IT Security News Daily Summary 2023-05-04

• DISA wants to take Thunderdome pilot to full production in ’30 to 60 days,’ director says

• OneTrust Enhances Data Discovery and Governance by Introducing AI-Powered Document Classification

• InsightCyber Launches Platform to Provide Cyber Threat Management and Security to Global Critical Infrastructure

• As Utah’s porn law kicks in, adult site blocks access in the state

• HackerOne: How the economy is impacting cybersecurity teams

• Netskope: Attackers Double Down on Social Engineering Techniques and Malicious Functionalities

• Cisco EoL SPA112 2-Port Phone Adapters are affected by critical RCE

• The Importance Of Endpoint Security When Implementing Zero Trust

• Apple uses iOS and macOS Rapid Security Response feature for the first time

• Warning of AI’s danger, pioneer Geoffrey Hinton quits Google to speak freely

• At RSA Conference 2023, tales of real-world cyberattacks and warnings of fearsome new threats

• Hacker steals Bitcoins from Russia, destroys them or donates them to Ukraine

• Mastering Patch Management: 10 Essential Best Practices for Optimal Security

• ChatGPT and You

• Pentagon CIO warns against pause in AI development

• Cybersecurity execs ponder software liability implementation

• Ransomware attack disrupts Dallas police, city services

• S3 Ep133: Apple takes “tight-lipped” to a whole new level

• Policing the wild frontiers of digital communications

• ‘Cybersickness’ from VR headsets hits women more often

• Gmail gets blue verification checks to protect against spoofing and phishing

• Ubuntu Pro now available on Amazon Web Services

• Ransomware gangs display ruthless extortion tactics in April

• Google Launches Cybersecurity Career Certificate Program

• Best SIEM Tools List For SOC Team – 2023

• Building innovation through marketplace

• Top Victim of AI Voice Scams with 83% Losing Money

• Cyberpress Launches Cybersecurity Press Release Distribution Platform

• Conversational query: Kinetica builds ChatGPT front end to SQL database

• Google Launches Passkeys in Major Push for Passwordless Authentication

• Microsoft Opens Up AI-Featured Bing Search Engine To All Users

• Are Recommender Systems Fair? A Critical Look at the Challenges and Solutions

• Absolute’s 2023 Resilience Index: America’s Cybersecurity

• AI pioneer Geoffrey Hinton says AI is a new form of intelligence unlike our own. Have we been getting it wrong this whole time?

• The best travel VPNs of 2023: Expert reviewed

• How Public-Private Information Sharing Can Level the Cybersecurity Playing Field

• #World Password Day: Protecting corporate social media passwords

• Apple issues first Rapid Security Response for macOS, iOS

• Apple’s First Rapid Security Response, New Mac Malware, and Insecure Google Authenticator Sync – Intego Mac Podcast Episode 290

• What “Beginner” Skills do Security Leaders Need to Refresh?

• Brightline Hack Exposes Data of Over 780,000 Child Mental Health Patients

• #WorldPasswordDay – Solo, Boba, and Leia among most breached Star Wars passwords

• Strike three: FTC says Meta still failing to protect user privacy

• Businesses Must Stay up With Cybercriminals, as They Become More Sophisticated

• The impact of blockchain technology on the future of finance

• Google Deploys Passkeys, Cites ‘Beginning Of End’ For Passwords

• 2023-05-02 – Quick post: obama259 Qakbot (Qbot) infection with Dark Cat VNC

• Why APIs Will Be This Year’s Most Targeted Service

• Proposals floated for streamlining broadband permitting

• Creating strong, yet user‑friendly passwords: Tips for your business password policy

• Meta Tackles Malware Posing as ChatGPT in Persistent Campaigns

• Experts devised a new exploit for the PaperCut flaw that can bypass all current detection

• Google Implements Passkeys For Secured Sign-in To Google Accounts

• Google Ads Exploited to Tempt Corporate Employees Into Installing LOBSHOT Backdoor

• Facebook Meta uncovers Social Media Espionage

• UK’s CMA Launches Review Of AI Market

• How to make SSH even easier to use with config files

• Fraud Detection Startup Moonsense Raises $4.2 Million in Seed Funding

• Android Spyware BouldSpy Linked to Iranian Government

• Survey: State of cybersecurity in the UK

• Facebook warns of a new information-stealing malware dubbed NodeStealer

• Silicon Insights: The Past, Present and Future of Account Based Marketing: Part 1

• Meta Swiftly Neutralizes New ‘NodeStealer’ Malware

• Using Threat Intelligence to Get Smarter About Ransomware

• Microsoft Expands AI Access to Public

• Satori Releases Open Source Data Permissions Scanner for Enterprises

• World Password Day: 2 + 2 = 4

• Researchers Uncover New Exploit for PaperCut Vulnerability That Can Bypass Detection

• Researchers Discover 3 Vulnerabilities in Microsoft Azure API Management Service

• Go Ahead, Forget That Password. Use A Passkey Instead, Says Google

• Facebook Cracks Down On Malware Actors Targeting Biz Accounts

• FTC Says Facebook Broke Terms Of $5B Data Privacy Settlement

• Operation SpecTor Smashes Global Dark Web Drug Empire

• Google Will Retire Chrome’s HTTPS Padlock Icon Because No One Knows What It Means

• CVE-2023-29552: Abusing the SLP Protocol to Launch Massive DDoS Amplification Attacks

• AppOmni releases Salesforce Community Cloud Scanner

• City of Dallas hit by ransomware

• Airgap Networks enhances its Zero Trust Firewall with ThreatGPT

• HUB Security raises up to $16 million to fuel technology development

• AI Spera launches Criminal IP FDS plugin to prevent fraudulent login attempts on WordPress

• To fight cyber extortion and ransomware, shift left

• Actionable Threat Intel (I) – Crowdsourced YARA Hub

• PentestGPT – A ChatGPT Powered Automated Penetration Testing Tool

• Goodbye, old friend 👋🔒

• Overriding HTTP Response Headers in Chrome Dev Tools

• Protecting your password: Create an unbreakable one

• What is IT Asset Management (ITAM)? Definition, Benefits & Types

• Famine to Feast and Back: Startups Adjust to Economic Realities

• 1Password: Passkey support is coming in June

• Quarter of Staff Duplicate Passwords, Survey Finds

• Goodbye, old friend 👋🔒

• 79% of Cyber Pros Make Decisions Without Threat Intelligence

• HUMAN Security Newest Competitor in 2023 Homeland Security Awards

• Patch now! The Mirai IoT botnet is exploiting TP-Link routers

• Drive Managed Service Bookings and Better Business Outcomes

• Google Announced Game-changing Passwordless Authentication “Passkeys”

• Goodbye, old friend 👋🔒

• Why Backup Jira: Is There Any Risk of Data Loss?

• Apple Releases First-Ever Security Updates for Beats, AirPods Headphones

• Harris to Meet With CEOs About Artificial Intelligence Risks

• US Announces Takedown of Card-Checking Service, Charges Against Russian Operator

• Cisco Warns of Critical Vulnerability in EoL Phone Adapters

• Microsoft Patches Serious Azure Cloud Security Flaws

• Arthur Shield tackles safety and performance issues in large language models

• How Microsoft can help you go passwordless this World Password Day

• Goodbye, old friend 👋🔒

• Meta Unravels Social Media Cyber Espionage Operations In South Asia

• Goodbye, old friend 👋🔒

• Is it time to ‘shield’ AI with a firewall? Arthur AI thinks so

• Meta Uncovers Massive Social Media Cyber Espionage Operations Across South Asia

• Why the Things You Don’t Know about the Dark Web May Be Your Biggest Cybersecurity Threat

• ChatGPT Privacy Concerns are Addressed by PrivateGPT

• Marshals’ Computer System Still Down 10 Weeks After Hack

• Hackers Sell Coinbase Accounts for as low as $610 on Dark Web

• Uncovering the Decoy Dog C2 Exploit: Infoblox’s Finds Dangerous Threat

• Authorities Dismantled the Card-Checking Platform Try2Check

• Goodbye, old friend 👋🔒

• How to Handle SSL Certificates In Selenium WebDriver?

• Intelligent Waves’ Returns to Compete in Third Consecutive ‘ASTORS’

• Appeals Court Dismisses Lawsuit To Break Up Meta

• Goodbye, old friend 👋🔒

• FluHorse – Check Point Research Exposes Newly Discovered Malware Disguised as Legitimate and Popular Android Apps Targeting East Asia

• Russia-linked Sandworm APT uses WinRAR in destructive attacks on Ukraine’s public sector

• Large Language Models and Elections

• Intruder launches continuous attack surface monitoring for SMBs

• Protecto boosts privacy protection with GPU technology from NVIDIA

• Apricorn introduces Aegis NVX hardware-encrypted USB storage device

• ChatGPT and other AI-themed lures used to deliver malicious software

• Goodbye, old friend 👋🔒

• Meet Thales at the KuppingerCole European Identity and Cloud Conference 2023

• Apple’s First Rapid Security Response, New Mac Malware, and Insecure Google Authenticator Sync

• Goodbye, old friend 👋🔒

• AV-Comparatives reveals top anti-phishing solutions

• A practical guide to React Native authentication

• Cybersecurity – Change is coming and that’s a good thing

• Meta Takes Down Malware Campaign That Used ChatGPT as a Lure to Steal Accounts

• Not quite an Easter egg: a new family of Trojan subscribers on Google Play

• Apple, Google Submit Proposal To Tackle AirTag Stalking

• Goodbye, old friend 👋🔒

• OMB preps guidance on AI in government

• Protect your business by developing valuable cybersecurity skills for just $40

• Consumer Group Slams Bank App Fraud Failings

• US Government Disengages Try2check Platform On The Dark Web

• Maximising Security in a Digital Age: World Password Day Insights

• BSidesLjubljana 0x7E7 CFP is still open!

• Goodbye, old friend 👋🔒

• Malicious HTML Attachment Volumes Surge

• City of Dallas shut down IT services after ransomware attack

• European Data at Risk With Tick-box GDPR Compliance and High Cyberattack Volumes

• FBI Seizes 9 Virtual Currency Exchange Services to Block Ransom Payments

• Goodbye, old friend 👋🔒

• US Authorities Dismantle Dark Web “Card Checking” Platform

• Password Manager Dashlane wants to eliminate the master password

• Goodbye, old friend 👋🔒

• Australia to restore dedicated privacy role amid growing data security threats

• The Pros And Cons Of Shopping On E-commerce Websites

• Do you know what your supply chain is and if it is secure?

• Goodbye, old friend 👋🔒

• Goodbye, old friend 👋🔒

• Godfather of AI quits Google to save the world

• Cyber Attack on Sweden Parliament just before Ukraine drone attack on Moscow Kremlin

• Goodbye, old friend 👋🔒

• Goodbye, old friend 👋🔒

• Goodbye, old friend 👋🔒

• How AI is reshaping the cybersecurity landscape

• Goodbye, old friend 👋🔒

• Goodbye, old friend 👋🔒

• Improving your bottom line with cybersecurity top of mind

• Goodbye, old friend 👋🔒

• Unpaid open source maintainers struggle with increased security demands

• Top API vulnerabilities organizations can’t afford to ignore

• Amazon Inspector allows search of its vulnerability intelligence database

• Goodbye, old friend 👋🔒

• Goodbye, old friend 👋🔒

• Ransomware Attack Affects Dallas Police, Court Websites

• Goodbye, old friend 👋🔒

• Goodbye, old friend 👋🔒

• Best Amazon security camera deals of May 2023: Ring and Blink sales

• Goodbye, old friend 👋🔒

• Goodbye, old friend 👋🔒

• Go ahead, forget that password. Use a passkey instead, says Google

• Goodbye, old friend 👋🔒

• Best Amazon security camera deals in May 2023: Ring and Blink sales

• Goodbye, old friend 👋🔒

• Upcoming webinar: Is EDR or MDR better for your business?

• Google Authenticator WILL get end-to-end encryption. Eventually.

• Google takes CryptBot to the wood shed

• Oracle WebLogic Server vulnerability added to CISA list as “known to be exploited”

• How to keep your ChatGPT conversations out of its training data

• Meta does the ‘We found baddies and crushed them’ thing again – this time for AI

• Goodbye, old friend 👋🔒

• Goodbye, old friend 👋🔒

• Goodbye, old friend 👋🔒

• How one researcher used ChatGPT to fool a hacker

• Goodbye, old friend 👋🔒

• DOD CIO touts a ‘pipeline’ of JWCC task orders and future zero trust options

• The Daily Number of Human-Driven Cyber Incidents Increased by 1.5 Times in 2022

• Threat Spotlight: Proportion of Malicious HTML Attachments Doubles Within a Year

• Moonsense Raises $4.2M in Seed Funding and Introduces Next-Gen User Behavior and Network Intelligence Solution

• Authorities dismantled the card-checking platform Try2Check

• IT Security News Daily Summary 2023-05-03

• Secure SD-WAN Solution for Communication over Satellite and Networks in Adverse and DDIL Conditions

• Goodbye, old friend 👋🔒

• Smarter local airports via digital twins

• Google Chrome Drops Browser Lock Icon

• Give NotPetya-hit Merck that $1.4B, appeals court tells insurers

• Goodbye, old friend 👋🔒

• Pension systems’ built-in modernization deadline: IT staff retirements

• Tracked by hidden tags? Apple and Google unite to propose safety and security standards…

• FTC Alleges That Facebook Has Violated Children’s Privacy

• DNA Sequencing Equipment Vulnerability Adds New Twist to Medical Device Cyber Threats

• Goodbye, old friend 👋🔒

• Dallas City Hit By Ransomware Assault Affects 2.6 Million People

• How To Survive a Ransomware Attack and Fix Ransomware Breach Face

• T-Mobile Discloses Second Data Breach…This Year

• Goodbye, old friend 👋🔒

• Cloud adoption gains traction in states

• Your phone contains your most personal information. Here’s how to keep it safe

• Chrome’s HTTPS padlock heads to Google Graveyard

• Google rolls out passkeys in service of passwordless future

• Seized: 9 Crypto Laundering Sites Used by Ransomware Gangs

• Goodbye, old friend 👋🔒

• 10 ways ChatGPT and generative AI can strengthen zero trust

• Pentagon network chiefs are putting automation to work

• Court Rejects Merck Insurers’ Attempt to Refuse Coverage for NotPetya Damages

• What’s the Secret to Finding the Next Big Thing in Cybersecurity?

• 9 Cryptocurrency Laundering Sites Seized by Law Enforcement

• Goodbye, old friend 👋🔒

• Passwordless sign-in with passkeys is now available for Google accounts

• What are Residential proxies and what is their use?

• Goodbye, old friend 👋🔒

• Privacy Risk of ChatGPT for Software Developers

• Check Point Software Applauds U.S. Senators for Investigating Use of AI to Create Malicious Phishing Emails with the IRS

• Google now lets you sign in with a passkey instead of a password

• Goodbye, old friend 👋🔒

• U.S. Marshals to unveil ‘fully reconstituted system’ following ransomware attack

• Malware Campaigns Abusing Telegram Bots to Spread Rapidly

• Goodbye, old friend 👋🔒

• New bill would add disclosure requirements for AI in political ads

• Why Observability Alone Is Not Enough to Keep Your Organization Safe

• Goodbye, old friend 👋🔒

• Checks joins Google with LLM-driven mobile app compliance scanner

• The best VPN deals right now: May 2023

• Anatomy of a Malicious Package Attack

• Looking at a penetration test through the eyes of a target

• How to establish network security for your hybrid workplace

• Today’s CISO Insights – How to Tackle the Quantum Threat

• UK’s CMA Denied Appeal Over Apple Ruling

• Goodbye, old friend 👋🔒

• Top Strategies for Effective Mobile App Testing and Quality Assurance

• CISA Advises FCC Covered List For Risk Management

• Avetta releases Cyber Risk Solution for complete supply chain cyber health visibility

• Keysight launches cybersecurity partnership program for MSSPs

• Goodbye, old friend 👋🔒

• The Importance of Software Security

• Apple, Google Propose Standard to Combat Misuse of Location-Tracking Devices

• Court Rules in Favor of Merck in $1.4 Billion Insurance Claim Over NotPetya Cyberattack

• Apple and Google Unveil Industry Specification For Unwanted Tracking

• Forrester names Microsoft a Leader in 2023 Infrastructure-as-a-Service Platform Native Security report

• Goodbye, old friend 👋🔒

• Trust will be key for US Notify—a text message service for state benefits

• Passkeys Support Added to Google Accounts for Passwordless Sign-Ins

• Netgear Vulnerabilities Lead to Credentials Leak, Privilege Escalation

• Studies show ransomware has already caused patient deaths

• Earth Longzhi Uses “Stack Rumbling” to Disable Security Software

• Meta Says ChatGPT-Related Malware Is On The Rise

• Tor Project, LGBTQ Groups, And CDT Sound Alarm Over Efforts To Weaken Encryption

• Microsoft Warns Iran Increasing Its Cyber Influence Operations

• Mirai Botnet Loves Exploiting Your Unpatched TP-Link Routers

• ARM Files For IPO, But Not In London

• Goodbye, old friend 👋🔒

• Hackers are taking advantage of the interest in generative AI to install Malware

• Dashlane Passwordless Login eliminates the need to create a master password

• Attackers are trying to exploit old DVR vulnerabilities (CVE-2018-9995, CVE-2016-20016)

• ManageEngine ADSelfService Plus adds offline MFA to improve remote work security

• Vanta Vendor Risk Management automates security reviews and remediates issues

• You can now use passkeys to login into your Google account

• 50 Chinese Hackers for Each FBI Cyber Agent, Bureau Boss Says

• Hackers Leak Photos to Mock Western Digital’s Cyberattack Response

• Twitter To Let Publishers Charge To Read Articles

• New Frontiers for the Contact Centre

• Goodbye, old friend 👋🔒

• Is Your Critical SaaS Data Secure?

• Hackers Promise AI, Install Malware Instead

• Chrome 113 Released With 15 Security Patches

• Chinese Hacker Group Earth Longzhi Resurfaces with Advanced Malware Tactics

• Google Introduces Passwordless Secure Sign-In with Passkeys for Google Accounts

• Google Play Blocked 1.43 Million Malicious Apps in 2022

• Goodbye, old friend 👋🔒

• Meta Expunges Multiple APT, Cybercrime Groups from Facebook, Instagram

• Legitimate Software Abuse: A Disturbing Trend in Ransomware Attacks

• Card Skimmers and ATMs Used to Drain EBT Accounts in SoCal

• Goodbye, old friend 👋🔒

• Hotels at Risk From Bug in Oracle Property Management Software

• Data Leak: Critical Data Being Exposed From Salesforce Servers

• Top 5 Reasons Why Cybersecurity is Essential For Organisations

• Insider Risk: Unconventional Thoughts and Lessons Learned

• New BGP Protocol Flaws Let Attackers Trigger DoS Attacks

• Goodbye, old friend 👋🔒

• Google says goodbye to passwords with passkeys launch

• Palo Alto Networks Unveils New Cloud Firewall for Azure

• Imperva Red Team Discovers Vulnerability in TikTok That Can Reveal User Activity and Information

• DTX & UCX Manchester 2023 Agenda goes live

• So long passwords, thanks for all the phish

• The Dangers of Bluebugging: Andhra Pradesh Police Caution Smartphone Users

• Godfather Of AI, Geoffrey Hinton, Quits Google

• Goodbye, old friend 👋🔒

• Google Is Rolling Out Passkeys, the Password-Killing Tech, to All Accounts

• Meta Moves to Counter New Malware and Repeat Account Takeovers

• Level Finance Crypto Exchange Hacked, After Two Security Audits

• Apple and Google combat unwanted Bluetooth location-tracking

• Immersive Labs Resilience Score strengthens executive decision making in cyber crises

• Goodbye, old friend 👋🔒

• Exploitation of BGP Implementation Vulnerabilities Can Lead to Disruptions

• Chinese APT Uses New ‘Stack Rumbling’ Technique to Disable Security Software

• Open Banking: A Perfect Storm for Security and Privacy?

• Goodbye, old friend 👋🔒

• Download the eBook: What Does it Take to be a Full-Fledged Virtual CISO?

• Operation SpecTor: $53.4 Million Seized, 288 Vendors Arrested in Dark Web Drug Bust

• Join Us for Our Public Sector Ignite Cybersecurity Conference

• BlackBerry To Review Strategic Options

• Goodbye, old friend 👋🔒

• T-Mobile suffers second data breach this year

• Google Chrome will lose the “lock” icon for HTTPS-secured sites

• Goodbye, old friend 👋🔒

• Apple and Google Join Forces to Stop Unauthorized Tracking Alert System

• SolarWinds Detected Six Months Earlier

• Goodbye, old friend 👋🔒

• US, Ukraine Shut Down Cryptocurrency Exchanges Used by Cybercriminals

• SECURITY ALERT: Danish Customers Targeted by Active PostNord DK Phishing Campaign

• The 5 Pillars of IT Security (according to the NHS)

• Three-Quarters of Firms Predict Breach in Coming Year

• Häfele Recovers from Ransomware Attack using SASE

• 3 Tips to Strengthen AWS Container Security

• Cybersecurity in the Cloud: The Challenging Hurdles It Has To Overcome

• Government’s New Fraud Strategy Gets Lukewarm Reception

• How To Install Nudify In PC ( Windows 7, 8, 10, and Mac )

• Dark Web Bust Leads to Arrest of 288 Suspects

• Hackers Exploiting 5-year-old Unpatched Vulnerability in TBK DVR Devices

• Researchers found DoS flaws in popular BGP implementation

• Why performing security testing on your products and systems is a good idea

• T-Mobile Hacked – Attackers Accessed Over 37M Sensitive Data

• Mirror Trading International’s Cornelius Johannes Steynberg and his $3.4 Billion USD Default Judgement

• CISA Issues Advisory on Critical RCE Affecting ME RTU Remote Terminal Units

• FBI Uncovers 9 Crypto Exchanges In Ransomware Laundering

• FBI seizes 9 cryptocurrency exchange websites supporting cyber criminals and ransomware spread

• Who are Cyber Swindlers

• With Imperva’s DRA and ServiceNow, you can avoid burning out your cyber security employees

• Malicious content lurks all over the web

• Tython: Open-source Security as Code framework and SDK

• 5 API security best practices you must implement

• Securing the Edge Ecosystem Global Research released – Complimentary report available

• Veza for SaaS Apps secures sensitive data against breaches, ransomware, and insider threats

• KnectIQ SelectiveTRUST prevents credential misuse

• Security in the cloud with more automation

• The importance of being certified

• Box AI brings intelligence to enterprise content

• CYTRIO unveils privacy UX platform to help businesses with privacy laws

• The Evolution of Data Security Solutions

• Trellix expands AWS integrations to provide users with centralized visibility of their security issues

• Spin.AI partners with Google to reduce the risk of Chrome extensions for SecOps teams

• Is it OK to train an AI on your images, without permission?

• 5 Best SIEM Tools & Software for 2023

• The Kids Online Safety Act is Still A Huge Danger to Our Rights Online

Generated on 2023-05-04 23:55:33.523031