IT Security News Daily Summary 2023-04-14

• How mass layoffs can create new risks for corporate security

• Russian SolarWinds Culprits Launch Fresh Barrage of Espionage Cyberattacks

• US extradites Nigerian charged in $6m email fraud scam

• Short, sweet, simple: Tips for effective government communications

• Why is ‘Juice Jacking’ Suddenly Back in the News?

• Google fixed the first Chrome zero-day of 2023

• Comunicado de prensa para Latinoamérica: La propuesta de tratado de la ONU sobre ciberdelincuencia carece de suficientes salvaguardias de derechos humanos, lo que agrava las amenazas a la privacidad y las libertades civiles en Latinoamérica

• Combating fraud and bias this tax season

• Upcoming Speaking Engagements

• Darktrace Research Reveals No Proof Of LockBit Compromise

• EFF, International Allies Warn That Proposed UN Cybercrime Treaty, Rather Than Making Us More Secure, Could Legitimize Intrusive Surveillance and Drag Down Global Privacy and Free Expression Standards

• The Biden administration tells agencies to scale back telework

• 21-year-old Air Force IT specialist charged with leaking classified documents

• Why xIoT Devices Are Cyberattackers’ Gateway Drug for Lateral Movement

• Elon Musk is reportedly planning an A.I. startup to compete with OpenAI, which he cofounded

• Smart cameras ID bus lane violators

• Pen testing amid the rise of AI-powered threat actors

• Software-Dependency Data Delivers Security to Developers

• Hacking Suicide

• Ex-Conti and FIN7 Actors Collaborate with New Domino Backdoor

• Security Is a Revenue Booster, Not a Cost Center

• Elon Musk is reportedly planning an AI startup to compete with OpenAI, which he cofounded

• 2023-04-13 – Metastealer infection

• The 2023 Federal 100

• SASE Market Worth $5.9B by 2028 — Report by MarketsandMarkets™

• Western Digital Hackers Demand 8-Figure Ransom Payment for Data

• Latam Media Briefing: Proposed UN Cybercrime Treaty Lacks Sufficient Human Rights Safeguards, Exacerbating Threats to Privacy and Civil Liberties in Latam

• International Information Systems Security Certification Consortium (ISC)2

• International guidance pushes security by design

• SASE Market Worth $5.9B by 2028 — Report by MarketsandMarkets™

• From Data Breaches and Spyware, to New Cybersecurity Guidelines…

• Compatibility mess breaks not one but two Windows password tools

• Ivanti Policy Secure: NAC Product Review

• SASE Market Worth $5.9B by 2028 — Report by MarketsandMarkets™

• SASE Market Worth $5.9B by 2028 — Report by MarketsandMarkets™

• Be Skeptical of FBI Warnings About Phone Chargers

• The reopening that wasn’t: As government employees work from home, people find services curtailed

• CISA Asks Manufacturers to Prioritize Cybersecurity in Product Design

• SASE Market Worth $5.9B by 2028 — Report by MarketsandMarkets™

• Most of US IT professionals asked to stay silent about data breaches

• Chinese fraudsters: evading detection and monetizing stolen credit card information

• RTM Locker Gang Targets Corporate Environments with Ransomware

• Top Endpoint Detection and Response (EDR) Solutions in 2023

• SASE Market Worth $5.9B by 2028 — Report by MarketsandMarkets™

• Kodi discloses data breach after its forum was compromised

• LinkedIn Deploys New Secure Identity Verification For All Members

• Inside Look At Cybercriminal Organizations

• Ether Jumps To 11-Month High In Wake Of Software Upgrade

• Linux Kernel Logic Allowed Spectre Attack On Major Cloud Provider

• Robots are everywhere – improving how they communicate with people could advance human-robot collaboration

• Microsoft warns accounting firms of targeted attacks as Tax Day approaches

• Hyundai Experiences Cybersecurity Issues: Breach and App Bugs

• SASE Market Worth $5.9B by 2028 — Report by MarketsandMarkets™

• Spyware Offered to Cyberattackers via PyPI Python Repository

• How To Build on Linea: A ZK-rollup on Ethereum

• CISA Introduces Secure-by-design and Secure-by-default Development Principles

• FBI Arrests 21-Year-Old Guardsman in Leak of Classified Military Documents

• Kodi Data Breach Hits 400,000 Users’ Records & Private Messages

• How To Easily Cut Cloud Costs In A Time Of Soaring Expenses

• Employing Zero Trust to Defend Against Backdoor Attacks

• WordPress Security: 1 Million WordPress Sites Hacked via Zero-Day Plug-in Bugs

• Enforcement of Cybersecurity Regulations: Part 3

• Why Divergent Civil Society and Military Approaches Matter for CHMR-AP Implementation

• Detection Methods: Do You Know Where Your Credentials are?

• What the Recent Collapse of SVB Means for Privacy

• WhatsApp announces features to prevent account takeover

• Google To Face Trial Over Sonos Patents, Judge Rules

• Improve AWS Security and Compliance With CDK-nag?

• How to completely remove your data from LastPass’s servers (eventually)

• Google, CISA Warn of Android Flaw After Reports of Chinese App Zero-Day Exploitation

• Microsoft Warns Accounting, Tax Return Preparation Firms of Remcos RAT Attacks

• Russia-Linked Hackers Launches Espionage Attacks on Foreign Diplomatic Entities

• 3 Ways Tech Can Help To Build Stronger Customer Relationships

• Firmware Caution Advises MSI Cyberattack

• Western Digital hackers claim to have copied 10TB of company data

• LATEST CYBERTHREATS AND ADVISORIES – APRIL 14, 2023

• Murdered Tech Executive Knew His Alleged Killer, Say Police

• For cybercriminal mischief, it’s dark web vs deep web

• Juniper Networks Patches Critical Third-Party Component Vulnerabilities

• UK Education Sector Suffered Most from Ransomware in 2022

• Gaining an Advantage in Roulette

• Kodi Confirms Data Breach: 400K User Records and Private Messages Stolen

• RTM Locker, a new RaaS gains notorieties in the threat landscape

• WhatsApp Improves Defense Against Malware-Based Account Takeover

• Humans Needed To Avoid Cybersecurity Missteps, Gartner Says

• Darktrace Denies Getting Hacked After Ransomware Group Names Company on Leak Site

• Cerbos Raises $7.5 Million for Authorization Platform

• While Twitter wants to sell its verification, Microsoft will do it for free on LinkedIn

• Glamourizing fraudsters hurts victims of fraud, and society

• Post-Quantum Cryptography (PQC): Three Easy Ways to Prepare

• Syxsense’s Latest Product Release Gives Organizations Robust Capabilities to Easily Automate Complex Security and IT Management Playbooks

• Hackers Shifting DDoS Attacks to VPS Infrastructure for Increased Power

• Zelle users targeted with social engineering tricks

• Five Arrests in Crackdown on $98m Investment Fraud Gang

• Volume of Opaque Breach Notices Surges in Q1

• Webinar: Tips from MSSPs to MSSPs – Building a Profitable vCISO Practice

• Severe Android and Novi Survey Vulnerabilities Under Active Exploitation

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows?

• Linux kernel logic allowed Spectre attack on ‘major cloud provider’

• Over 12k Indian Govt websites disrupted due to cyber-attack from Indonesia

• The Security Risks of ChatGPT in an Enterprise Environment

• Hikvision fixed a critical flaw in Hybrid SAN and cluster storage products

• New infosec products of the week: April 14, 2023

• To improve security, consider how the aviation industry stopped blaming pilots

• Conquering modern data stack complexities

• Organizations face an uphill battle to keep their sensitive data secure

• Tactics that make crypto giveaway scams so successful

• WhatsApp New Features Protect Users From Unknown Account Take-Over Attacks

• OGUsers (2022 breach) – 529,020 breached accounts

• Cymulate ASM bridges vulnerability management and ASM gaps in hybrid infrastructure

• Cerbos Cloud manages and enforces authorization policies

• Code42 Instructor now offers risk reduction training videos to Microsoft Teams

• Entrust offers zero-trust solutions for authentication, HSM, and multi-cloud compliance

• Qwiet AI releases a suite of targeted AppSec and DevSecOps services

• DirectDefense and Claroty join forces to secure XIoT environments

• SentinelOne announces integration of firewalls and NDR capabilities with key industry players

• Troubleshooting No Signal Monitor Issue: Steps to Get Computer Display Back

• Google Pay accidentally handed out free money, bug now fixed

• Sextortion “assistance” scammers con victims further

• Ransomware in France, April 2022–March 2023

• Ransomware review: April 2023

• Infosys Uses Cortex XSIAM to Revolutionize Your SOC

• Palo Alto Networks Named a Leader in 2023 Magic Quadrant for SSE

• Fake “Geek Squad” emails: Call center scam leverages Intuit QuickBooks servers

• CISA’s plan to bake security into software development

• Western Digital restores service; attack details remain unclear

• Revisions to the FTC Safeguards Rule Affect Auto Dealers

• IT Security News Daily Summary 2023-04-13

• How to use the John the Ripper password cracker

• New Mirai Variant Employs Uncommon Tactics to Distribute Malware

• Google Proposes More Transparent Vulnerability Management Practices

• Remcos RAT Targets Tax Pros to Scurry Off With Workers’ Filing Info

• Why the US Needs Quantum-Safe Cryptography Deployed Now

• Money Ransomware Group Enters Double-Extortion Fray

• Google Launches New Cybersecurity Initiatives to Strengthen Vulnerability Management

• The Russia-linked APT29 is behind recent attacks targeting NATO and EU

• CISA pressures tech vendors to ship secure software ‘out of the box’

• Amazon Sidewalk promises secure, wide-ranging IoT network

• One-stop access to city’s childcare, jobs, business services

• How state and local governments can fortify security at tax time (or any time)

• Air National Guardsman Arrested in Leaking Classified Documents

• Learn about Confidential Containers

• Join us for EFF’s 7th Annual Tech Trivia Night!

• Google unveils new council and legal fund to support vulnerability disclosure

• Taxpayer data at risk due to cybersecurity deficiencies at IRS, report warns

• School District Joins Suit Accusing Facebook Of Harming Young Users

• Super-Yacht Specialist Lürssen in Dry Dock After Ransomware Attack

• How insecure is America’s FirstNet emergency response system? Seriously, anyone know?

• Pentagon super-leak suspect cuffed: 21-year-old Air National Guardsman

• Senator calls for cybersecurity audit of law enforcement wireless network

• The Import of Cybersecurity in Small Business – ChamberofCommerce.org

• LockBit 3.0 Posts Dubious Claims of Breaching Darktrace Cybersecurity Firm

• How UPX Compression Is Used to Evade Detection Tools

• Texas legislators pursue fix to costly law that requires nonexistent election equipment

• Congratulations to the Top MSRC 2023 Q1 Security Researchers!

• Building a Network Security Strategy: Complete Checklist To Protect Your Network

• Key Apple-native macOS security features for administrators

• private CA (private PKI)

• A flaw in the Kyocera Android printing app can be abused to drop malware

• Wireshark 4.0.5 Released With New Protocol Support

• What are passkeys? A cybersecurity researcher explains how you can use your phone to make passwords a thing of the past

• RTM Locker: Emerging Cybercrime Group Targeting Businesses with Ransomware

• 2022 Industry Threat Recap: Energy

• Managing machine identities in a zero-trust world

• Google Play threats on the dark web are big business

• Patch Tuesday: Microsoft fixes a zero-day, and two curious bugs that take the Secure out of Secure Boot

• S3 Ep130: Open the garage bay doors, HAL [Audio + Text]

• The Internet Reform Trilemma

• Wagner, PMSCs, and the Limits of Transnational Governance

• Supply chain security for Go, Part 1: Vulnerability management

• Cambodia Deports 19 Japanese Cybercrime Scam Suspects

• Threat actors strive to cause Tax Day headaches

• Twitter No Longer Exists, As X Corp Takes Over

• Over 20,000 Iowa Medicaid Members Affected By Data Breach

• The Hacking of ChatGPT Is Just Getting Started

• Cloud forensics – An introduction to investigating security incidents in AWS, Azure and GCP

• 10 Reasons why businesses need mobile device management (MDM)

• Government Sets Aside £150 Million For Full 5G Connectivity By 2030

• Economies of scale: How and why enterprises are outsourcing their data centers

• Pakistan-Aligned Hackers Disrupt Indian Education Sector

• Majority of US IT Pros Told to Keep Quiet About Data Breaches

• Superyacht-Maker Lürssen, Targeted By Ransomware Attacks

• Windows Admins Warned About a Critical MSMQ QueueJumper Vulnerability

• Users of Android can Now Save Space by Auto Archiving

• This Twitter Bug is Making Users Secret Circle Tweets Public

• GuLoader Targets US Financial Firms With Tax-Themed Phishing Lures

• Legion Malware Marches onto Web Servers to Steal Credentials, Spam Mobile Users

• FBI: How Fake Xi Cops Prey On Chinese Nationals In The US

• Healthcare Sites Flooded By Fake Requests In Ongoing DDoS Attacks

• European Privacy Watchdog Creates ChatGPT Task Force

• Free Public Charging Stations May Come With A Price, Federal Agencies Warn

• 5 reasons to join us at Securely Migrate and Optimize with Azure

• Improve supply chain security and resiliency with Microsoft

• Legion: Credential Harvesting & SMS Hijacking Malware Sold on Telegram

• Hyundai Data Breach In France & Italy Reveals Car Owners

• How to Define Tier-Zero Assets in Active Directory Security

• Verimatrix’s Triple-Threat Initiative Enhances Mobile App Security

• Enhanced Threat Intelligence Technology Announced by Outpost24

• Juice Jacking: FBI Warns Against Using Public USB Stations

• Data Encryption Is the First Line of Defense Against Identity Theft and Cybercrime

• Can Zero-Knowledge Proofs Save Cryptocurrency?

• WhatsApp Introduces New Device Verification Feature to Prevent Account Takeover Attacks

• Mastering The Instagram Algorithm: Technology Hacks To Stay Ahead

• Quantum Computing Threats: A How-to Guide for Preparing Your Company’s Cybersecurity Defenses

• FBI Warns Against Use Of Public Charging Stations For Mobile Phones

• Don’t Risk It: Critical Cybersecurity Areas New Managers Must Not Overlook

• Cyfirma Raises $6 Million for Threat Management Platform

• Google Tackles Open Source Security With New Dependency Service

• Tackling Software Supply Chain Security: A Toolbox for Policymakers

• Google delivers secure open source software packages

• (ISC)² Security Congress in Nashville – See Y’all There!

• Nokoyawa Ransomware Attacks Use Windows Zero-Day Vulnerability

• Tech Giant Alibaba to Launch ChatGPT Rival

• Microsoft Patch Tuesday April Fixed 97 Flaws Including 1 Zero-Day

• Apple Makes Nearly 7 Percent Of iPhones In India – Report

• 16-31 March 2023 Cyber Attacks Timeline

• Computer Turns on but Monitor Says No Signal – 9 Ways to Fix

• Malicious ChatGPT & Google Bard Installers Distribute RedLine Stealer

• Looking for a New Security Technology? Choose a Partner, not a Vendor

• Critical Vulnerability in Hikvision Storage Solutions Exposes Video Security Data

• Lazarus Hacker Group Evolves Means In DeathNote Campaign

• Cybersecurity Learning Across Sectors: How ICCWS Brings Academics, Government, and Private Companies Together

• New Python-Based “Legion” Hacking Tool Emerges on Telegram

• Bypassing a Theft Threat Model

• DISA releases the first Ansible STIG

• Demystifying risk using CVEs and CVSS

• Elon Musk Axed 80 Percent Of Staff, Admits Painful Tenure

• Hyundai Hacked – Attackers Stole Car Owners’ Personal Details

• The U.S. Army Is Revamping Its Cybersecurity Approach

• Irrigation Systems in Israel Disrupted by Hacker Attacks on ICS

• Microsoft Shares Resources for BlackLotus UEFI Bootkit Hunting

• Fortinet fixed a critical vulnerability in its Data Analytics product

• CIEM vs CWPP vs CSPM Use Cases

• Intel To Optimise Factories For ARM Chip Manufacturing

• Pakistan-based Transparent Tribe Hackers Targeting Indian Educational Institutions

• Why Shadow APIs are More Dangerous than You Think

• LinkedIn now allows you to verify your workplace

• How To Install Winminer in Windows 7, 8.1, 10, 11, Mac, Linux, and Ubuntu

• How to Combat Insider Threats

• Tripwire’s Vulnerability Exposure Research Team (VERT): What you need to know

• Stolen Card Volumes Plummet 94% Globally

• Lazarus Hacker Group Evolves Tactics, Tools, and Targets in DeathNote Campaign

• Superyacht-Maker Hit by Easter Ransomware Attack

• Juice Jacking, Best Buy Phishing, and Garage Doors Redux

• Rapid7 Has Good News for UK Security Posture

• The new weakest link in the cybersecurity chain

• Uncommon infection methods—part 2

• Do you know what your supply chain is and if it is secure?

• DDoS alert traffic reaches record-breaking level of 436 petabits in one day

• Technology investments feel the impact of weakening economy

• 5 steps to building NSA-level access control for your app

• The Kodi Foundation – 400,635 breached accounts

• Kodi Hacked – Attackers Stole the Forum Database

• 2FA: Why to use it — and what are the best options?

• Twitter works on secret AI project in contradiction to sayings of owner Elon Musk

• MERCURY – A Destructive Operation From Iranian Hackers Wipe Cloud Environments

• ChatGPT Security: OpenAI’s Bug Bounty Program Offers Up to $20,000 Prizes

• 2023-04-12 – Quick Post: Qakbot (Qbot), distribution tag obama251

• BlackGuard stealer extends its capabilities in new variant

• Regula updates Face SDK to protect users against different attack vectors

• Binarly Transparency Platform identifies vulnerabilities and malicious threats in code

• Searchlight Cyber launches Stealth Browser for secure dark web access

• Fleet MDM platform provides mobile workstation security with GitOps and workflow automation

• CloudCasa for Velero manages and protects Kubernetes applications

• Edgio Applications platform v7 accelerates developer team velocity

• Wazuh 4.4 combats breaches, ransomware, and cyberattacks all from a single agent

• Cynalytica OTNetGuard provides visibility into critical infrastructure networks

• Rezonate’s new ITDR module empowers security teams to stop active threats in real-time

• Armis and TrueFort collaborate to increase operational resilience

• Syncro joins forces with Proofpoint to offer MSPs an email security suite

• Don’t plug your phone into a free charging station, warns FBI

• KFC, Pizza Hut owner employee data stolen in ransomware attack

• Ransomware in the UK: April 2022–March 2023

• Update now! April’s Patch Tuesday includes a fix for one zero-day

• How insecure is America’s FirstNet emergency response system? No one’s sure

Generated on 2023-04-14 23:55:27.824011