

• Lazarus Group’s ‘DeathNote’ Cluster Pivots to Defense Sector

• (ISC)² Certified in Cybersecurity Earns ANAB Accreditation to ISO 17024 and Surpasses 15,000 Certification Holders

• Report Reveals ChatGPT Already Involved in Data Leaks, Phishing Scams & Malware Infections

• Leaked Pentagon Documents May Herald a New Era of Revelations

• IT Security News Daily Summary 2023-04-12

• 83% of organizations paid up in ransomware attacks

• Better ID management could help DMVs become ‘departments of citizen engagement’

• When Banking Laws Don’t Protect Consumers From Cybertheft

• IARPA’s plan to hack the brains of hackers

• Were you caught up in the latest data breach? Here’s how to tell

• TechRepublic Premium editorial calendar: IT policies, checklists, toolkits and research for download

• Opera Adds Free VPN to Opera for iOS

• Some states may be barring the door to unemployment benefits

• The best AirTag wallets of 2023

• What are the cybersecurity concerns of SMBs by sector?

• How to use a CASB to manage shadow IT

• Nokoyawa ransomware exploits Windows CLFS zero-day

• Cisco provides extra-secure Webex for U.S. government

• OpenAI Launches ChatGPT Bug Bounty Program – Earn $200 to $20k

• 7 Steps of the Vulnerability Assessment Process Explained

• Microsoft: NSO Group-Like ‘QuaDream’ Actor Selling Mobile Spyware to Governments

• Data on 400K Kodi Forum Members Stolen and Put Up for Sale

• QuaDream surveillance firm’s spyware targeted iPhones with zero-click exploit

• Top 10 AI Jobs Taking Over With Automation

• Google launches dependency API and curated package repository with security metadata

• Banning TikTok could weaken personal cybersecurity

• Gartner: Human-Centric Design Is Top Cybersecurity Trend for 2023

• OpenAI To Offer Bug Bounties Up To $20,000

• OpenAI Launched Bug Bounty Program – Rewards up to $20,000

• FCC proposes rule to boost cell service from space

• Securing the Chaos – Harnessing Dispersed Multi-Cloud, Hybrid Environments

• How to enable Active Directory fine-grained password policies

• How to create fine-grained password policy in AD

• The Bot Invasion: Is Your Digital Ad Campaign at Risk?

• How to use a public key and private key in digital signatures

• CISA Updates Zero Trust Maturity Model With Public Feedback

• QuaDream Apple Spyware Maker Just Popped Up On The Radar Again

• Microsoft Patches Zero Day Under Active Attack

• OpenAI Unleases Bug Bounty Program With Rewards Up To $20,000

• Much-Hyped Water Plant Hack Wasn’t A Hack, Just User Error

• E-mail header analysis

• DHS seeks solutions to ‘dark swarms’ of drones

• For AI laws, China joins the U.S. in asking the public to chime in

• Lazarus Group’s DeathNote Campaign Reveals Shift in Targets

• Australia to issue ban on ransomware payments after Latitude Financial Cyber Attack

• Emotet Climbs March 2023’s Most Wanted Malware List With OneNote Campaign

• Windows CLFS Vulnerability Used for Ransomware Attacks

• Zigbee PRO 2023 introduces new security mechanisms, feature enhancements

• Cybercriminals Set Android Apps For Sale for Up to $20K a Piece

• Three Commonly Neglected Attack Vectors in Cloud Security

• TSMC Investment Plans For Taiwan Unchanged – Report

• US, India and China Most Targeted in DDoS Attacks, StormWall Q1 2023 Report

• How To Build for Payment Processing Resiliency

• ‘ASTORS’ Champion Cymulate – Ups the Game on Exposure Management

• Fortinet Patches Critical Vulnerability in Data Analytics Solution

• Microsoft mends Windows zero-day on April Patch Tuesday

• LinkedIn Verification Now Lets You Verify Your Job and Account

• 5G Security — A Shared Responsibility

• A Brief History of Programmatic Collection Pre-Section 702

• The Dangerous Cycle of Pentagon Sexual Assault and Harassment ‘Lowest Level’ Policy

• Massive Surge in DDoS Attacks Reported in First Quarter of 2023

• Quest Software Podcast: The Democratisation of Data: Episode 2: Legacy Technology – A Burden and a Vulnerability?

• US Government Looks To Establish Rules For AI

• Android App Trojans Sold on Dark Web for $25-$20,000

• Defending against backdoor attacks with zero trust

• 400,000 Users Hit by Data Breach at Media Player Maker Kodi

• Microsoft fixes a zero-day – and two curious bugs that take the Secure out of Secure Boot

• Role of the Modern CISO in the Rapidly Evolving Cybersecurity Landscape

• HashiCorp Vault vulnerability could lead to RCE, patch today! (CVE-2023-0620)

• Warning: Threat Actors Compromise 3CX Desktop App in a Supply Chain Attack (Updated)

• Sushiswap Smart Contract Exploited in $3.3 Million Hack

• PC Shipments Decline 30 Percent, Gartner Finds

• How Secure are Composable Architectures?

• Four Ways to Harden Your Network Perimeter

• Cisco adds air-gapping to Webex in response to national security concerns

• SAP Patches Critical Vulnerabilities in Diagnostics Agent, BusinessObjects

• Windows Zero-Day Exploited in Nokoyawa Ransomware Attacks

• CrowdStrike Expands Falcon to Include IoT

• The Service Accounts Challenge: Can’t See or Secure Them Until It’s Too Late

• Israel-based Spyware Firm QuaDream Targets High-Risk iPhones with Zero-Click Exploit

• Upper Galilee Irrigation Systems Crippled by Cyberattack

• LinkedIn and Microsoft Entra introduce a new way to verify your workplace

• Finding ChatGPT Vulnerabilities May Pay Hackers Up To $20,000

• China follows in US footsteps, seeks public opinion on draft AI laws

• Details Emerge on Israeli Spyware Vendor QuaDream and Its iOS Malware

• CISA Publishes New Guidance for Achieving Zero Trust Maturity

• Virtual Event Today: Zero Trust Strategies Summit

• Mandiant Also Links 3CX Supply Chain Attack to North Korean Hackers

• FBI Advising People to Avoid Public Charging Stations

• Kodi forum breach: User data, encrypted passwords grabbed

• 3CX compromise: More details about the breach, new PWA app released

• Apple Doubles Investment In Carbon Removal Fund

• iPhones Hacked Via iOS Zero-Click Exploit To Deploy Spyware

• CISA Publishes Advisory on Improving Network Monitoring and Hardening

• Top 17 Free Online Phishing Tools

• Spyware Used Across 10 Countries, Says Citizen Lab, Microsoft

• OpenAI starts bug bounty program with cash rewards up to $20,000

• Insider Threat and Ransomware: A Growing Issue

• Researchers Uncover 7000 Malicious Open Source Packages

• Mission possible

• Unmasking NIS2: Europe’s Secret Weapon Against Cybersecurity Threats

• Ethical Hackers Could Earn up to $20,000 Uncovering ChatGPT Vulnerabilities

• New Zero-Click iOS Exploit Deploys Israeli Spyware

• SAP April 2023 security updates fix critical vulnerabilities

• Microsoft Fixes Zero-Day Bug This Patch Tuesday

• OpenAI launched a bug bounty program

• Following the Lazarus group by tracking DeathNote campaign

• 5 Smallest ATX Cases for Best Compact PC Builds in 2023 – Power in a Tiny Package

• 8 Fun And Engaging Online Casual Games You Might Have Missed

• Why performing security testing on your products and systems is a good idea

• Urgent: Microsoft Issues Patches for 97 Flaws, Including Active Ransomware Exploit

• This Identity Management Day, Go BIG or Go HOME!

• Hackers Using Fake Google Chrome Error Screens To Inject Malware

• GitGuardian Honeytoken helps companies secure their software supply chains

• Cloud security firm Ericom Software acquired by Cradlepoint

• CYBERSECURITY INDUSTRY NEWS REVIEW – APRIL 11, 2023

• #IdentityManagementDay – Best Practices to Help Keep Your Organization Secure

• The Top Challenges Faced by CISOs in 2023

• (ISC)² Supports Cyber Newcomers

• Kodi confirms user forum data breach

• Pay $20K To Infect Android Devices Via Google Play Store – Darkweb Report

• North Korean Hackers Uncovered as Mastermind in 3CX Supply Chain Attack

• Cybercrime group exploits Windows zero-day in ransomware attacks

• Lazarus Sub-Group Labyrinth Chollima Uncovered as Mastermind in 3CX Supply Chain Attack

• Key factors driving changes in the perception of the CISO role

• 3CX teases security-focused client update, plus password hashing

• New Imperva Office & Customer Experience Centre Aims to Meet the Needs of Customers In Singapore & Across Asia Pacific and Japan

• Threat hunting programs can save organizations from costly security breaches

• Hybrid work environments are stressing CISOs

• Data-backed insights for future-proof cybersecurity strategies

• Netskope Endpoint SD-WAN helps enterprises accelerate edge networking

• AutoRABIT expands Salesforce security posture management services

• 11:11 Systems Managed SteelDome provides protection from ransomware attacks

• US cyber chiefs warn AI will help crooks, China develop nastier cyberattacks faster

• Xerox improves productivity and security for hybrid workers

• 2023 年 4 月のセキュリティ更新プログラム (月例)

• Another zero-click Apple spyware maker just popped up on the radar again

• Microsoft (& Apple) Patch Tuesday, April 2023 Edition

• A week in security (April 3 – 9)

• Apple releases emergency updates for two known-to-be-exploited vulnerabilities

Generated on 2023-04-13 23:55:33.415299