IT Security News Daily Summary 2023-04-18

• NSO Group is Back in Business With 3 New iOS Zero-Click Exploits

• Marlinspike Adds Charles Carmakal to its Advisory Board

• KnowBe4 Phishing Test Results Reveal IT and Online Services Emails Drive Dangerous Attack Trend

• Giving a Face to the Malware Proxy Service ‘Faceless’

• Russian snoops just love invading unpatched Cisco gear, America and UK warn

• What is Spear Phishing Attack? – Guide for Motives, Techniques & Prevention Methods

• Wanted: 3D mapping drones for indoor search and rescue

• QBot Expands Initial Access Malware Strategy With PDF-WSF Combo

• DoNot APT Hackers Attack Individuals Using Android Malware via Chatting Apps

• GAO says Army procurement plans to replace aging helicopter fleet don’t have credible cost estimates

• Not all encryption is created equal

• Breaking the Wall Between Dev, Sec, and Ops

• Learn To Become a Web3 Developer by Exploring the Web3 Stack

• EU Cyber Solidarity Act aims to establish a ‘European cybersecurity shield’

• New York City to weigh strict facial recognition ban

• Microsoft opens up Defender threat intel library with file hash, URL search

• 10 best antivirus software for businesses in 2023

• Researchers Discover First Ever Major Ransomware Targeting macOS

• OpenShift vs. Kubernetes: The Unfair Battle

• Cybersecurity Consolidation — What It Is and Why You Should Care

• New DDoS attacks on Israel’s enterprises, infrastructure should be a wake-up call

• Experts temporarily disrupted the RedLine Stealer operations

• Microsoft Vulnerability Severity Classification for Online Services Publication

• Payments firm accused of aiding ‘contact Microsoft about a virus’ scammers must cough $650k

• Report: Security teams take an average of 6 days to resolve alerts

• Standardized data collection methods can help fight cybercrime

• Where There’s No Code, There’s No SDLC

• On Tax Day, it’s time for a more equitable and accessible way to file

• Tanium Helps to Increase Employee Satisfaction and Productivity with DEX

• Ex-CEO of breached pyschotherapy clinic gets prison sentence for bad data security

• APT41 Taps Google Red Teaming Tool in Targeted Info-Stealing Attacks

• Goldoson Malware Hits 100 Million Downloads On Google Play Store

• Demystifying Data Fabric Architecture: A Comprehensive Overview

• Secure-by-Design: A 2023 Cybersecurity Prime

• GSA unveils new USA.gov websites

• Virginia election officials change process for removing dead people from voter rolls

• New ‘Domino’ Malware Linked to FIN7 Group, Ex-Conti Members

• Takedown of GitHub Repositories Disrupts RedLine Malware Operations

• Why Your Anti-Fraud, Identity & Cybersecurity Efforts Should Be Merged

• Chrome, Edge Browsers Targeted In Zaraza Bot Malware Attacks

• The Car Thieves Using Tech Disguised Inside Of Old Nokia Phones And Bluetooth Speakers

• New Lockbit Variant Targets MacOS, Another Relies On Conti Source Code

• Hikvision Denies Leaked Pentagon Spy Claim

• Digital Rights Updates with EFFector 35.5

• The best home automation systems of 2023

• Goldoson Malware Found in Dozens of Google Play Store Apps

• ‘Goldoson’ Malware Sneaks into Google Play Apps, Racks Up 100M Downloads

• KOTRA and KISIA will showcase 10 Korean cybersecurity companies at RSA Conference 2023

• Securely Hosting User Data in Modern Web Applications

• Cyber Attack news headlines trending on Google

• New resources to defend public health systems against cyber threats

• NSO Group Used at Least 3 iOS Zero-Click Exploits in 2022: Citizen Lab

• SpecterOps Scores $25M Funding to Secure ID Attack Paths

• MuddyWater Uses SimpleHelp to Target Critical Infrastructure Firms

• Armis Identifies the Riskiest Medical and IoT Devices in Clinical Environments

• Payment Processing Giant NCR Global Hit By Ransomware Attack

• NSO Group’s Pegasus Spyware Found on High-Risk iPhones

• Armis Announces Significant Business Momentum in Healthcare

• You Should Be Concerned Regarding Browser Modifiers; Here’s Why

• Elon Musk Says He’ll Create ‘TruthGPT’ to Counter AI ‘Bias’

• Hackers Exploit Action1 RMM in Ransomware Attacks

• Latitude Financial Breaches Customer Data, Coles Warns

• Nation-state threat actor Mint Sandstorm refines tradecraft to attack high-value targets

• Microsoft shifts to a new threat actor naming taxonomy

• New DDoS attacks on Israel’s enterprises should be a wake-up call

• YouTube Videos Distributing Aurora Stealer Malware via Highly Evasive Loader

• The Manhattan District Attorney Sued Jim Jordan. Why? And What Now?

• Water Wars: AUKUS Goes Nuclear

• Beyond CVEs: The Key to Mitigating High-Risk Security Exposures

• CISA adds bugs in Chrome and macOS to its Known Exploited Vulnerabilities catalog

• Phishing Operations Escalating As Threat Actors Utilize AI Tools

• How Online Casinos Partner With Video Game Developers To Create Unique Gaming Experiences ?

• Brit cops rapped over app that recorded 200k phone calls

• Swedish Radio Quits Twitter, Joining Others

• Securing Your Remote Workforce: How to Reduce Cyber Threats

• Lockr Raises $2.5 Million for Identity and Data Protection Platform

• Mandiant 2023 M-Trends Report Provides Factual Analysis of Emerging Threat Trends

• Recycled Core Routers Exposed Sensitive Corporate Network Info

• Alibaba Integrates AI Chatbot Into Collaboration App

• Mandiant: 63% of breaches were discovered externally in 2022

• Cyber Intrusion Detection Time at an All-Time Low

• ZeroFox Acquires LookingGlass

• As Consumer Privacy Evolves, Here’s How You Can Stay Ahead of Regulations

• New Solution: Learn Enterprise

• Guarding Against Insider Threats

• 10 Best Anonymous Instagram Story Viewer Apps (Free and Legal)

• Cyberinsurance Backstop: Can the Industry Survive Without One?

• Used Routers Often Come Loaded With Corporate Secrets

• Goldoson Android Malware Infects Over 100 Million Google Play Store Downloads

• SpecterOps raises $25M for attack path analysis to show hacker’s perspective

• DFIR via XDR: How to expedite your investigations with a DFIRent approach

• Apple MacOS Devices Now Subject Of LockBit Ransomware

• TUC Warns Workers Left Exposed To AI-Made Decisions

• WhatsApp, Signal Claim Online Safety Bill Threatens User Privacy and Safety

• Using LLMs to Create Bioweapons

• Wrong time to weaken encryption, UK IT chartered institute tells government

• Tim Cook Opens First Apple Store In India

• Retail Giant Walmart Ranks First in List of Brands Most Likely to be Imitated in Phishing Attempts in Q1 2023

• Cybersecurity M&A Roundup for April 1-15, 2023

• CISA Adds Chrome, macOS Bugs to Known Exploited Vulnerabilities Catalog

• Rheinmetall Suffers Another Cyberattack – Company Operations Still Functional

• New ”Domino” Malware Strain Targets Corporate Networks

• Iranian Hackers Using SimpleHelp Remote Support Software for Persistent Access

• Malware found in James Webb Space Telescope revealed by US President Joe Biden

• Hikvision Denies Illegally Supplying US Government

• Embracing Automation to Unlock New Innovations

• Cloud Security Alerts Take Six Days to Resolve

• The intricate relationships between the FIN7 group and members of the Conti ransomware gang

• Creative Software Maker Affinity Informs Customers of Forum Breach

• An Analysis of the BabLock (aka Rorschach) Ransomware

• 5 Types of Cyber Crime Groups

• WhatsApp, Other Messaging Firms Urge Online Safety Bill ‘Rethink’

• Digital Home Hygiene Checklist | Avast

• Fortra: Your Cybersecurity Ally

• A Day in the Life of a SOC Team

• Conversational Attacks Fastest Growing Mobile Threat

• How To Install Happymod In PC ( Windows 7, 8, 10, 11, and Mac )

• UK’s SMEs to Benefit From New Cyber Advisors

• March 2023 Cyber Attacks Statistics

• Ransomware Hackers Steal Sensitive Charity Data

• Quest Software Podcast: The Democratisation of Data: Episode 3: Management, Trust, and Visibility

• After BlackCat Ransomware Attack, NCR Suffers Aloha POS Outage

• Need to improve the detection capabilities in your security products?

• LockBit Ransomware Now Targeting Apple macOS Devices

• RSA Conference 2023: Meet Thales Where the World Talks Security!

• Podcast Episode: Safer Sex Work Makes a Safer Internet

• Capita IT breach gets worse as Black Basta claims it’s now selling off stolen data

• Phishing Attacks Surge as Threat Actors Leverage New AI Tools

• New Android Malware Infecting 60 Google Play Apps with Over 100M Installs

• Israeli surveillance firm QuaDream is shutting down amidst spyware accusations

• Wargaming an effective data breach playbook

• US alleges China created troll army that tried to have dissidents booted from Zoom

• Implementing a zero-trust system that uses workload identity across a service mesh in Kubernetes

• Imperva is an Overall Leader in the 2023 KuppingerCole Leadership Compass Data Security Platforms Report

• Pre-pandemic techniques are fueling record fraud rates

• Balancing cybersecurity with business priorities: Advice for Boards

• Military helicopter crash blamed on failure to apply software patch

• D3 Security Smart SOAR improves response to incidents

• Battery Bird protects customers from vulnerabilities in public Wifi networks

• Zyxel SCR 50AXE boosts network security for small businesses and remote workers

• Imperva collaborates with Fortanix to provide end-to-end data security

• LockBit Ransomware Expands Attack Spectrum to Mac Devices

• Woman tracks down and turns table on Airbnb scammer

• Update Chrome now! Google patches actively exploited flaw

• Beware: Fake IRS tax email wants your Microsoft account

• Ransomware in Germany, April 2022 – March 2023

• Living Off the Land (LOTL) attacks: Detecting ransomware gangs hiding in plain sight

• lockr raises $2.5 million to help customers take control of their personal identity and data

• Mobb raises $5.4 million and launches community tool

• How to create Portainer teams for restricted development access

• States abandon access to shared voter registration data

• FIN7, Former Conti Gang Members Collaborate on ‘Domino’ Malware

• New QBot campaign delivered hijacking business correspondence

• NCR Datacenter Affected By Massive Ransomware Attack

• LockBit crew cooks up half-baked Mac ransomware

• IT Security News Daily Summary 2023-04-17

• The best travel VPNs of 2023: Expert tested

• lockr Raises $2.5M

• Microsoft Azure Key Vault

• OPSWAT MetaAccess: NAC Product Review

• NSA’s National Centers for Academic Excellent (NCAE) Cyber Games to Hold National Finals on April 22

• Google Issues Emergency Chrome Update for Zero-Day Bug

• Chinese Cops Ran Troll Farm and Secret NY Police Station, US Says

• GAO wants Air Force, Navy plans for directed energy weapons to transition the ‘valley of death’

• How digital twins can enrich emergency response

• Pen Testers Need to Hack AI, but Also Question Its Existence

• Montana could be first state to ban TikTok

• How CISOs Can Craft Better Narratives for the Board

• Apple’s Macs Have Long Escaped Ransomware. That May Be Changing

• Google Uncovers “APT41” Tools Targeting Media And Job Sites

• Aloha PoS Restaurant Software Downed by Ransomware Attack

• How to establish network security for your hybrid workplace

• E-mail header analysis

• Goldoson Android Malware Target Korean Users Via Legit Apps

• Examine a captured packet using Wireshark

• From Zero to Hero: Learning Web3 With Infura and Python

• Why unifying endpoints and identities is the future of zero trust

• Child Advocates Blast Facebook For “Appalling” Push To Let Kids In Metaverse

• LockBit Ransomware Samples for Apple Macs Hint at New Risks for macOS Users

• Name That Toon: Lucky Charm

• New QBot Banking Trojan Campaign Hijacks Business Emails to Spread Malware

• Israeli Spyware Vendor QuaDream to Shut Down Following Citizen Lab and Microsoft Expose

• It’s 2023 – You MUST Know The SaaS Applications Your Employees Are Using

• USDA aims to build in-house tech talent, CX expertise with new digital services team

• Protect intellectual property with Govern 365 and Microsoft Purview

• What is Discord? An internet researcher explains the social media platform at the center of Pentagon leak of top-secret intelligence

• Montana Becomes First US State to Pass TikTok Ban

• This New Cybercrime Group Uses Ransomware to Target Businesses

• The Montana Legislature Banned TikTok

• Hackers Selling ChatGPT Premium Accounts On the Dark Web

• Embedded Systems Security Vulnerabilities and Protection Measures

• Report finds 82% of open-source software components ‘inherently risky’

• Ransomware Attack Hits Payments Giant NCR’s Datacenter

• Who’s Tackling Classified AI?

• Can Whistleblowing Save Tech?

• The Main Trends In The Development Of Mobile Application

• See product news and on-demand sessions from Microsoft Secure

• How to make sure the reputation of your products and company is good

• LockBit Ransomware gang focusing on MacOS

• OpenAI ChatGPT Bug Bounty Program Rewards Upto $20k

• NIST wants to mitigate smart home telehealth cybersecurity risks

• The Security and Productivity Implications of Low Code/No Code Development

• Qbot Banking Trojan Increasingly Delivered Via Business Emails

• Chinese App Uses Android Flaw To Spy On Users, CISA Warns

• QuaDream, Israeli iPhone hacking spyware firm, to shut down

• Credential harvesting malware appears on deep web

• How to build a cybersecurity deception program

• FBI and FCC warn about “Juicejacking” – but just how useful is their advice?

• Friendly Hacker, Keren Elazari, to Announced as Keynote Speaker at Infosecurity Europe 2023

• Zero Day In Google Chrome Patched: Bug Exploited In The Wild

• Mass Layoffs and Corporate Security Risks

• What’s the Difference Between CSPM & SSPM?

• FIN7 and Ex-Conti Cybercrime Gangs Join Forces in Domino Malware Attacks

• Cryptocurrency Scams: How to Detect and Avoid Them

• SpaceX Postpones Starship Launch, Citing Technical Glitch

• Shadow and Zombie APIs: How to Minimize Vulnerabilities

• How Zero Trust Changed the Course of Cybersecurity

• ZeroFox to Acquire Threat Intelligence Firm LookingGlass for $26 Million

• Top 5 Data Security RSAC 2023 Sessions to Attend

• China-linked APT41 group spotted using open-source red teaming tool GC2

• How To Win From Online Roulette

• Photographer Refuses Major Award For Image Created Using AI

• Marketing biz sent 107 million spam emails… to just 437k people

• Why IT Outsourcing Services are Vital for B2B Companies?

• Google Patched High-Severity Zero-Day Flaw With Latest Chrome Release

• Education Firm Offers GPT-4 Powered Tool Amidst Controversy

• Are Smart Home Devices Invading Your Privacy?

• Tour of the Underground: Master the Art of Dark Web Intelligence Gathering

• Google Uncovers APT41’s Use of Open Source GC2 Tool to Target Media and Job Sites

• Tencent ‘Enters Mass Production’ With Video Chip

• LockBit Ransomware Group Developing Malware to Encrypt Files on macOS

• Vice Society gang is using a custom PowerShell tool for data exfiltration

• Top 8 in-demand cybersecurity jobs for 2023 and beyond

• ICE Records Reveal How Agents Abuse Access to Secret Data

• Swatting as a Service

• US Congress Targets China’s Shein, Temu In Latest Backlash

• The Power of Zero Trust in DevOps Supply Chains

• How to Protect Your Ecommerce Site from Cybersecurity Threats

• UK Government (Kind Of) Bans TikTok

• SpaceX Prepares To Launch Most Powerful Rocket Ever Made

• Mobb Raises $5.4 Million in Seed Funding for Automatic Vulnerability Fixing Tool

• Payments Giant NCR Hit by Ransomware

• Experts warn of an emerging Python-based credential harvester named Legion

• QBot banker delivered through business correspondence

• How to Turn Off Phone Without Power Button (Android and iPhone) – A Complete Guide

• Firmware is on shaky ground – let’s see what it’s made of

• Silicon UK In Focus Podcast: Privacy-Preserving Machine Learning

• Spyware Company QuaDream Set to Close

• Vice Society Ransomware Using Stealthy PowerShell Tool for Data Exfiltration

• Sega Offers £625m For Studio Behind ‘Angry Birds’

• CISA: Patch Bug Exploited by Chinese E-commerce App

• Anti-malware tests: How to interpret them

• Cybersecurity in the Energy Sector: Risks and Mitigation Strategies

• What Is Microsegmentation and 5 Compelling Security Use Cases

• Police Crack Comms to Bust Money Laundering Group

• New Zaraza Bot Credential-Stealer Sold on Telegram Targeting 38 Web Browsers

• Software developers, how secure is your software?

• Western Digital Hack – Attackers Demanding “Minimum 8 Figures” as Ransom

• Student requested access to research data. And waited. And waited. And then hacked to get root

• What Are Computer Worms And How To Prevent Them

• Economic uncertainty drives upskilling as a key strategy for organizations

• WhatsApp introduces new mobile security features

• How reliable are Cloud based Security solutions

• API security: the new security battleground

• AI verification systems give businesses an edge over scammers

• AI tools like ChatGPT expected to fuel BEC attacks

• 10 Best Zippyshare Alternatives – Best File Sharing Services

• Update now: Google emits emergency fix for zero-day Chrome vulnerability

• On Validation, pt II

• 5 DNS Troubleshooting Tips for Network Teams

• Securing MQTT With Username and Password Authentication

Generated on 2023-04-18 23:55:33.532355